last executing test programs:

1m25.247431591s ago: executing program 3 (id=365):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m24.268343929s ago: executing program 3 (id=377):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x1, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x4008040)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback}, 0x7d})

1m24.11299817s ago: executing program 3 (id=378):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x2, 0x400, 0x0, 0x37d}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000000))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r2 = syz_io_uring_setup(0x496, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r2}, 0x0, &(0x7f0000000100), &(0x7f0000000000))
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020)

1m23.131422498s ago: executing program 3 (id=380):
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==")
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0)

1m21.892956785s ago: executing program 3 (id=384):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x15, 0x3, 'ovf\x00', 0x1, 0x4, 0x72}, 0x2c)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, @dev, @local}}}}}}, 0x0)

1m15.304157793s ago: executing program 3 (id=395):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

1m15.080826038s ago: executing program 32 (id=395):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

52.723626733s ago: executing program 4 (id=444):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000)

52.362431528s ago: executing program 4 (id=445):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000100000000000000700b5000000087c9a0095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[], 0x0)
syz_emit_ethernet(0x441, &(0x7f0000000800)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x8, 0x6, "8da686", 0x407, 0x21, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x39}, {[@srh={0x33, 0x0, 0x4, 0x0, 0x1, 0x20, 0x1}, @hopopts={0x3b, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}, @routing={0x5e, 0x12, 0x2, 0x10, 0x0, [@mcast2, @local, @mcast2, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @local]}, @dstopts={0xe0, 0x15, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xc9, 0x86, "bcbcfa1539156de57351a42c4f40388389a5e43a540f0900332dfe098e925faf1761d9d5cd001df485e1735ea5ea54d14a5a48d7c77ececdca8d23aba8d3a96b202682a91b8a1ebbb9b8121323ca58672fd852829560b31dde060a4e3da364bd4904ee2ec02dd6acb7f435cf94aa0822774663585e8747c22e6272a625b14cea587e4604b4c7"}, @padn, @ra={0x5, 0x2, 0xdeb}]}, @hopopts={0x2e, 0x4, '\x00', [@ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0xfa}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x3c, 0x0, 0xcb, 0x0, 0x0, 0x1, 0x65}, @dstopts={0x64, 0x17, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x1}, @jumbo, @calipso={0x7, 0x10, {0x3, 0x2, 0xd, 0x1, [0x101]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0xc, 0xbde2, [0x80, 0x1, 0x80000000, 0xf140, 0x2, 0x40]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xc5, 0x0, [0x1ff, 0x52, 0x1, 0x6, 0x4, 0x7f, 0x7]}}]}, @hopopts={0x81, 0x1b, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x6, 0xcb, "93f898a00e863b881575f8ebd1314a345bb63e247ebc8f80ed5b04db452f9795496ecc93857434013429074d924e2f84784cb41105557f5b5b6a0b09e43b9eee4edb4b9f2477b16115229238c17dedabd8faf3e44b26747009720085d77c75a4dc9e7fa3b3778c4c8b436f85a7ee8395d9a5596243fa0fb87ea2378f6312dfd6b91a57ba8b10d14906672b8e9959c2f6ab06f530fce83cbb7ed6b50d970a37761b708ab76684a2c9c5930ba6ddbb55b41d9818cf42d641c23a9acb8b3f58a802fc280829301874e87a287c"}]}], {{0x4e21, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x2, 0x2, "7c1185", 0x0, "d04595"}, "2e7b5012b1c7731037db768b7e02db63786542913586aebfe5566ecdd29a2150eeb4f28a5e918f3255ea95601773dccbc980b365f01ccc844ae6dc9663a38c023b8df9880a240f862581527339f96006efb751f96769dae458915cd77bfe5dbabe9152ed4a639fefb44fdcbc461f8fe7062a63596446ccd1c373d46d0c3915e217015e31bd1f5e38f59aee66c46fd290aefcd3f462e962"}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x8000}}}}}}}, 0x0)

52.20099235s ago: executing program 4 (id=446):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
epoll_wait(r1, 0x0, 0x0, 0x7)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe(&(0x7f0000000440))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
listen(r3, 0x3)
accept4$bt_l2cap(r3, 0x0, 0x0, 0x80000)
syz_io_uring_setup(0x3726, 0x0, 0x0, &(0x7f0000000340), 0x0)

51.260071795s ago: executing program 4 (id=448):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@i_version}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1001f0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
syz_emit_vhci(0x0, 0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x16}])

50.433091833s ago: executing program 4 (id=453):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143142, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2902, 0x1ff)
write(r2, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6)
r3 = dup(r0)
sendfile(r1, r3, 0x0, 0x1000000201005)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
copy_file_range(r4, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x100000000000000)

49.129425653s ago: executing program 4 (id=459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x4, 0xfc, 0x3, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
pread64(r1, &(0x7f0000002300)=""/176, 0xb0, 0x4)

48.520082276s ago: executing program 33 (id=459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x4, 0xfc, 0x3, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
pread64(r1, &(0x7f0000002300)=""/176, 0xb0, 0x4)

47.808805505s ago: executing program 0 (id=461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

47.187096589s ago: executing program 0 (id=466):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x2}}]}})

46.848981992s ago: executing program 0 (id=468):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0xfffffff0, 0x100, 0xfffffffb, 0x2}]})

46.552776102s ago: executing program 0 (id=469):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0xf94c, 0x0, [0x5, 0x19, 0x5, 0x38d5], 0x0})

43.792867334s ago: executing program 0 (id=471):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, 0x0, 0x20000011)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x63, 0x68}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaa8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd24}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1cc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20010005}, 0x20000080)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x1ff, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x4], 0x10000, 0x202})
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

40.756642405s ago: executing program 0 (id=474):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev}, {0x0, 0x88be, 0xc, 0x0, @opaque="8c55309d"}}}}}}, 0x32)

40.354543504s ago: executing program 34 (id=474):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev}, {0x0, 0x88be, 0xc, 0x0, @opaque="8c55309d"}}}}}}, 0x32)

17.090658522s ago: executing program 6 (id=522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_AIE_ON(r1, 0x7001)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1})
fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14.688758799s ago: executing program 6 (id=524):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x2, 0x400, 0x0, 0x37d}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000000))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r3 = syz_io_uring_setup(0x496, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, 0x0, &(0x7f0000000100), &(0x7f0000000000))
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

10.920504841s ago: executing program 6 (id=529):
socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_AIE_ON(r0, 0x7001)
fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0)

9.019381803s ago: executing program 5 (id=534):
syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaa8daaaaaa0180c20000000800462100280068001d0921907864010100ac1414aa820200004e21"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

7.878775633s ago: executing program 5 (id=538):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0)

7.62752472s ago: executing program 5 (id=540):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004"], 0x70}}, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "80ce5334838060e22fad96334ff9fc2e4a563b21cd6e617b02e75cf051f97f52ab2cf9b4135ed0c306621d6d2ebef1cac0d72fc5be8ef1db128953f63f49a267", 0x1e}, 0x48, 0xfffffffffffffffa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

7.033229371s ago: executing program 5 (id=542):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x1, 0x4, 0x0, 0x3, 0xff, '\x00', 0x1395}})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0xfffffe7f, 0x0, {0xffffffffffffffff, 0x1, 0xfffffffc, 0x3, 0x9}, 0x80000000})
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYRES64], 0x44}}, 0x20004040)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x4, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r4], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r9 = fcntl$dupfd(r1, 0x0, r8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000080)={0x8, @tick=0x8, 0x8, {0x6, 0x4}, 0x1, 0x0, 0x4})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil)
ioctl$DVB_DVR_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000000040)={0xfc000000, 0x80000})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1)
process_vm_writev(0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)=""/162, 0xa2}, {&(0x7f0000002940)=""/145, 0x91}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/204, 0xcc}, {0x0}, {0x0}], 0x6, &(0x7f00000028c0)=[{&(0x7f0000001640)=""/215, 0xd7}, {&(0x7f0000001740)=""/52, 0x34}, {&(0x7f0000002a00)=""/73, 0x49}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/105, 0x69}, {&(0x7f0000002880)=""/42, 0x2a}], 0x6, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40)

6.360927058s ago: executing program 5 (id=545):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x29, 0x6, 0x80000000, 0x0, 0xfa, 0x6, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x1, 0x3, [0x6c, 0x7]}})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg(r5, &(0x7f0000007180)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
socket(0xa, 0x3, 0x3a)

5.833952285s ago: executing program 1 (id=548):
io_uring_setup(0x20ba, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0xfff7fffc})
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000003c0)={0x2, 0x3, "d1c236566863f1bd3f54e05cc46654796a3b800413745c40579438931fffaa91", 0x8001, 0x4, 0xc, 0x9, 0x1980})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)

3.648172307s ago: executing program 5 (id=554):
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
fcntl$notify(r4, 0x402, 0x8000000b)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

3.350596367s ago: executing program 2 (id=556):
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.756912599s ago: executing program 1 (id=557):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x63, 0x68}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaa8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd24}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1cc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20010005}, 0x20000080)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x1ff, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x4], 0x10000, 0x202})
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

2.747900299s ago: executing program 2 (id=558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(0x0, r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.661255345s ago: executing program 1 (id=559):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="0201f5020e0000002cbd7000fcdbdf25050006003c0000000a004e230000000a20010000000000000000000000000000000100000000000005000500ff0000000a004e2300000009ff01000000000000000000000000000107000000000000000200130003"], 0x70}, 0x1, 0x7}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWINFO(r2, 0x4004480d, 0x0)
read$hidraw(r2, 0x0, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x77)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, 0x0, 0x0, 0x400c0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000100000fff8000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001d9924cf2e70864c288f57db95ac94eab4414bcbe4205dcccab840deed0c7ad0e240012379ba416beedfaa11b6bd65bc495b36d24dad7d73224fa1dae"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x148, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xfa, 0x6, 0x1, 0x0, "230803dcc0614844604bebe0e687edca4b965caab2168172cb852a56b1d5188a37b02bf3f4871aba86a3a36310f5cf7ea6ba45521797741a1256a5c2591e988b7859db9c3969eac68d24f58e3f8c2e9dff98f3e5c506a22abc5af7137a7a74743855d08a52b2f18ec66fe4f87d15122bf8ab358a04b32d8097236d4c1b1863d8d80cdc46c0d61a612ddd23e81e6fd32ede47582fe1fda756d3c672d27276a3c61c5630b7cb17dec6dac07a6597e96dcf9fc1e6ef074a1d04a080063f01a781c39ff96304b335723e9cdd0328a908e3934b7783c5d30f8baf0988c527d7dcba19b642dccf4fcb1e134b31f4779fe18b8ad8d86fdbb5a2"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
write$dsp(r3, &(0x7f00000001c0)='B', 0x1)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0)
mprotect(&(0x7f00003b9000/0x4000)=nil, 0x4000, 0x2000006)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)

2.29914945s ago: executing program 2 (id=561):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x48}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x720, 0x4)
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041)

2.068868777s ago: executing program 6 (id=563):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket(0x10, 0x3, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x9c414000)
r1 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000)

1.816082964s ago: executing program 7 (id=565):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

1.787316566s ago: executing program 2 (id=566):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb67", 0x98}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2", 0x82}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="b1626bc6919ec97052df9a59fe06c41fe8fe39455b86618d6df8ec43c16734b9b45cc1d911799b203be61f05c7c4c0caeb54fa65800d96c9a841c845743e049184cbfd55089c97019241b7e0df", 0x4d}, {&(0x7f0000000700)="8932b50b46c811171861989611ddeaf54c3e58970ff8b1a96ced696164770547", 0x20}], 0x2}}], 0x4, 0x2090)

