last executing test programs:

4m26.733007788s ago: executing program 3 (id=258):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = semget(0x3, 0x4, 0x69c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
semop(r4, 0x0, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])

4m24.820727095s ago: executing program 3 (id=260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
semop(0x0, 0x0, 0x0)
semop(0x0, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])

4m21.457896178s ago: executing program 3 (id=265):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000040)=0x1)
ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f00000000c0)={0x1, {0xf8000002, 0x8b8, 0xc4f, 0x6}})
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x80880)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

4m18.888739921s ago: executing program 3 (id=266):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

4m14.487059239s ago: executing program 3 (id=280):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e0000001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)

4m13.059418094s ago: executing program 3 (id=274):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r2=>0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@local, 0x4}, {@multicast2, 0x3}]}]}}}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0xffff, '\x00', r2, r0}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = socket(0x2d, 0x2, 0x0)
connect$netlink(r6, &(0x7f00000001c0)=@unspec={0x2d}, 0xc)
write$6lowpan_control(r5, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)

4m12.342875162s ago: executing program 32 (id=274):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r2=>0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@local, 0x4}, {@multicast2, 0x3}]}]}}}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0xffff, '\x00', r2, r0}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = socket(0x2d, 0x2, 0x0)
connect$netlink(r6, &(0x7f00000001c0)=@unspec={0x2d}, 0xc)
write$6lowpan_control(r5, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)

2m14.774900191s ago: executing program 4 (id=431):
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000002400)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000002440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000002480), 0x0, 0x0)
read$msr(r3, &(0x7f00000024c0)=""/102392, 0x18ff8)
r4 = syz_open_dev$sndctrl(&(0x7f000001b4c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000001b640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f000001b980)={0xffffffffffffffff, &(0x7f000001b9c0)="f2", 0x0, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000001ba40)={0x11, 0x14, &(0x7f000001bb00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000100)={0x3, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[{}]})
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00')

2m12.36683214s ago: executing program 4 (id=435):
socket$netlink(0x10, 0x3, 0xf)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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")
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'caif0\x00', @local})
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)

2m4.971169651s ago: executing program 4 (id=445):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e0000001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)

2m0.105849271s ago: executing program 4 (id=449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000400))
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)

1m58.003990883s ago: executing program 4 (id=452):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x8, 0x80000)
fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)

1m54.912750999s ago: executing program 4 (id=455):
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x90001)

1m39.474041898s ago: executing program 33 (id=455):
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x90001)

55.667264714s ago: executing program 0 (id=527):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
ioctl$TCFLSH(r3, 0x800455cc, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000004000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x10800)

54.850910495s ago: executing program 0 (id=528):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8})
bind(r3, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)

53.594527627s ago: executing program 0 (id=529):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = semget(0x3, 0x4, 0x69c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
semop(r4, 0x0, 0x0)
semop(r4, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])

52.305823239s ago: executing program 0 (id=531):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2092)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0xfffffffffffffffe, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000))
write$FUSE_INIT(r0, &(0x7f00000022c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x10})
getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0)

50.406482986s ago: executing program 0 (id=541):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
memfd_create(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x4c42bb4f92, 0x0)
shutdown(r4, 0x0)

47.548785718s ago: executing program 0 (id=535):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea07", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

31.944499579s ago: executing program 34 (id=535):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea07", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

22.375525259s ago: executing program 5 (id=570):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8})
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r5 = dup3(r4, r3, 0x80000)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x1, 0x4, 0xff, 0xfffffffffffffffc}, 0x0, 0x0)
r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x3)
ioctl$HIDIOCSFEATURE(r5, 0xc0404806, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, <r9=>r7})
ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

20.965054485s ago: executing program 5 (id=571):
openat$dir(0xffffffffffffff9c, 0x0, 0x2c6241, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x0)
ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, 0x0)

18.914641506s ago: executing program 5 (id=574):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x1)
socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000780)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
connect$inet(r5, &(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
sendto$inet(r5, &(0x7f0000000940)="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", 0x6fc50de5, 0x92, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000b00), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