1.545779013s ago: executing program 2 (id=567):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5512, &(0x7f0000005b40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2701, 0x45)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x15e)
setxattr$system_posix_acl(&(0x7f0000000300)='./bus\x00', &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[], 0x4c, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.544649643s ago: executing program 7 (id=568):
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615c"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.204109267s ago: executing program 1 (id=569):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x63, 0x68}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaa8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd24}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1cc}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20010005}, 0x20000080)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x1ff, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x4], 0x10000, 0x202})
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

1.107752693s ago: executing program 1 (id=570):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x1, 0x4, 0x0, 0x3, 0xff, '\x00', 0x1395}})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0xfffffe7f, 0x0, {0xffffffffffffffff, 0x1, 0xfffffffc, 0x3, 0x9}, 0x80000000})
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYRES64], 0x44}}, 0x20004040)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x4, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRESHEX=r4], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r9 = fcntl$dupfd(r1, 0x0, r8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000080)={0x8, @tick=0x8, 0x8, {0x6, 0x4}, 0x1, 0x0, 0x4})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil)
ioctl$DVB_DVR_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000000040)={0xfc000000, 0x80000})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1)
process_vm_writev(0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)=""/162, 0xa2}, {&(0x7f0000002940)=""/145, 0x91}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/171, 0xab}, {0x0}], 0x5, &(0x7f00000028c0)=[{&(0x7f0000001640)=""/215, 0xd7}, {&(0x7f0000001740)=""/52, 0x34}, {&(0x7f0000002a00)=""/73, 0x49}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/105, 0x69}, {&(0x7f0000002880)=""/42, 0x2a}], 0x6, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40)

901.768288ms ago: executing program 6 (id=571):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

900.936768ms ago: executing program 7 (id=572):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(0x0, r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

668.952134ms ago: executing program 1 (id=573):
socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_AIE_ON(r0, 0x7001)
fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0)

668.696894ms ago: executing program 6 (id=574):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0)
socket(0x1d, 0x4, 0x2)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

627.535707ms ago: executing program 7 (id=575):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x874, 0x30, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{0x860, 0x1, [@m_ipt={0x85c, 0x16, 0x0, 0x0, {{0x8}, {0x7b0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x7a4, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "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"}}]}, {0x85, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x874}}, 0x4000000)
recvmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_netfilter(r3, &(0x7f0000005400)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000053c0)={&(0x7f00000073c0)=ANY=[@ANYBLOB="501100000502010227bd7000ffdbdf250300000057000f803403a06e758d2052448b03550b943d6b2c76822fcce86bba8e855ab45065c229b0b92f64c9f3ec", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="a96245b4d8b918807992257c3c267881391b5fa9743f37d7445e0a76e8e8335e28997a41d8f0a637c43869d96a12ef945d602e73c84ff10d0e12eb485a338e83a562ce9ebc952e16c3d0924b9c0bb779939bc1f996cf14297bc5b4"], 0x1150}, 0x1, 0x0, 0x0, 0x4004}, 0x8040)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0xb9cb723700b22c90}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

350.272586ms ago: executing program 7 (id=576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x48}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000001c0)=0x720, 0x4)
sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041)

59.067836ms ago: executing program 2 (id=577):
socket(0x400000000010, 0x3, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

0s ago: executing program 7 (id=578):
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x814)
syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{<r6=>r4, &(0x7f00000003c0)='[+\x00', 0x400, &(0x7f0000000440)={@_ha_fsid={[0xc, 0x31]}, {0xfff9, 0x299, 0xfffffffd, 0x9}}, 0x10000, &(0x7f0000000480), 0x0}, 0x1, &(0x7f00000008c0)=[{0x2, 0x2, 0x0, 0x0, 0x0, 0x28}]})
write$tun(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x80)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   88.453037][ T4231] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   88.487323][ T4231] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.541294][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0
[   88.561840][ T4231] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[   88.573413][ T4866] kvm: emulating exchange as write
[   88.610056][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.654733][ T4231] usb 5-1: config 0 descriptor??
[   89.137510][   T13] usb 2-1: USB disconnect, device number 3
[   89.145691][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.162076][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.203642][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.228200][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.236223][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.243709][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.251445][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.259849][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.275974][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.291078][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.306467][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.327007][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.344606][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.370609][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.386873][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.401939][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.450555][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.470248][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.485210][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.500355][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.517759][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.553302][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.568786][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.585230][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.600468][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.630151][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.674692][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.715702][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.757253][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.793928][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.820454][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.835843][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.886615][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.914454][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.937695][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   89.986066][ T4231] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[   90.017572][ T4231] logitech 0003:046D:C29C.0005: hidraw0: USB HID v0.82 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[   90.084025][ T4894] xt_hashlimit: size too large, truncated to 1048576
[   90.779280][ T4231] logitech 0003:046D:C29C.0005: no inputs found
[   90.852624][ T4231] usb 5-1: USB disconnect, device number 3
[   91.051404][ T4901] Zero length message leads to an empty skb
[   91.097164][ T4901] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.130916][ T4897] fido_id[4897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   91.935736][ T4916] capability: warning: `syz.3.243' uses 32-bit capabilities (legacy support in use)
[   93.906545][ T4928] binder_alloc: 4927: binder_alloc_buf, no vma
[   94.418844][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.668823][ T4230] usb 3-1: Using ep0 maxpacket: 16
[   94.949268][ T4230] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[   94.958661][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.969012][ T4230] usb 3-1: Product: syz
[   94.973488][ T4230] usb 3-1: Manufacturer: syz
[   94.978293][ T4230] usb 3-1: SerialNumber: syz
[   94.996068][ T4230] usb 3-1: config 0 descriptor??
[   95.206053][ T4230] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   95.219616][ T4230] usb 3-1: Detected FT-X
[   95.269298][ T4230] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   95.593225][ T4945] binder: 4944:4945 ioctl c0306201 200000000200 returned -14
[   95.764344][ T4230] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   95.965305][   T13] usb 3-1: USB disconnect, device number 3
[   96.023368][   T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   96.070289][   T13] ftdi_sio 3-1:0.0: device disconnected
[   96.249224][ T4231] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   97.120042][ T4961] binder_alloc: 4960: binder_alloc_buf, no vma
[   97.431580][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.456820][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.488017][ T4231] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   97.516648][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.555453][ T4231] usb 5-1: config 0 descriptor??
[   97.648815][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.909154][   T21] usb 3-1: Using ep0 maxpacket: 32
[   98.050921][ T4231] pyra 0003:1E7D:2CF6.0006: unbalanced delimiter at end of report description
[   98.069204][   T21] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[   98.074566][ T4231] pyra 0003:1E7D:2CF6.0006: parse failed
[   98.080803][   T21] usb 3-1: config 0 has no interface number 0
[   98.094513][ T4231] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -22
[   98.108820][   T21] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   98.135692][   T21] usb 3-1: config 0 interface 196 has no altsetting 0
[   98.298196][ T4231] usb 5-1: USB disconnect, device number 4
[   98.359029][   T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   98.368231][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.408794][   T21] usb 3-1: Product: syz
[   98.413031][   T21] usb 3-1: Manufacturer: syz
[   98.418156][   T21] usb 3-1: SerialNumber: syz
[   98.452748][   T21] usb 3-1: config 0 descriptor??
[   98.499144][ T4967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.429259][ T4208] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  101.799119][ T4208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  101.816766][ T4208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  101.837171][ T4208] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  101.839309][   T21] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  101.850725][ T4985] device syzkaller0 entered promiscuous mode
[  101.869440][ T4208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.879013][   T21] usb 3-1: USB disconnect, device number 4
[  101.918454][ T4208] usb 4-1: config 0 descriptor??
[  101.953863][ T4987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.975462][ T4983] tipc: Resetting bearer <eth:syzkaller0>
[  102.050977][ T4983] tipc: Disabling bearer <eth:syzkaller0>
[  102.176256][   T21] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  102.404161][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x2
[  102.471692][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.546143][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.589315][   T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.619504][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.644148][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.657737][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.667552][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.682464][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.693884][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.737532][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.801179][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.863235][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.892089][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.901854][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.920864][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.940079][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.954621][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.964308][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.984098][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  102.997522][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.007105][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.008898][   T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.021125][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.036992][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.047197][   T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  103.051199][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.067426][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.067458][   T21] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  103.081217][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.103228][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.113697][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.141284][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.180204][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.250373][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.266482][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.276621][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.293276][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.309025][   T21] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  103.408278][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.419029][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.427198][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.435209][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.436857][ T4208] steelseries_srws1 0003:1038:1410.0007: unknown main item tag 0x0
[  103.451933][ T4208] steelseries_srws1 0003:1038:1410.0007: missing HID_OUTPUT_REPORT 0
[  103.466967][   T21] usb 3-1: Product: syz
[  103.532254][ T4208] usb 4-1: USB disconnect, device number 3
[  103.869064][   T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  104.279026][   T13] usb 1-1: Using ep0 maxpacket: 32
[  104.314750][   T21] usb 3-1: Manufacturer: syz
[  104.378929][   T21] usb 3-1: SerialNumber: syz
[  104.410179][   T21] usb 3-1: config 0 descriptor??
[  104.439650][   T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.478915][   T13] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.674371][   T13] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.515796][   T13] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  105.710228][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[  105.852236][   T13] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  105.925908][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.985276][   T13] usb 1-1: config 0 descriptor??
[  106.053681][ T4208] usb 3-1: USB disconnect, device number 5
[  106.064750][   T13] usb 1-1: can't set config #0, error -71
[  106.145060][   T13] usb 1-1: USB disconnect, device number 2
[  106.768360][ T5040] device syzkaller0 entered promiscuous mode
[  106.989105][ T5040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.029146][ T5045] capability: warning: `syz.0.280' uses deprecated v2 capabilities in a way that may be insecure
[  107.110674][ T5040] tipc: Resetting bearer <eth:syzkaller0>
[  107.167969][ T5038] tipc: Resetting bearer <eth:syzkaller0>
[  107.186272][ T5038] tipc: Disabling bearer <eth:syzkaller0>
[  108.447014][ T5058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'.
[  108.669028][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  109.041597][    T7] usb 5-1: Using ep0 maxpacket: 8
[  109.145354][ T5068] loop4: detected capacity change from 0 to 7
[  109.158925][    T7] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  109.170685][    T7] usb 5-1: config 179 has no interface number 0
[  109.173765][ T5068] Dev loop4: unable to read RDB block 7
[  109.177074][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  109.204765][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  109.216637][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  109.217420][ T5068]  loop4: unable to read partition table
[  109.244753][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  109.293254][    T7] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  109.299080][ T5068] loop4: partition table beyond EOD, 
[  109.314687][    T7] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  109.332081][ T5068] truncated
[  109.335257][ T5068] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü�¾SêjºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[  109.338183][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.357239][ T4175] Dev loop4: unable to read RDB block 7
[  109.363025][ T4175]  loop4: unable to read partition table
[  109.386483][ T4175] loop4: partition table beyond EOD, truncated
[  109.409138][ T5056] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  110.136670][ T5086] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.204819][    T7] usb 5-1: USB disconnect, device number 5
[  110.218869][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  112.348892][   T13] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  112.715192][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  112.747137][   T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  112.770100][   T13] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  112.803968][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.843488][   T13] usb 5-1: config 0 descriptor??
[  112.999354][ T5115] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.331375][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.348970][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.365647][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.375455][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.383096][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.391518][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.398941][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.406664][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.444445][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.472438][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.499721][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.508241][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.515835][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.528838][   T13] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0
[  113.547174][   T13] zydacron 0003:13EC:0006.0008: unknown global tag 0xc
[  113.573677][   T13] zydacron 0003:13EC:0006.0008: item 0 0 1 12 parsing failed
[  113.591243][   T13] zydacron 0003:13EC:0006.0008: parse failed
[  113.597566][   T13] zydacron: probe of 0003:13EC:0006.0008 failed with error -22
[  113.664908][   T13] usb 5-1: USB disconnect, device number 6
[  115.678892][ T4174] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.807522][ T5154] crypto_alloc_aead failed rc=-4
[  115.958837][ T4174] usb 4-1: Using ep0 maxpacket: 16
[  116.099126][ T4174] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024
[  116.309692][ T4174] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  116.329472][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.348685][ T4174] usb 4-1: Product: syz
[  116.368781][ T4174] usb 4-1: Manufacturer: syz
[  116.373493][ T4174] usb 4-1: SerialNumber: syz
[  116.374962][ T5187] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.441512][ T5178] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  116.482943][ T5178] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  116.533225][ T5186] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  116.578189][ T5186] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  116.710409][ T5193] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[  116.775112][ T4174] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  116.777437][ T5193] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.804418][ T5193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.322'.
[  116.829055][ T4174] usb 4-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8204 device_setup=1 to enable and report any issues to g@b4.vu
[  116.995958][ T5208] fuse: Bad value for 'fd'
[  117.001884][ T5208] process 'syz.1.327' launched './file0' with NULL argv: empty string added
[  117.009853][ T4174] usb 4-1: USB disconnect, device number 4
[  117.088825][ T4208] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  117.270434][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.295243][ T5219] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.459248][ T4208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  117.486881][ T4208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.505876][ T4208] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00
[  117.526736][ T4208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.564240][ T4208] usb 1-1: config 0 descriptor??
[  117.763979][ T5232] netlink: 'syz.1.336': attribute type 1 has an invalid length.
[  117.822545][ T5232] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.840129][ T5234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.336'.
[  117.915184][ T5236] lo speed is unknown, defaulting to 1000
[  117.921512][ T5236] lo speed is unknown, defaulting to 1000
[  117.927634][ T5236] lo speed is unknown, defaulting to 1000
[  117.937029][ T5236] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  117.951363][ T5236] lo speed is unknown, defaulting to 1000
[  117.957621][ T5236] lo speed is unknown, defaulting to 1000
[  117.964066][ T5236] lo speed is unknown, defaulting to 1000
[  117.970468][ T5236] lo speed is unknown, defaulting to 1000
[  117.977545][ T5236] lo speed is unknown, defaulting to 1000
[  117.987433][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  118.055023][ T5239] netlink: 188 bytes leftover after parsing attributes in process `syz.1.338'.
[  118.069541][ T4208] hid (null): unknown global tag 0xd
[  118.081384][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0xe
[  118.109299][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.129013][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.144424][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.164467][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.174008][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.186792][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.196888][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.217085][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.231264][    T7] usb 4-1: Using ep0 maxpacket: 16