15.658761938s ago: executing program 2 (id=577):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000080)=0xfd87, 0x4)
sendmsg$sock(r3, 0x0, 0x200400c1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000000)={0x1, 0x5})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)

13.759610566s ago: executing program 2 (id=579):
socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0xfffd, 0x6, 0x0, 0xf000}, 0x4, [0x6, 0x4, 0x7fff, 0xe00, 0x8d94, 0x3, 0x5, 0x8, 0xe, 0xffff, 0x6, 0x10001, 0xfffffffa, 0x77c, 0x4, 0x7, 0x7c, 0x8, 0x1, 0x1, 0xf2, 0x7, 0xce3, 0x4, 0x3, 0x838, 0xffbffffe, 0x101, 0x1, 0x0, 0x5, 0x5, 0x9, 0x3, 0xd4a2, 0xffffffff, 0x10000, 0x8, 0x5, 0x0, 0x4, 0x5, 0x6, 0x2, 0x81, 0x6, 0x1, 0x2, 0x40, 0x7, 0x4, 0x8, 0x3bb, 0x2, 0x6, 0xab, 0x7f, 0xffc8, 0x4, 0x6, 0x3ff, 0x3ffffff, 0x3, 0xd2cf], [0x7fffffff, 0x10001, 0x6, 0x9, 0x8, 0x0, 0x4d, 0x8000, 0x0, 0x4e16d7d1, 0xfffffffb, 0x3, 0x8, 0x6fc, 0x2, 0x4, 0x7fffffff, 0x4efa, 0x6, 0x4, 0x6, 0x1, 0x1ff, 0x7fff, 0x7, 0x200, 0x9, 0x9, 0x3, 0x3, 0x10000, 0x100, 0x5, 0x8001, 0x100, 0x5, 0x3, 0x5, 0x9, 0x4, 0x2, 0x87, 0x0, 0x4, 0x6, 0x40a, 0x5, 0x800, 0x2, 0x770, 0x9, 0x1ff800, 0x6b8000, 0x5028, 0x5, 0x6, 0x9, 0x8, 0x7, 0xff, 0x3, 0xf30, 0x8, 0xfffffff7], [0x41, 0x5, 0x1c00, 0x1c000, 0x4, 0x8, 0x1, 0x98d, 0x4, 0xfffffffe, 0x6, 0x3ff, 0x0, 0x1, 0x8, 0x4, 0x800, 0x9, 0x8000, 0x800, 0x3, 0x1000, 0x9, 0x9, 0x98b, 0x9, 0x0, 0x2, 0x8000, 0x2, 0x9, 0x6, 0x0, 0x6, 0x9, 0x8, 0x8000, 0x3, 0x3, 0x100, 0x5, 0x80000000, 0x4, 0x4, 0xa, 0x4, 0x6, 0x280000, 0x10, 0x5, 0x0, 0x4, 0xa, 0x7, 0x2, 0x0, 0x7fffffff, 0x1000, 0x6, 0x2, 0x4b9, 0x8, 0x10001], [0x5, 0x6, 0x5, 0x200, 0x3ff, 0x3, 0x0, 0x0, 0x4, 0xf0, 0x2e6, 0x0, 0x7b4285dc, 0x8, 0x1e0000, 0x3e4, 0xffffff3d, 0x3, 0x8, 0x2, 0x9, 0xb, 0x400, 0xffffffff, 0x200, 0x2, 0x7, 0xd, 0x9, 0x1, 0x7, 0x7, 0x7ff, 0x4, 0x1, 0xff, 0x8, 0xb0, 0x9, 0xedb, 0x1ff, 0x562, 0x3ee, 0x40, 0x10000000, 0x9, 0x6, 0x7, 0x3, 0x6, 0x3, 0x3fc, 0x6, 0x8, 0x6, 0x10001, 0x0, 0x9, 0x8, 0x9, 0xa, 0x101, 0x5, 0x7]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r1, 0x5501)
socket$inet_tcp(0x2, 0x1, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)={0x2d, 0x4, 0x0, {0x6, 0x0, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d)
fsmount(r0, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