[  118.237604][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.251936][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.260858][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.267980][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.288033][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.305812][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.316194][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.327661][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.337911][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.349016][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.363466][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.370898][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.388147][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.395574][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.406071][    T7] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  118.415608][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.429851][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.438318][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.450013][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.458572][    T7] usb 4-1: config 0 descriptor??
[  118.472194][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.483346][ T4208] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0
[  118.492317][ T4208] itetech 0003:06CB:73F5.0009: unknown global tag 0xd
[  118.499620][ T4208] itetech 0003:06CB:73F5.0009: item 0 1 1 13 parsing failed
[  118.507870][ T4208] itetech: probe of 0003:06CB:73F5.0009 failed with error -22
[  118.536956][ T4208] usb 1-1: USB disconnect, device number 3
[  118.803369][ T5245] overlayfs: failed to clone upperpath
[  118.952758][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  118.968878][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  118.978958][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  118.990417][ T5256] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.008949][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.022864][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.037204][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.057346][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.074705][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.088135][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.103212][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.118839][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.136687][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.153522][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.165305][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.173490][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.181831][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.189814][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.197292][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.206426][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.214409][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.225083][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.233483][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.242106][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.249977][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.257661][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.266900][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.275374][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.292390][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.310340][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.327008][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.341834][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.357681][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.374859][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.382898][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.390665][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.398362][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.406199][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.415198][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.422947][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.431093][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.438657][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.446841][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.454632][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.471555][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.487284][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.503703][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.521580][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.537320][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.545377][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.553203][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.561132][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.569171][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.576863][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.584776][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.592688][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.600388][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.608087][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.627116][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.645163][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.658802][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.683521][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.708847][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.723544][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.742166][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.778849][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.798846][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.823524][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.839149][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.849088][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.856511][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.870554][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.878595][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.886451][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.894369][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.904034][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.911963][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.919624][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.928667][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.936458][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.959647][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  119.977500][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.006569][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.024521][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.044426][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.058800][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.076615][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.084114][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.098803][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.106471][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.114330][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.122293][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.131333][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.143210][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.151313][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.159047][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.166662][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.174773][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.183392][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.194423][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.202366][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.223515][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.247786][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.266017][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.273763][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.288813][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.306605][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.316774][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.337130][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.347299][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.378814][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.406731][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.416861][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.437857][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.448185][ T5267] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[  120.457439][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.467599][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.487922][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.503304][ T5267] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.518346][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.528455][ T5269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.347'.
[  120.555256][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.576794][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.602265][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.622514][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.643147][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.654518][ T5272] siw: device registration error -23
[  120.694155][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.709835][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.717984][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.733687][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.744326][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.756741][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.765784][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.778161][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.795380][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.803249][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.817169][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.825126][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.833429][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.841305][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.850092][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.857649][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.866576][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.874993][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.882801][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.890597][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.898392][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.906359][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.914172][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.922050][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.929896][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.937380][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.947016][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.954822][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.962669][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.970543][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.978208][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.986140][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  120.993995][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  121.001804][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  121.009621][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  121.017153][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  121.025120][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  121.032888][    T7] hid-generic 0003:0458:5016.000A: unknown main item tag 0x0
[  121.059612][    T7] hid-generic 0003:0458:5016.000A: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0
[  121.071661][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'.
[  121.091722][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'.
[  121.137886][    T7] usb 4-1: USB disconnect, device number 5
[  121.198868][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  121.268031][ T5280] fido_id[5280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  121.448958][ T1108] usb 1-1: Using ep0 maxpacket: 32
[  121.538876][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  121.568991][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.579443][ T4208] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  121.587267][ T1108] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.598361][ T1108] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.608596][ T1108] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  121.622245][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0
[  121.629001][ T1108] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  121.638254][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.648670][ T1108] usb 1-1: config 0 descriptor??
[  121.653761][   T13] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  121.778867][    T7] usb 4-1: Using ep0 maxpacket: 32
[  121.819202][ T4208] usb 3-1: Using ep0 maxpacket: 16
[  121.899412][    T7] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  121.925308][    T7] usb 4-1: config 0 interface 0 has no altsetting 0
[  121.932356][    T7] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  121.944740][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.953116][ T4208] usb 3-1: config index 0 descriptor too short (expected 52, got 36)
[  121.962406][ T4208] usb 3-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[  121.975708][    T7] usb 4-1: config 0 descriptor??
[  121.981113][ T1108] usbhid 1-1:0.0: can't add hid device: -71
[  121.985073][ T5297] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  121.987107][ T1108] usbhid: probe of 1-1:0.0 failed with error -71
[  121.994447][ T1108] usb 1-1: USB disconnect, device number 4
[  122.026021][ T4208] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  122.050621][   T13] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  122.061931][   T13] usb 5-1: config 0 has no interface number 0
[  122.068071][   T13] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.081110][   T13] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.091220][   T13] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.104312][   T13] usb 5-1: config 0 interface 1 has no altsetting 0
[  122.111514][   T13] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  122.120833][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.131341][   T13] usb 5-1: config 0 descriptor??
[  122.199013][ T4208] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  122.208196][ T4208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.216582][ T4208] usb 3-1: Product: syz
[  122.220914][ T4208] usb 3-1: Manufacturer: syz
[  122.225615][ T4208] usb 3-1: SerialNumber: syz
[  122.232427][ T4208] usb 3-1: config 0 descriptor??
[  122.483548][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.490826][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.497883][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.505433][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.512767][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.520096][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.527170][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.534793][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.542156][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.544350][ T5301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.359'.
[  122.549555][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.566079][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.573449][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.580788][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.590148][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.597285][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.623503][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.641178][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.648194][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.655523][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.662955][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.670145][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.677107][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.684338][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.692284][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.701508][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.708498][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.715797][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.722983][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.730572][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.737563][    T7] lenovo 0003:17EF:60B5.000B: unknown main item tag 0x0
[  122.749413][    T7] lenovo 0003:17EF:60B5.000B: hidraw0: USB HID v10.00 Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0
[  122.771513][    T7] usb 4-1: USB disconnect, device number 6
[  122.816642][ T5307] fido_id[5307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  122.835788][   T13] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.000C/input/input5
[  122.923624][   T13] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:145F:0212.000C/input/input6
[  122.943520][   T13] uclogic 0003:145F:0212.000C: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.4-1/input1
[  123.113725][   T13] usb 5-1: USB disconnect, device number 7
[  123.507942][ T5326] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  123.518237][ T5326] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  123.708268][ T5335] input: syz1 as /devices/virtual/input/input7
[  125.059596][    T7] usb 3-1: USB disconnect, device number 6
[  125.574299][ T5361] loop3: detected capacity change from 0 to 1024
[  125.619325][ T5344] loop0: detected capacity change from 0 to 32768
[  125.639895][ T5360] lo speed is unknown, defaulting to 1000
[  125.687423][ T5344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.373 (5344)
[  125.842022][ T5344] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  125.890232][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  125.946798][ T5358] loop2: detected capacity change from 0 to 32768
[  125.972412][ T5358] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.379 (5358)
[  125.983309][ T5344] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  126.011211][ T5344] BTRFS info (device loop0): trying to use backup root at mount time
[  126.057687][ T5344] BTRFS info (device loop0): setting nodatasum
[  126.093272][ T5344] BTRFS info (device loop0): enabling ssd optimizations
[  126.147445][ T5344] BTRFS info (device loop0): using spread ssd allocation scheme
[  126.172348][ T4178] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4178)
[  126.182716][ T5344] BTRFS info (device loop0): turning on flush-on-commit
[  126.211004][ T5344] BTRFS info (device loop0): force zlib compression, level 3
[  126.218451][ T5344] BTRFS info (device loop0): using free space tree
[  126.251458][ T5360] lo speed is unknown, defaulting to 1000
[  126.268495][ T5344] BTRFS info (device loop0): has skinny extents
[  126.298491][ T5358] loop2: detected capacity change from 0 to 4096
[  126.643555][ T4192] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /69/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  126.647521][ T5363] loop4: detected capacity change from 0 to 32768
[  126.759298][ T5363] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.381 (5363)
[  126.848106][   T26] audit: type=1800 audit(1775697475.225:4): pid=5344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.373" name="file1" dev="loop0" ino=260 res=0 errno=0
[  126.906219][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.055415][ T4795] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4795)
[  127.071378][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  127.138460][ T4192] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /69/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.186377][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.215530][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  127.264152][ T5363] loop4: detected capacity change from 0 to 4096
[  127.279279][ T4192] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /69/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.382180][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.485394][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  127.516078][ T4192] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /69/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.550267][ T5393] BTRFS info (device loop0): balance: start -d -m
[  127.590529][ T5393] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[  127.605285][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.647260][ T5393] BTRFS info (device loop0): balance: canceled
[  127.664518][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  127.695001][ T4192] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /69/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.768299][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  127.837757][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  127.887182][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  127.920599][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  127.989101][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.032513][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.075990][ T4192] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.'
[  128.159388][ T5402] siw: device registration error -23
[  128.223528][ T5402] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  128.571506][ T5414] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[  128.635021][ T5416] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  128.716774][ T5414] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.840177][ T5416] overlayfs: failed to set xattr on upper
[  128.880143][ T5419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'.
[  128.906903][ T5416] overlayfs: ...falling back to index=off,metacopy=off.
[  130.158729][    C0] sched: RT throttling activated
[  132.944416][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  132.950828][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  133.012793][ T5436] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  133.641540][ T5446] loop0: detected capacity change from 0 to 128
[  134.005992][ T5449] lo speed is unknown, defaulting to 1000
[  134.026849][ T5439] loop2: detected capacity change from 0 to 32768
[  134.188827][ T5439] XFS (loop2): Mounting V5 Filesystem
[  134.336649][ T5463] loop0: detected capacity change from 0 to 4096
[  134.492796][ T5439] XFS (loop2): Ending clean mount
[  134.517536][ T5449] chnl_net:caif_netlink_parms(): no params data found
[  134.552998][ T5467] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.568299][ T5439] XFS (loop2): Quotacheck needed: Please wait.
[  134.729032][   T26] audit: type=1800 audit(1775697483.105:5): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.402" name="bus" dev="loop0" ino=18 res=0 errno=0
[  134.951989][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.988873][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.059075][ T5439] XFS (loop2): Quotacheck: Done.
[  135.086796][ T5449] device bridge_slave_0 entered promiscuous mode
[  135.107509][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.160277][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.194663][ T5449] device bridge_slave_1 entered promiscuous mode
[  135.253050][ T4188] XFS (loop2): Unmounting Filesystem
[  135.297113][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.334235][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.435450][ T5449] team0: Port device team_slave_0 added
[  135.476150][ T5449] team0: Port device team_slave_1 added
[  135.548462][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.598912][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.698881][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.746602][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.787146][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.858845][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.989338][ T5405] Bluetooth: hci3: command 0x0409 tx timeout
[  136.033400][ T5449] device hsr_slave_0 entered promiscuous mode
[  136.092541][ T5449] device hsr_slave_1 entered promiscuous mode
[  136.148584][ T5449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.273935][ T5449] Cannot create hsr debugfs directory
[  137.406824][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.523923][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.586169][ T5481] device syzkaller1 entered promiscuous mode
[  137.656335][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.790534][ T5478] loop2: detected capacity change from 0 to 32768
[  137.812853][ T5478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.405 (5478)
[  137.839576][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.876238][ T5478] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  137.949753][ T5478] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  138.000559][ T5478] BTRFS info (device loop2): trying to use backup root at mount time
[  138.037363][ T5490] ODEBUG: Out of memory. ODEBUG disabled
[  138.058943][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  138.119116][ T5478] BTRFS info (device loop2): setting nodatasum
[  138.125479][ T5478] BTRFS info (device loop2): enabling ssd optimizations
[  138.184126][ T5478] BTRFS info (device loop2): using spread ssd allocation scheme
[  138.230821][ T5478] BTRFS info (device loop2): turning on flush-on-commit
[  138.237867][ T5478] BTRFS info (device loop2): force zlib compression, level 3
[  138.292562][ T5449] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  138.302169][ T5478] BTRFS info (device loop2): using free space tree
[  138.332546][ T5449] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  138.342828][ T5478] BTRFS info (device loop2): has skinny extents
[  138.422270][  T144] tipc: Left network mode
[  138.427932][ T5449] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  138.460127][ T5449] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  138.772103][   T26] audit: type=1800 audit(1775697487.155:6): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.405" name="file1" dev="loop2" ino=260 res=0 errno=0
[  138.825598][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.930210][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.949707][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.018878][ T5449] 8021q: adding VLAN 0 to HW filter on device team0
[  139.083796][ T5521] BTRFS info (device loop2): balance: start -d -m
[  139.090698][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.100227][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  139.139089][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.146198][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.202455][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.267071][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.402854][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.425107][ T5521] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  139.434027][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.441408][ T4919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.533017][ T5533] 9pnet_virtio: no channels available for device syz
[  139.658484][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.764624][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.850623][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.911453][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.962484][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.037608][ T5449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.114440][ T5449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.139086][ T4231] Bluetooth: hci3: command 0x040f tx timeout
[  140.193556][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.230629][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.269238][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.301778][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.341119][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.358001][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.371018][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.474559][ T5521] BTRFS info (device loop2): balance: canceled
[  141.000692][  T144] device hsr_slave_0 left promiscuous mode
[  141.035500][  T144] device hsr_slave_1 left promiscuous mode
[  141.057837][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.080656][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.095776][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'.
[  141.113349][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.133820][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'.
[  141.143734][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.153525][  T144] device bridge_slave_1 left promiscuous mode
[  141.159014][ T5490] syz.0.407 (5490): drop_caches: 2
[  141.190845][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.722844][ T5558] loop0: detected capacity change from 0 to 4096
[  141.800793][  T144] device bridge_slave_0 left promiscuous mode
[  141.807165][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.987206][  T144] device veth1_macvtap left promiscuous mode
[  142.019391][  T144] device veth0_macvtap left promiscuous mode
[  142.025507][  T144] device veth1_vlan left promiscuous mode
[  142.051080][  T144] device veth0_vlan left promiscuous mode
[  142.218830][    T7] Bluetooth: hci3: command 0x0419 tx timeout
[  142.383668][ T4185] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  142.408919][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  142.679737][  T144] team0 (unregistering): Port device team_slave_1 removed
[  142.729583][  T144] team0 (unregistering): Port device team_slave_0 removed
[  142.765288][ T5572] loop4: detected capacity change from 0 to 40427
[  142.767681][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.815841][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.817539][ T5572] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3)
[  142.882611][ T5572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  143.121974][  T144] bond0 (unregistering): Released all slaves
[  143.318228][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.349653][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.393912][ T5575] device syzkaller0 entered promiscuous mode
[  143.441205][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.155344][ T5607] 9pnet_virtio: no channels available for device syz
[  144.384211][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  144.448342][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  144.670151][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  144.726351][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  144.752452][ T5449] device veth0_vlan entered promiscuous mode
[  144.807712][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.818424][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  144.891135][ T5449] device veth1_vlan entered promiscuous mode
[  144.980415][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  145.002481][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  145.064927][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.115979][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.236227][ T5449] device veth0_macvtap entered promiscuous mode
[  145.399000][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  145.507714][ T5449] device veth1_macvtap entered promiscuous mode
[  146.010572][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.099584][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.150194][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.191393][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.255124][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.326409][ T5595] loop0: detected capacity change from 0 to 40427
[  146.340851][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.398950][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.461374][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.514626][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.547491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  146.565722][ T5595] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  146.580387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.614096][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.619298][ T5595] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  146.632792][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.632856][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.688818][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.728814][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.758881][ T5595] F2FS-fs (loop0): invalid crc value
[  146.778865][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.792431][ T5595] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  146.818772][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.868183][ T5595] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  146.878754][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.910058][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.918226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.929587][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.985588][ T5449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.020075][ T5449] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.048329][ T5449] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.072350][ T5449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.079528][ T5595] F2FS-fs (loop0): recover fsync data on readonly fs
[  147.149026][ T5595] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  147.168569][ T5625] loop4: detected capacity change from 0 to 32768
[  147.191741][ T5595] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  147.400351][ T5625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.425 (5625)
[  147.424720][ T4917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.504697][ T4917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.550658][ T5625] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  147.580940][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.591017][ T5625] BTRFS info (device loop4): using free space tree
[  147.597576][ T5625] BTRFS info (device loop4): has skinny extents
[  147.659632][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.687365][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.734473][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.968877][ T5625] BTRFS info (device loop4): enabling ssd optimizations
[  148.667860][ T4175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4175)
[  148.706052][ T5680] device syzkaller0 entered promiscuous mode
[  149.482989][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.433'.
[  149.535957][ T5712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.805595][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.897210][ T5711] mac80211_hwsim hwsim13 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[  149.960699][ T5711] wlan1: No legacy rates in association response
[  150.085013][ T5700] loop4: detected capacity change from 0 to 32768
[  150.219818][ T5700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.430 (5700)
[  150.272557][ T5702] loop2: detected capacity change from 0 to 32768
[  150.292856][ T5700] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  150.312352][ T5700] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  150.351379][ T5700] BTRFS info (device loop4): trying to use backup root at mount time
[  150.481009][ T5700] BTRFS info (device loop4): setting nodatasum
[  150.596410][ T5700] BTRFS info (device loop4): enabling ssd optimizations
[  150.639005][ T5700] BTRFS info (device loop4): using spread ssd allocation scheme
[  150.661910][ T5702] JBD2: Ignoring recovery information on journal
[  150.669363][ T5700] BTRFS info (device loop4): turning on flush-on-commit
[  150.689329][ T5700] BTRFS info (device loop4): force zlib compression, level 3
[  150.751398][ T5700] BTRFS info (device loop4): using free space tree
[  150.762652][ T5702] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  150.795640][ T5700] BTRFS info (device loop4): has skinny extents
[  150.962902][   T26] audit: type=1800 audit(1775697499.345:7): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.431" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  151.126480][   T26] audit: type=1800 audit(1775697499.505:8): pid=5700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.430" name="file1" dev="loop4" ino=260 res=0 errno=0
[  151.288048][ T5756] BTRFS info (device loop4): balance: start -d -m
[  151.399758][ T5756] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  152.101053][ T5756] BTRFS info (device loop4): found 1 extents, stage: move data extents
[  152.261490][ T5756] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  152.417951][ T5756] BTRFS info (device loop4): balance: canceled
[  153.040367][ T5764] loop5: detected capacity change from 0 to 32768
[  153.087254][ T5764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.437 (5764)
[  153.183598][ T5764] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  153.221363][ T5702] syz.2.431 (5702) used greatest stack depth: 19768 bytes left
[  153.239112][ T5764] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  153.270205][ T5764] BTRFS info (device loop5): trying to use backup root at mount time
[  153.298863][ T5764] BTRFS info (device loop5): setting nodatasum
[  153.325845][ T5764] BTRFS info (device loop5): enabling ssd optimizations
[  153.366374][ T5764] BTRFS info (device loop5): using spread ssd allocation scheme
[  153.396788][ T5764] BTRFS info (device loop5): turning on flush-on-commit
[  153.430974][ T5764] BTRFS info (device loop5): force zlib compression, level 3
[  153.478830][ T5764] BTRFS info (device loop5): using free space tree
[  153.520663][ T5764] BTRFS info (device loop5): has skinny extents
[  153.615815][ T4188] ocfs2: Unmounting device (7,2) on (node local)
[  154.183733][ T5785] loop4: detected capacity change from 0 to 32768
[  154.323365][ T5785] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.438 (5785)
[  154.434795][   T23] wlan1: authenticate with 50:50:50:50:50:50
[  154.469000][   T23] wlan1: No legacy rates in association response
[  154.533768][ T4795] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4795)
[  154.658474][ T5785] loop4: detected capacity change from 0 to 4096
[  155.271934][ T5807] loop2: detected capacity change from 0 to 32768
[  155.357650][ T5807] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.439 (5807)
[  155.360429][ T5829] device syzkaller0 entered promiscuous mode
[  155.616084][ T5807] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  155.670907][ T5807] BTRFS info (device loop2): using free space tree
[  155.677473][ T5807] BTRFS info (device loop2): has skinny extents
[  156.058956][ T5807] BTRFS info (device loop2): enabling ssd optimizations
[  156.269226][ T5807] loop_set_status: loop2 () has still dirty pages (nrpages=2)
[  156.288867][ T5565] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  156.869055][ T5565] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  156.886248][ T5565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.926722][ T5565] usb 6-1: Product: syz
[  156.944686][ T5565] usb 6-1: Manufacturer: syz
[  156.955169][ T5565] usb 6-1: SerialNumber: syz
[  157.000604][ T5565] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  157.214989][ T5878] loop2: detected capacity change from 0 to 512
[  157.317663][ T5880] loop4: detected capacity change from 0 to 128
[  157.393091][ T5878] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.429106][ T5878] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.439826][ T5880] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,abort,,errors=continue. Quota mode: none.
[  157.528856][ T5880] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.674636][ T5889] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.680831][   T26] audit: type=1800 audit(1775697506.055:9): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.447" name="file1" dev="loop2" ino=18 res=0 errno=0
[  157.796630][ T5565] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  157.915335][ T5880] loop_set_status: loop4 () has still dirty pages (nrpages=1)
[  158.034640][ T5400] usb 6-1: USB disconnect, device number 2
[  158.114640][ T4190] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /83/mnt/lost+found: directory fails checksum at offset 1024
[  158.161505][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  158.205626][ T4190] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /83/mnt/lost+found: directory fails checksum at offset 1024
[  158.229422][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  158.259389][ T4190] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /83/mnt/lost+found: directory fails checksum at offset 1024
[  158.291868][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  158.335848][ T4190] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /83/mnt/lost+found: directory fails checksum at offset 1024
[  158.377262][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  158.419800][ T4190] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /83/mnt/lost+found: directory fails checksum at offset 1024
[  158.442758][ T4190] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  158.634763][ T5898] loop2: detected capacity change from 0 to 32768
[  158.655850][ T5901] lo speed is unknown, defaulting to 1000
[  158.714214][ T5902] loop5: detected capacity change from 0 to 164
[  158.858884][ T5565] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  158.883728][ T5565] ath9k_htc: Failed to initialize the device
[  158.920758][ T5400] usb 6-1: ath9k_htc: USB layer deinitialized
[  160.839714][ T5919] siw: device registration error -23
[  160.897309][ T5923] lo speed is unknown, defaulting to 1000
[  160.919935][ T5926] device syzkaller0 entered promiscuous mode
[  160.967845][ T5926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.085353][ T5926] tipc: Resetting bearer <eth:syzkaller0>
[  161.173175][ T5925] tipc: Resetting bearer <eth:syzkaller0>
[  161.213301][ T5925] tipc: Disabling bearer <eth:syzkaller0>
[  161.224804][ T5912] loop5: detected capacity change from 0 to 32768
[  161.282419][ T5912] (syz.5.458,5912,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  161.352242][ T5912] (syz.5.458,5912,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  161.476699][ T5944] 9pnet_virtio: no channels available for device syz
[  161.498640][ T5912] (syz.5.458,5912,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  161.535766][ T5923] chnl_net:caif_netlink_parms(): no params data found
[  161.548158][ T5912] JBD2: Ignoring recovery information on journal
[  161.785733][ T5912] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  162.068602][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.138844][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.189934][ T5923] device bridge_slave_0 entered promiscuous mode
[  162.228030][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.249373][ T5965] (syz.5.458,5965,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  162.285680][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.305845][ T5923] device bridge_slave_1 entered promiscuous mode
[  162.377636][ T5965] (syz.5.458,5965,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  162.431852][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.478284][ T5965] (syz.5.458,5965,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  162.490637][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.513767][ T5942] loop2: detected capacity change from 0 to 32768
[  162.566231][ T5965] (syz.5.458,5965,0):ocfs2_quota_read:201 ERROR: status = -5
[  162.656736][ T5923] team0: Port device team_slave_0 added
[  162.679673][ T5965] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 5
[  162.696413][ T5942] UFO tlock:0xffffc90002792090
[  162.704818][ T5923] team0: Port device team_slave_1 added
[  162.763812][ T5973] MetaData crosses page boundary!!
[  162.769208][ T5965] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  162.798753][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.824282][ T5973] lblock = 6300000010, size  = -820051968
[  162.838806][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.869802][ T5400] Bluetooth: hci2: command 0x0409 tx timeout
[  162.875990][ T5973] CPU: 0 PID: 5973 Comm: syz.2.467 Not tainted syzkaller #0
[  162.883331][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  162.893415][ T5973] Call Trace:
[  162.896736][ T5973]  <TASK>
[  162.899694][ T5973]  dump_stack_lvl+0x188/0x250
[  162.904597][ T5973]  ? show_regs_print_info+0x20/0x20
[  162.909839][ T5973]  ? load_image+0x400/0x400
[  162.914376][ T5973]  ? unlock_page+0x17c/0x1f0
[  162.918990][ T5973]  ? release_metapage+0x2f7/0xe10
[  162.924040][ T5973]  ? unlock_page+0x17c/0x1f0
[  162.928659][ T5973]  __get_metapage+0xbfa/0x1060
[  162.930506][ T5965] (syz.5.458,5965,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  162.933465][ T5973]  dtSearch+0x5d5/0x2050
[  162.945835][ T5973]  jfs_lookup+0x1ad/0x420
[  162.950205][ T5973]  ? jfs_get_parent+0xa0/0xa0
[  162.954935][ T5973]  ? d_alloc_parallel+0x1222/0x1330
[  162.960176][ T5973]  ? schedule+0x132/0x1e0
[  162.964548][ T5973]  ? __init_waitqueue_head+0xa5/0x150
[  162.970086][ T5973]  __lookup_slow+0x29d/0x410
[  162.974723][ T5973]  ? lookup_one_len+0x2d0/0x2d0
[  162.979618][ T5973]  ? down_read+0x1aa/0x2e0
[  162.984079][ T5973]  lookup_slow+0x53/0x70
[  162.988348][ T5973]  walk_component+0x319/0x460
[  162.993061][ T5973]  path_lookupat+0x169/0x440
[  162.997689][ T5973]  filename_lookup+0x214/0x540
[  163.002488][ T5973]  ? hashlen_string+0x110/0x110
[  163.007387][ T5973]  ? strncpy_from_user+0x1fb/0x360
[  163.012556][ T5973]  ? getname_flags+0x1fe/0x500
[  163.017358][ T5973]  user_path_at_empty+0x40/0x190
[  163.022330][ T5973]  vfs_statx+0x107/0x500
[  163.026618][ T5973]  ? vfs_fstatat+0x40/0x40
[  163.031082][ T5973]  __x64_sys_newlstat+0x116/0x1c0
[  163.036140][ T5973]  ? __ia32_sys_newstat+0x1c0/0x1c0
[  163.041385][ T5973]  ? lock_chain_count+0x20/0x20
[  163.046263][ T5973]  ? vtime_user_exit+0x2c8/0x3e0
[  163.049114][ T5965] (syz.5.458,5965,1):ocfs2_mknod:314 ERROR: status = -5
[  163.051223][ T5973]  ? lockdep_hardirqs_on+0x94/0x140
[  163.058182][ T5965] (syz.5.458,5965,1):ocfs2_mknod:502 ERROR: status = -5
[  163.063365][ T5973]  do_syscall_64+0x4c/0xa0
[  163.063392][ T5973]  ? clear_bhb_loop+0x30/0x80
[  163.063409][ T5973]  ? clear_bhb_loop+0x30/0x80
[  163.063431][ T5973]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  163.063453][ T5973] RIP: 0033:0x7f1259ba2819
[  163.063473][ T5973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.114689][ T5973] RSP: 002b:00007f1257ddb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[  163.123154][ T5973] RAX: ffffffffffffffda RBX: 00007f1259e1c090 RCX: 00007f1259ba2819
[  163.131160][ T5973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500
[  163.139167][ T5973] RBP: 00007f1259c38c91 R08: 0000000000000000 R09: 0000000000000000
[  163.147433][ T5973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.155450][ T5973] R13: 00007f1259e1c128 R14: 00007f1259e1c090 R15: 00007ffd661079c8
[  163.163486][ T5973]  </TASK>
[  163.231157][ T5964] loop0: detected capacity change from 0 to 32768
[  163.235327][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.270180][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.277159][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.289520][ T5964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.469 (5964)
[  163.304963][ T5965] (syz.5.458,5965,0):ocfs2_create:676 ERROR: status = -5
[  163.373360][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.408998][ T5964] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  163.440249][ T5964] BTRFS info (device loop0): using free space tree
[  163.485599][ T5964] BTRFS info (device loop0): has skinny extents
[  163.511268][ T5923] device hsr_slave_0 entered promiscuous mode
[  163.534481][ T5449] ocfs2: Unmounting device (7,5) on (node local)
[  163.549182][ T5923] device hsr_slave_1 entered promiscuous mode
[  163.584658][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.605872][ T5973] bread failed!
[  163.609482][ T5973] jfs_lookup: dtSearch returned -5
[  163.637854][ T5923] Cannot create hsr debugfs directory
[  163.758868][ T5964] BTRFS info (device loop0): enabling ssd optimizations
[  163.892392][ T5942] MetaData crosses page boundary!!
[  163.897576][ T5942] lblock = 6300000010, size  = -820051968
[  163.928838][ T5942] CPU: 1 PID: 5942 Comm: syz.2.467 Not tainted syzkaller #0
[  163.936312][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  163.946407][ T5942] Call Trace:
[  163.949732][ T5942]  <TASK>
[  163.952698][ T5942]  dump_stack_lvl+0x188/0x250
[  163.957414][ T5942]  ? show_regs_print_info+0x20/0x20
[  163.962748][ T5942]  ? load_image+0x400/0x400
[  163.967292][ T5942]  ? unlock_page+0x17c/0x1f0
[  163.971921][ T5942]  ? release_metapage+0x2f7/0xe10
[  163.977069][ T5942]  ? unlock_page+0x17c/0x1f0
[  163.981698][ T5942]  __get_metapage+0xbfa/0x1060
[  163.986556][ T5942]  dtSearch+0x5d5/0x2050
[  163.990882][ T5942]  jfs_lookup+0x1ad/0x420
[  163.995261][ T5942]  ? jfs_get_parent+0xa0/0xa0
[  163.999993][ T5942]  ? d_alloc_parallel+0x1222/0x1330
[  164.005251][ T5942]  __lookup_slow+0x29d/0x410
[  164.009889][ T5942]  ? lookup_one_len+0x2d0/0x2d0
[  164.014792][ T5942]  ? down_read+0x1aa/0x2e0
[  164.019246][ T5942]  lookup_slow+0x53/0x70
[  164.023532][ T5942]  walk_component+0x319/0x460
[  164.028250][ T5942]  link_path_walk+0x665/0xd70
[  164.032982][ T5942]  ? handle_lookup_down+0x130/0x130
[  164.038228][ T5942]  path_lookupat+0x9d/0x440
[  164.042772][ T5942]  filename_lookup+0x214/0x540
[  164.047581][ T5942]  ? hashlen_string+0x110/0x110
[  164.052492][ T5942]  ? getname_kernel+0x56/0x2e0
[  164.057290][ T5942]  ? getname_kernel+0x142/0x2e0
[  164.062189][ T5942]  ? getname_kernel+0x1fc/0x2e0
[  164.067082][ T5942]  kern_path+0x37/0x190
[  164.071280][ T5942]  unix_find_other+0xe9/0x840
[  164.075995][ T5942]  ? __unix_set_addr+0x3b0/0x3b0
[  164.080956][ T5942]  ? skb_copy_datagram_from_iter+0x5ea/0x6a0
[  164.086979][ T5942]  unix_dgram_sendmsg+0xad9/0x18a0
[  164.092142][ T5942]  ? aa_sk_perm+0x7dc/0x910
[  164.096792][ T5942]  ? unix_dgram_poll+0x680/0x680
[  164.101856][ T5942]  ? tomoyo_socket_sendmsg_permission+0x1d6/0x2f0
[  164.108318][ T5942]  ? aa_sock_msg_perm+0x94/0x150
[  164.113299][ T5942]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  164.118620][ T5942]  ? security_socket_sendmsg+0x7c/0xa0
[  164.124131][ T5942]  ? unix_dgram_poll+0x680/0x680
[  164.129109][ T5942]  ____sys_sendmsg+0x5b7/0x8f0
[  164.134120][ T5942]  ? __sys_sendmsg_sock+0x30/0x30
[  164.139203][ T5942]  ? rcu_is_watching+0x11/0xa0
[  164.144094][ T5942]  ? import_iovec+0x6f/0xa0
[  164.148639][ T5942]  ___sys_sendmsg+0x236/0x2e0
[  164.153378][ T5942]  ? __sys_sendmsg+0x2a0/0x2a0
[  164.158247][ T5942]  ? __might_fault+0xb3/0x110
[  164.162980][ T5942]  __sys_sendmmsg+0x2ba/0x500
[  164.167716][ T5942]  ? __ia32_sys_sendmsg+0x80/0x80
[  164.172797][ T5942]  ? __context_tracking_exit+0x4c/0x80
[  164.178320][ T5942]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  164.184342][ T5942]  ? lock_chain_count+0x20/0x20
[  164.189241][ T5942]  ? vtime_user_exit+0x2c8/0x3e0
[  164.194241][ T5942]  __x64_sys_sendmmsg+0x9c/0xb0
[  164.199159][ T5942]  do_syscall_64+0x4c/0xa0
[  164.203636][ T5942]  ? clear_bhb_loop+0x30/0x80
[  164.208339][ T5942]  ? clear_bhb_loop+0x30/0x80
[  164.213153][ T5942]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  164.219089][ T5942] RIP: 0033:0x7f1259ba2819
[  164.223540][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.243182][ T5942] RSP: 002b:00007f1257dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  164.251821][ T5942] RAX: ffffffffffffffda RBX: 00007f1259e1bfa0 RCX: 00007f1259ba2819
[  164.259820][ T5942] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000005
[  164.267819][ T5942] RBP: 00007f1259c38c91 R08: 0000000000000000 R09: 0000000000000000
[  164.275820][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.283831][ T5942] R13: 00007f1259e1c038 R14: 00007f1259e1bfa0 R15: 00007ffd661079c8
[  164.291858][ T5942]  </TASK>
[  164.297256][ T5923] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  164.315585][ T5964] loop0: detected capacity change from 32768 to 0
[  164.326086][ T5923] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  164.346448][    T9] loop: Write error at byte offset 9223372036861657087, length 4096.
[  164.372083][ T5923] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  164.382840][    C0] blk_update_request: I/O error, dev loop0, sector 13440 op 0x1:(WRITE) flags 0x1800 phys_seg 3 prio class 0
[  164.394962][    C0] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  164.414005][ T6006] BTRFS: error (device loop0) in __btrfs_update_delayed_inode:995: errno=-5 IO failure
[  164.435999][ T5923] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  164.448520][ T6006] BTRFS info (device loop0): forced readonly
[  164.477728][ T6006] BTRFS: error (device loop0) in __btrfs_run_delayed_items:1089: errno=-5 IO failure
[  164.519050][ T6006] BTRFS warning (device loop0): Skipping commit of aborted transaction.
[  164.558939][ T6006] BTRFS: error (device loop0) in cleanup_transaction:2021: errno=-5 IO failure
[  164.602690][ T6006] BTRFS error (device loop0): Remounting read-write after error is not allowed
[  164.649212][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.669215][ T5942] bread failed!
[  164.672773][ T5942] jfs_lookup: dtSearch returned -5
[  164.702140][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.744350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.773745][ T5923] 8021q: adding VLAN 0 to HW filter on device team0
[  164.795465][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.839478][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.889440][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.896573][ T4917] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.919255][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.938933][ T5400] Bluetooth: hci2: command 0x041b tx timeout
[  166.321482][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.349668][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.390178][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.397367][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.455694][ T6014] loop2: detected capacity change from 0 to 32768
[  166.471912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  166.540430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.604894][ T6014] XFS (loop2): Mounting V5 Filesystem
[  166.622095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.715816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.859973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.909632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.931511][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  166.944146][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  166.952136][ T6014] XFS (loop2): Ending clean mount
[  166.990711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.003680][ T6014] XFS (loop2): Quotacheck needed: Please wait.
[  167.020727][ T5923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.049848][   T21] Bluetooth: hci2: command 0x040f tx timeout
[  167.078100][ T6014] XFS (loop2): Quotacheck: Done.
[  167.086333][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.183031][ T5400] infiniband syz1: ib_query_port failed (-19)
[  167.332462][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.381223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.614659][ T6036] XFS (loop2): User initiated shutdown received.
[  167.621829][ T6036] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485).  Shutting down filesystem.
[  167.679142][ T6036] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  167.829684][ T4188] XFS (loop2): Unmounting Filesystem
[  167.907687][ T6028] loop5: detected capacity change from 0 to 32768
[  167.943573][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  167.961626][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  168.000526][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.009756][ T6028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.473 (6028)
[  168.051849][  T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.120561][ T6028] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  168.165292][  T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.172121][ T6028] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  168.247618][ T6028] BTRFS info (device loop5): trying to use backup root at mount time
[  168.275203][  T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.288027][ T6028] BTRFS info (device loop5): setting nodatasum
[  168.318885][ T6028] BTRFS info (device loop5): enabling ssd optimizations
[  168.325890][ T6028] BTRFS info (device loop5): using spread ssd allocation scheme
[  168.370671][  T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.446756][ T6028] BTRFS info (device loop5): turning on flush-on-commit
[  168.489064][ T6028] BTRFS info (device loop5): force zlib compression, level 3
[  168.496521][ T6028] BTRFS info (device loop5): using free space tree
[  168.527390][ T6028] BTRFS info (device loop5): has skinny extents
[  168.821647][  T144] tipc: Left network mode
[  168.884925][ T6086] loop2: detected capacity change from 0 to 1024
[  168.922602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  168.951922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.026953][ T6086] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  169.039793][ T6066] lo speed is unknown, defaulting to 1000
[  169.041403][   T26] audit: type=1800 audit(1775697517.425:10): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.473" name="bus" dev="loop5" ino=263 res=0 errno=0
[  169.100704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.109552][   T21] Bluetooth: hci2: command 0x0419 tx timeout
[  169.111335][ T6086] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  169.120052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.149175][   T26] audit: type=1800 audit(1775697517.515:11): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.473" name="bus" dev="loop5" ino=263 res=0 errno=0
[  169.171688][ T6086] System zones: 0-1, 3-36
[  169.177686][ T6086] EXT4-fs (loop2): orphan cleanup on readonly fs
[  169.207459][ T5923] device veth0_vlan entered promiscuous mode
[  169.231604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.241975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.257463][ T6086] EXT4-fs (loop2): 1 orphan inode deleted
[  169.293508][ T5923] device veth1_vlan entered promiscuous mode
[  169.318590][ T6086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  169.434940][ T6086] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  169.465219][ T6086] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[  169.516584][   T26] audit: type=1800 audit(1775697517.895:12): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.475" name="file2" dev="loop2" ino=16 res=0 errno=0
[  169.579691][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  169.588308][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  169.692013][ T5923] device veth0_macvtap entered promiscuous mode
[  169.761088][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.794215][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.815359][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  169.844199][ T5923] device veth1_macvtap entered promiscuous mode
[  169.890728][ T6066] chnl_net:caif_netlink_parms(): no params data found
[  169.927749][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.958738][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.988763][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.017589][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.046039][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.077287][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.105204][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.124300][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.135886][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.153357][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.169579][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.209040][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.217324][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.236238][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.285485][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.313918][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.347611][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.351779][ T6105] loop2: detected capacity change from 0 to 32768
[  170.375262][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.385985][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.392842][ T6105] JBD2: Ignoring recovery information on journal
[  170.396628][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.413347][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.423914][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.433836][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.444604][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.461848][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.572847][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.599986][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.642353][ T6105] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  170.676242][ T5923] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.761732][ T5923] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.783083][ T5400] Bluetooth: hci0: command 0x0409 tx timeout
[  170.789441][ T5923] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.798184][ T5923] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.126959][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.144276][ T4188] ocfs2: Unmounting device (7,2) on (node local)
[  171.171403][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.220780][ T6066] device bridge_slave_0 entered promiscuous mode
[  171.300800][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.308408][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.391940][ T6066] device bridge_slave_1 entered promiscuous mode
[  171.650214][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.714205][ T4917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.731469][ T4917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.740649][ T4919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.748737][ T4919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.772075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  171.782564][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.895095][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  171.962887][ T6066] team0: Port device team_slave_0 added
[  172.005593][  T144] device hsr_slave_0 left promiscuous mode
[  172.022479][  T144] device hsr_slave_1 left promiscuous mode
[  172.044286][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.088993][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.110059][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.117538][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.178362][  T144] device veth1_macvtap left promiscuous mode
[  172.208965][  T144] device veth0_macvtap left promiscuous mode
[  172.215109][  T144] device veth1_vlan left promiscuous mode
[  172.251979][  T144] device veth0_vlan left promiscuous mode
[  172.287906][ T6145] loop2: detected capacity change from 0 to 32768
[  172.415508][ T6145] JBD2: Ignoring recovery information on journal
[  172.589950][ T6145] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  172.641011][  T144] bond1 (unregistering): Released all slaves
[  172.859237][ T5692] Bluetooth: hci0: command 0x041b tx timeout
[  172.967872][  T144] team0 (unregistering): Port device team_slave_1 removed
[  173.020782][  T144] team0 (unregistering): Port device team_slave_0 removed
[  173.040810][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.069306][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.286287][  T144] bond0 (unregistering): Released all slaves
[  173.341831][ T6066] team0: Port device team_slave_1 added
[  173.387694][ T6145] loop_set_status: loop2 () has still dirty pages (nrpages=7)
[  173.481414][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.488494][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.610893][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.660757][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.667844][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.736575][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.981974][ T6066] device hsr_slave_0 entered promiscuous mode
[  174.058066][ T6066] device hsr_slave_1 entered promiscuous mode
[  174.102597][ T6066] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.107300][ T4188] ocfs2: Unmounting device (7,2) on (node local)
[  174.120479][ T6066] Cannot create hsr debugfs directory
[  174.590321][ T6184] loop6: detected capacity change from 0 to 32768
[  174.635102][ T6184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.460 (6184)
[  174.658500][ T6066] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  174.704439][ T6066] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  174.728444][ T6184] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  174.760228][ T6066] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  174.778867][ T6184] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  174.793018][ T6066] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  174.843402][ T6184] BTRFS info (device loop6): trying to use backup root at mount time
[  174.852080][ T4332] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  174.899121][ T6184] BTRFS info (device loop6): setting nodatasum
[  174.905490][ T6184] BTRFS info (device loop6): enabling ssd optimizations
[  174.939037][ T5682] Bluetooth: hci0: command 0x040f tx timeout
[  174.951355][ T6184] BTRFS info (device loop6): using spread ssd allocation scheme
[  174.985946][ T6184] BTRFS info (device loop6): turning on flush-on-commit
[  175.021456][ T6184] BTRFS info (device loop6): force zlib compression, level 3
[  175.064771][ T6184] BTRFS info (device loop6): using free space tree
[  175.077406][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.089071][ T6184] BTRFS info (device loop6): has skinny extents
[  175.128767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  175.139332][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  175.148952][ T4332] usb 3-1: Using ep0 maxpacket: 8
[  175.232992][ T6066] 8021q: adding VLAN 0 to HW filter on device team0
[  175.271228][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  175.298924][ T4332] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  175.303320][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  175.307183][ T4332] usb 3-1: config 0 has no interface number 0
[  175.329028][ T4332] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  175.386150][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.393371][ T4917] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.402199][ T4332] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  175.458280][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  175.478743][ T4332] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  175.499418][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.555832][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.578921][ T4332] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  175.588063][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.611763][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.619099][ T4917] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.661127][ T4332] usb 3-1: config 0 descriptor??
[  175.676642][   T26] audit: type=1800 audit(1775697524.055:13): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.460" name="file1" dev="loop6" ino=260 res=0 errno=0
[  175.709333][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.720316][ T4332] ldusb 3-1:0.55: Interrupt in endpoint not found
[  175.740729][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.803322][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.816618][ T6184] BTRFS info (device loop6): balance: start -d -m
[  175.836701][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.869952][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.878374][ T6184] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata
[  175.908438][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.934837][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  176.000288][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  176.037005][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  176.069554][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.147188][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  176.175868][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  176.201303][ T6184] BTRFS info (device loop6): found 3 extents, stage: move data extents
[  176.287858][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'.
[  176.361799][ T6250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.413095][ T6247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.458852][ T6247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.499204][ T6247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.536540][ T6184] BTRFS info (device loop6): relocating block group 5242880 flags data|metadata
[  176.661727][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  176.677418][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  176.708477][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.904217][ T6184] BTRFS info (device loop6): found 9 extents, stage: move data extents
[  176.991360][ T6184] BTRFS info (device loop6): balance: canceled
[  177.018993][ T5682] Bluetooth: hci0: command 0x0419 tx timeout
[  177.445114][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  177.473957][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  177.547973][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  177.556984][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  177.602503][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  177.633079][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  177.676183][ T6066] device veth0_vlan entered promiscuous mode
[  177.745896][ T6066] device veth1_vlan entered promiscuous mode
[  177.890063][ T4332] usb 3-1: USB disconnect, device number 7
[  177.910682][ T6066] device veth0_macvtap entered promiscuous mode
[  177.937479][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  177.960960][   T23] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  177.980012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.012428][   T23] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  178.029069][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  178.071065][ T6066] device veth1_macvtap entered promiscuous mode
[  178.159321][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.200380][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.260724][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.308874][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.354433][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.385674][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.427704][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.480789][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.519498][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.549516][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.600339][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.641180][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  178.687578][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  178.723049][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.768625][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.802708][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.849365][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.890949][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.921871][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.943701][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.974270][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.007249][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.049208][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.086940][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.115401][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.146867][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.160346][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  179.235736][ T6066] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.278813][ T6066] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.325801][ T6066] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.347335][ T6066] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.565564][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.584284][ T6304] loop6: detected capacity change from 0 to 512
[  179.586912][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.615637][ T5695] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  179.634057][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  179.670241][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.678118][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.704487][ T6304] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  179.749442][ T6304] UDF-fs: Scanning with blocksize 512 failed
[  179.753186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  179.803892][ T6304] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  179.837804][ T6304] UDF-fs: Scanning with blocksize 1024 failed
[  179.878971][ T5695] usb 3-1: Using ep0 maxpacket: 32
[  179.908188][ T6304] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  179.948744][ T6304] UDF-fs: Scanning with blocksize 2048 failed
[  179.985328][ T6304] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  180.001589][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  180.004758][ T6314] device syzkaller0 entered promiscuous mode
[  180.017698][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping
[  180.049928][ T6304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.079550][ T6314] tipc: Started in network mode
[  180.089596][ T6314] tipc: Node identity d6af9f42e1c9, cluster identity 4711
[  180.103956][ T6314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.162314][ T6314] tipc: Resetting bearer <eth:syzkaller0>
[  180.187075][ T6312] tipc: Resetting bearer <eth:syzkaller0>
[  180.210004][ T5695] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  180.223881][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.232914][ T4332] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  180.248796][ T5695] usb 3-1: Product: syz
[  180.261968][ T5695] usb 3-1: Manufacturer: syz
[  180.266630][ T5695] usb 3-1: SerialNumber: syz
[  180.314538][ T5695] usb 3-1: config 0 descriptor??
[  180.320742][ T6312] tipc: Disabling bearer <eth:syzkaller0>
[  180.538862][ T4332] usb 6-1: Using ep0 maxpacket: 16
[  180.586721][ T5695] usb 3-1: USB disconnect, device number 8
[  180.660176][ T6332] binder: 6331:6332 ioctl c0306201 0 returned -14
[  180.859702][ T4332] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  180.893999][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.919517][ T4332] usb 6-1: Product: syz
[  180.929012][ T4332] usb 6-1: Manufacturer: syz
[  180.934063][ T4332] usb 6-1: SerialNumber: syz
[  181.252542][ T6348] 9pnet_virtio: no channels available for device syz
[  181.291865][ T4332] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  181.326765][ T4332] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  181.408363][ T4332] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  181.439517][ T4332] usb 6-1: media controller created
[  181.475990][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  181.559136][ T4332] zl10353_read_register: readreg error (reg=127, ret==-71)
[  181.701781][ T4332] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  181.720781][ T4332] usb 6-1: USB disconnect, device number 3
[  182.313659][ T4332] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  182.372526][ T4332] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  183.062136][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.069638][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.761740][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.786404][ T6371] loop7: detected capacity change from 0 to 32768
[  186.839840][ T6371] jfs: Unrecognized mount option "nuota" or missing value
[  186.861780][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.949958][ T5695] Bluetooth: hci1: command 0x0406 tx timeout
[  186.956207][ T5695] Bluetooth: hci4: command 0x0406 tx timeout
[  187.551003][ T6376] loop5: detected capacity change from 0 to 32768
[  187.597306][ T6376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.512 (6376)
[  187.686729][ T6376] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  187.716034][ T6376] BTRFS info (device loop5): metadata ratio 2
[  187.722372][ T6376] BTRFS info (device loop5): allowing degraded mounts
[  187.748875][ T6376] BTRFS info (device loop5): force zlib compression, level 3
[  187.785883][ T6376] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  187.817743][ T6376] BTRFS info (device loop5): use zstd compression, level 3
[  187.838311][ T6376] BTRFS info (device loop5): force clearing of disk cache
[  187.845867][ T6352] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.855359][ T6376] BTRFS info (device loop5): allowing degraded mounts
[  187.865355][ T6352] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.868905][ T6376] BTRFS info (device loop5): max_inline at 0
[  187.887968][ T6376] BTRFS info (device loop5): using free space tree
[  187.894888][ T6376] BTRFS info (device loop5): has skinny extents
[  187.895744][ T6352] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.923879][ T6352] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.079330][ T6376] BTRFS info (device loop5): enabling ssd optimizations
[  188.100724][ T6376] BTRFS info (device loop5): clearing free space tree
[  188.108260][ T6376] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  188.148500][ T6376] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  188.238191][ T6370] lo speed is unknown, defaulting to 1000
[  188.430287][ T6376] BTRFS info (device loop5): creating free space tree
[  188.482594][ T6376] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  188.518793][ T6376] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  188.549969][ T6404] device syzkaller0 entered promiscuous mode
[  188.582725][ T6404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.652915][ T6404] tipc: Resetting bearer <eth:syzkaller0>
[  188.692711][ T6403] tipc: Resetting bearer <eth:syzkaller0>
[  188.759925][ T6403] tipc: Disabling bearer <eth:syzkaller0>
[  188.778166][   T26] audit: type=1800 audit(1775697537.155:14): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.512" name="file1" dev="loop5" ino=260 res=0 errno=0
[  188.996303][ T6414] device syzkaller0 entered promiscuous mode
[  189.152927][ T6376] overlayfs: conflicting lowerdir path
[  190.128936][ T6424] netlink: 'syz.7.517': attribute type 13 has an invalid length.
[  191.284774][ T5408] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  191.389310][ T5408] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  191.548368][ T6427] loop7: detected capacity change from 0 to 32768
[  192.416379][ T6427] JBD2: Ignoring recovery information on journal
[  192.812377][ T6427] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  193.690746][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.698914][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.878032][ T6443] loop5: detected capacity change from 0 to 32768
[  193.909690][ T6443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.518 (6443)
[  194.386172][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  194.392713][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  194.547963][ T6443] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  195.908774][ T6443] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  196.160809][ T6443] BTRFS info (device loop5): trying to use backup root at mount time
[  196.175932][ T6451] 9pnet_virtio: no channels available for device syz
[  196.291938][ T6443] BTRFS info (device loop5): setting nodatasum
[  196.361673][ T6443] BTRFS info (device loop5): enabling ssd optimizations
[  196.429912][ T6443] BTRFS info (device loop5): using spread ssd allocation scheme
[  196.499083][ T6443] BTRFS info (device loop5): turning on flush-on-commit
[  196.506108][ T6443] BTRFS info (device loop5): force zlib compression, level 3
[  196.513680][ T6443] BTRFS info (device loop5): using free space tree
[  196.525423][ T6443] BTRFS info (device loop5): has skinny extents
[  196.556923][ T6443] BTRFS error (device loop5): open_ctree failed: -12
[  197.570057][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.724192][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.622168][ T6491] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  198.806898][ T6424] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.824362][ T6424] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.835338][ T6424] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.852186][ T6424] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.091198][ T6478] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  199.152576][ T6066] ocfs2: Unmounting device (7,7) on (node local)
[  200.885423][ T6528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.659585][ T6542] netlink: 'syz.5.542': attribute type 1 has an invalid length.
[  201.841445][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.962353][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.542'.
[  202.155013][ T6552] siw: device registration error -23
[  202.194029][ T6552] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  202.445279][ T6561] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.553917][ T6563] device syzkaller0 entered promiscuous mode
[  202.575254][ T6567] 9pnet_virtio: no channels available for device syz
[  205.185429][ T6605] netlink: 'syz.7.555': attribute type 1 has an invalid length.
[  205.345018][ T6605] 8021q: adding VLAN 0 to HW filter on device bond1
[  205.415036][ T6607] netlink: 36 bytes leftover after parsing attributes in process `syz.7.555'.
[  205.877644][ T6620] device syzkaller0 entered promiscuous mode
[  206.342389][ T6634] device syzkaller0 entered promiscuous mode
[  207.490406][ T6663] netlink: 'syz.1.570': attribute type 1 has an invalid length.
[  207.570289][ T6663] 8021q: adding VLAN 0 to HW filter on device bond5
[  207.598810][ T6665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'.
[  207.683436][ T6670] device syzkaller0 entered promiscuous mode
[  208.161511][ T6653] loop2: detected capacity change from 0 to 40427
[  208.287978][ T6685] device syzkaller0 entered promiscuous mode
[  208.298919][ T6653] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x1ffff
[  208.588782][ T6689] 
[  208.599604][ T6689] =============================
[  208.629018][ T6689] WARNING: suspicious RCU usage
[  208.649230][ T6689] syzkaller #0 Not tainted
[  208.670742][ T6689] -----------------------------
[  208.689369][ T6689] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage!
[  208.725267][ T6689] 
[  208.725267][ T6689] other info that might help us debug this:
[  208.725267][ T6689] 
[  208.748283][ T6689] 
[  208.748283][ T6689] rcu_scheduler_active = 2, debug_locks = 1
[  208.771802][ T6689] 1 lock held by syz.2.577/6689:
[  208.789038][ T6689]  #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  208.818727][ T6689] 
[  208.818727][ T6689] stack backtrace:
[  208.831534][ T6689] CPU: 0 PID: 6689 Comm: syz.2.577 Not tainted syzkaller #0
[  208.839033][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  208.849348][ T6689] Call Trace:
[  208.853010][ T6689]  <TASK>
[  208.855968][ T6689]  dump_stack_lvl+0x188/0x250
[  208.860679][ T6689]  ? load_image+0x400/0x400
[  208.865215][ T6689]  ? show_regs_print_info+0x20/0x20
[  208.870457][ T6689]  ? lockdep_rcu_suspicious+0x110/0x180
[  208.876037][ T6689]  ? local_bh_enable+0x20/0x20
[  208.880930][ T6689]  rhltable_lookup+0x7a9/0x7c0
[  208.885723][ T6689]  ? local_bh_enable+0x20/0x20
[  208.890539][ T6689]  ? release_firmware_map_entry+0x190/0x190
[  208.896642][ T6689]  ? mr_mfc_find_parent+0x190/0x190
[  208.901940][ T6689]  ? mark_lock+0x94/0x320
[  208.906414][ T6689]  ? local_bh_enable+0x20/0x20
[  208.911295][ T6689]  ? preempt_schedule+0xbc/0xd0
[  208.916200][ T6689]  ? ipmr_mfc_add+0x212d/0x2d40
[  208.921086][ T6689]  ? preempt_schedule+0xbc/0xd0
[  208.926194][ T6689]  ? schedule_preempt_disabled+0x20/0x20
[  208.932035][ T6689]  ? lock_chain_count+0x20/0x20
[  208.937032][ T6689]  mr_mfc_find_any_parent+0xb6/0x1e0
[  208.942385][ T6689]  ? local_bh_enable+0x20/0x20
[  208.947281][ T6689]  ip_mr_forward+0x24c/0xf90
[  208.951922][ T6689]  ipmr_mfc_add+0x23cc/0x2d40
[  208.956641][ T6689]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  208.961781][ T6689]  ? __lock_acquire+0x7d10/0x7d10
[  208.966938][ T6689]  ip_mroute_setsockopt+0xeaf/0x1250
[  208.972257][ T6689]  ? ipmr_rule_default+0x70/0x70
[  208.977243][ T6689]  ? __might_sleep+0xf0/0xf0
[  208.982029][ T6689]  ip_setsockopt+0x568/0x3130
[  208.986959][ T6689]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  208.992381][ T6689]  ? aa_sk_perm+0x7dc/0x910
[  208.996945][ T6689]  ? aa_af_perm+0x340/0x340
[  209.001573][ T6689]  ? __fget_files+0x40f/0x480
[  209.006461][ T6689]  ? aa_sock_opt_perm+0x74/0x100
[  209.011426][ T6689]  ? sock_common_setsockopt+0x32/0xb0
[  209.016825][ T6689]  ? raw_setsockopt+0xc5/0x180
[  209.021738][ T6689]  ? sock_common_recvmsg+0x1c0/0x1c0
[  209.027068][ T6689]  __sys_setsockopt+0x2bf/0x3d0
[  209.032050][ T6689]  __x64_sys_setsockopt+0xb1/0xc0
[  209.037203][ T6689]  do_syscall_64+0x4c/0xa0
[  209.041768][ T6689]  ? clear_bhb_loop+0x30/0x80
[  209.046482][ T6689]  ? clear_bhb_loop+0x30/0x80
[  209.051197][ T6689]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  209.057121][ T6689] RIP: 0033:0x7f1259ba2819
[  209.061597][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.081318][ T6689] RSP: 002b:00007f1257dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  209.089867][ T6689] RAX: ffffffffffffffda RBX: 00007f1259e1bfa0 RCX: 00007f1259ba2819
[  209.097953][ T6689] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006
[  209.105946][ T6689] RBP: 00007f1259c38c91 R08: 000000000000003c R09: 0000000000000000
[  209.113938][ T6689] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  209.122045][ T6689] R13: 00007f1259e1c038 R14: 00007f1259e1bfa0 R15: 00007ffd661079c8
[  209.130064][ T6689]  </TASK>
[  209.308806][ T6689] 
[  209.311317][ T6689] =============================
[  209.318804][ T6689] WARNING: suspicious RCU usage
[  209.337074][ T6689] syzkaller #0 Not tainted
[  209.341865][ T6689] -----------------------------
[  209.346818][ T6689] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage!
[  209.393872][ T6689] 
[  209.393872][ T6689] other info that might help us debug this:
[  209.393872][ T6689] 
[  209.567724][ T6689] 
[  209.567724][ T6689] rcu_scheduler_active = 2, debug_locks = 1
[  209.595413][ T6689] 1 lock held by syz.2.577/6689:
[  209.607518][ T6689]  #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  209.628980][ T6689] 
[  209.628980][ T6689] stack backtrace:
[  209.641792][ T6689] CPU: 0 PID: 6689 Comm: syz.2.577 Not tainted syzkaller #0
[  209.649283][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  209.659470][ T6689] Call Trace:
[  209.662875][ T6689]  <TASK>
[  209.665829][ T6689]  dump_stack_lvl+0x188/0x250
[  209.670540][ T6689]  ? load_image+0x400/0x400
[  209.675334][ T6689]  ? show_regs_print_info+0x20/0x20
[  209.680573][ T6689]  ? lockdep_rcu_suspicious+0x110/0x180
[  209.686235][ T6689]  ? local_bh_enable+0x20/0x20
[  209.691036][ T6689]  rhltable_lookup+0x52a/0x7c0
[  209.695829][ T6689]  ? local_bh_enable+0x20/0x20
[  209.700627][ T6689]  ? mr_mfc_find_parent+0x190/0x190
[  209.705856][ T6689]  ? mark_lock+0x94/0x320
[  209.710317][ T6689]  ? local_bh_enable+0x20/0x20
[  209.715884][ T6689]  ? preempt_schedule+0xbc/0xd0
[  209.720760][ T6689]  ? ipmr_mfc_add+0x212d/0x2d40
[  209.725643][ T6689]  ? preempt_schedule+0xbc/0xd0
[  209.730529][ T6689]  ? schedule_preempt_disabled+0x20/0x20
[  209.736200][ T6689]  ? lock_chain_count+0x20/0x20
[  209.741086][ T6689]  mr_mfc_find_any_parent+0xb6/0x1e0
[  209.746411][ T6689]  ? local_bh_enable+0x20/0x20
[  209.751216][ T6689]  ip_mr_forward+0x24c/0xf90
[  209.755846][ T6689]  ipmr_mfc_add+0x23cc/0x2d40
[  209.760668][ T6689]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  209.765648][ T6689]  ? __lock_acquire+0x7d10/0x7d10
[  209.770826][ T6689]  ip_mroute_setsockopt+0xeaf/0x1250
[  209.776164][ T6689]  ? ipmr_rule_default+0x70/0x70
[  209.781438][ T6689]  ? __might_sleep+0xf0/0xf0
[  209.786085][ T6689]  ip_setsockopt+0x568/0x3130
[  209.790984][ T6689]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  209.796489][ T6689]  ? aa_sk_perm+0x7dc/0x910
[  209.801037][ T6689]  ? aa_af_perm+0x340/0x340
[  209.805700][ T6689]  ? __fget_files+0x40f/0x480
[  209.810602][ T6689]  ? aa_sock_opt_perm+0x74/0x100
[  209.815747][ T6689]  ? sock_common_setsockopt+0x32/0xb0
[  209.821240][ T6689]  ? raw_setsockopt+0xc5/0x180
[  209.826125][ T6689]  ? sock_common_recvmsg+0x1c0/0x1c0
[  209.831539][ T6689]  __sys_setsockopt+0x2bf/0x3d0
[  209.836536][ T6689]  __x64_sys_setsockopt+0xb1/0xc0
[  209.841597][ T6689]  do_syscall_64+0x4c/0xa0
[  209.846035][ T6689]  ? clear_bhb_loop+0x30/0x80
[  209.850734][ T6689]  ? clear_bhb_loop+0x30/0x80
[  209.855444][ T6689]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  209.861476][ T6689] RIP: 0033:0x7f1259ba2819
[  209.865922][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.885647][ T6689] RSP: 002b:00007f1257dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  209.894187][ T6689] RAX: ffffffffffffffda RBX: 00007f1259e1bfa0 RCX: 00007f1259ba2819
[  209.902295][ T6689] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006
[  209.910692][ T6689] RBP: 00007f1259c38c91 R08: 000000000000003c R09: 0000000000000000
[  209.918819][ T6689] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  209.926817][ T6689] R13: 00007f1259e1c038 R14: 00007f1259e1bfa0 R15: 00007ffd661079c8
[  209.934840][ T6689]  </TASK>
[  209.947599][ T6689] 
[  209.953209][ T6689] =============================
[  209.958211][ T6689] WARNING: suspicious RCU usage
[  209.963683][ T6689] syzkaller #0 Not tainted
[  209.975388][ T6689] -----------------------------
[  209.980858][ T6689] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage!
[  209.990152][ T6689] 
[  209.990152][ T6689] other info that might help us debug this:
[  209.990152][ T6689] 
[  210.001067][ T6689] 
[  210.001067][ T6689] rcu_scheduler_active = 2, debug_locks = 1
[  210.009655][ T6689] 1 lock held by syz.2.577/6689:
[  210.015359][ T6689]  #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250
[  210.025917][ T6689] 
[  210.025917][ T6689] stack backtrace:
[  210.055233][ T6689] CPU: 0 PID: 6689 Comm: syz.2.577 Not tainted syzkaller #0
[  210.062684][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  210.072877][ T6689] Call Trace:
[  210.076411][ T6689]  <TASK>
[  210.079535][ T6689]  dump_stack_lvl+0x188/0x250
[  210.084256][ T6689]  ? load_image+0x400/0x400
[  210.088880][ T6689]  ? show_regs_print_info+0x20/0x20
[  210.094182][ T6689]  ? lockdep_rcu_suspicious+0x110/0x180
[  210.099755][ T6689]  ? local_bh_enable+0x20/0x20
[  210.104651][ T6689]  rhltable_lookup+0x61e/0x7c0
[  210.109441][ T6689]  ? local_bh_enable+0x20/0x20
[  210.114241][ T6689]  ? mr_mfc_find_parent+0x190/0x190
[  210.119556][ T6689]  ? mark_lock+0x94/0x320
[  210.124132][ T6689]  ? local_bh_enable+0x20/0x20
[  210.129091][ T6689]  ? preempt_schedule+0xbc/0xd0
[  210.133987][ T6689]  ? ipmr_mfc_add+0x212d/0x2d40
[  210.138885][ T6689]  ? preempt_schedule+0xbc/0xd0
[  210.143774][ T6689]  ? schedule_preempt_disabled+0x20/0x20
[  210.149442][ T6689]  ? lock_chain_count+0x20/0x20
[  210.154415][ T6689]  mr_mfc_find_any_parent+0xb6/0x1e0
[  210.159817][ T6689]  ? local_bh_enable+0x20/0x20
[  210.164884][ T6689]  ip_mr_forward+0x24c/0xf90
[  210.169601][ T6689]  ipmr_mfc_add+0x23cc/0x2d40
[  210.174319][ T6689]  ? ipmr_mfc_delete+0x5f0/0x5f0
[  210.179279][ T6689]  ? __lock_acquire+0x7d10/0x7d10
[  210.184354][ T6689]  ip_mroute_setsockopt+0xeaf/0x1250
[  210.189679][ T6689]  ? ipmr_rule_default+0x70/0x70
[  210.194663][ T6689]  ? __might_sleep+0xf0/0xf0
[  210.199281][ T6689]  ip_setsockopt+0x568/0x3130
[  210.203994][ T6689]  ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[  210.209395][ T6689]  ? aa_sk_perm+0x7dc/0x910
[  210.214013][ T6689]  ? aa_af_perm+0x340/0x340
[  210.218593][ T6689]  ? __fget_files+0x40f/0x480
[  210.223299][ T6689]  ? aa_sock_opt_perm+0x74/0x100
[  210.228268][ T6689]  ? sock_common_setsockopt+0x32/0xb0
[  210.233666][ T6689]  ? raw_setsockopt+0xc5/0x180
[  210.238460][ T6689]  ? sock_common_recvmsg+0x1c0/0x1c0
[  210.243788][ T6689]  __sys_setsockopt+0x2bf/0x3d0
[  210.248678][ T6689]  __x64_sys_setsockopt+0xb1/0xc0
[  210.253742][ T6689]  do_syscall_64+0x4c/0xa0
[  210.258182][ T6689]  ? clear_bhb_loop+0x30/0x80
[  210.262976][ T6689]  ? clear_bhb_loop+0x30/0x80
[  210.267942][ T6689]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  210.273859][ T6689] RIP: 0033:0x7f1259ba2819
[  210.278304][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.298026][ T6689] RSP: 002b:00007f1257dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  210.306489][ T6689] RAX: ffffffffffffffda RBX: 00007f1259e1bfa0 RCX: 00007f1259ba2819
[  210.314739][ T6689] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006
[  210.322892][ T6689] RBP: 00007f1259c38c91 R08: 000000000000003c R09: 0000000000000000
[  210.330886][ T6689] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[  210.338868][ T6689] R13: 00007f1259e1c038 R14: 00007f1259e1bfa0 R15: 00007ffd661079c8
[  210.346863][ T6689]  </TASK>