13.358479995s ago: executing program 5 (id=580):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = open(0x0, 0x108843, 0x55)
fcntl$setlease(r3, 0x400, 0x1)
syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
r4 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r4, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)

12.023964809s ago: executing program 5 (id=581):
setns(0xc9, 0x0)
socket$inet6(0xa, 0x3, 0xff)
msgget$private(0x0, 0x230)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
io_setup(0x8, &(0x7f0000004200))
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88201)

9.459321253s ago: executing program 5 (id=583):
r0 = socket$inet(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r1, &(0x7f00000006c0)=0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x9, 0x4)
write(0xffffffffffffffff, &(0x7f0000000200)="89", 0xffe3)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)

8.121780007s ago: executing program 1 (id=584):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
setns(0xc9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d616373656300001800", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0)

6.899897577s ago: executing program 1 (id=585):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$sock_buf(r3, 0x1, 0x31, 0x0, &(0x7f0000000100))
setsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0x3)
setuid(0xee00)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r5, 0x84, 0x6c, 0xfffffffffffffffe, &(0x7f0000000100)=0x40)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0xc800)
futex(0x0, 0x4, 0x2, 0x0, 0x0, 0x2)

6.473324958s ago: executing program 1 (id=586):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x6)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r6, 0xc17a)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0)

6.01799052s ago: executing program 2 (id=587):
socket(0x10, 0x80003, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x80000, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYBLOB=','], 0x3e, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xffff, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x8003, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x9], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xae4b, 0x2000004, 0x800, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x28}], 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4.371352651s ago: executing program 2 (id=588):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x80001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0xe15, 0x0, 0xfffffff6}}}}}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x51)
sendto$inet6(r3, &(0x7f0000001a00)="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", 0x4d1, 0x40084, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

4.371064151s ago: executing program 6 (id=557):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
getpid()
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x0, 0x0, 0x90001)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18d0010})
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1832c1, 0x9c37611dc13d0da6)
creat(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001c80)="d6c9a47e52b91e1f7104f84f88249a87715dbd99075eb009facf93f4278da1323e6c1d6de1a22e3c3fccbf15aa41106db0bb8d0f7364de140a28d0bdaaf646c693df809dcf4985d3895ce7a89b759a326d27e5d0dceb74a268c19ea6ff472ac916c1e0ddbf93b22f4c9122b1e879a05cd5a44185acde5dd6a7265aa2544fdc3b220c4d53012b538dd92e9527cbf2a9413388c85ba7f06727ca003557be26efcbbe1161b7de40f84f506f1b4e6ba2fcbaff6a4da10b25bee221cfd7633ce5200cb9da4d0738ed635604c56f1c6df169f1e6ac2b0649a6492e4514b246432006dcbb30d49abe11e8825ad970e36e222e5bce4bebf4ca0b258bd4a1fea7f95bfd7d7b20215d114f871451bcd9a33cc652e833ad00f2276a43c4d39f109560e6b07afd64e73b3400f079fce7a4e0d3ec6ec9cbcb360b1a7969e3824ac17b4de3d5a29269d7c09dfde5d0e5a46d7dbd3767ae815f92a48fc82c1cce684d24bcf8b36d8bead912ec9860a571f335595ee3ed1a4eb1bb349bcc43f6afbd0d38a808daf42c96efb3d1e01778538d161c03ea57878aa5b82808869d34f11eb2f30ad7893ab432e771ff2e9d0ac7257363b1eea5d2b7d27fe55c16f490e075108123083726dae8c53360bdf1f24d6a50c44403536261aeaa408e3f746e703d11d0f5682bcdd952e10067141bcb230cebf155dc7e4c96e6c5547a2e847477884938f264b40dc1b60661139c5e5737d1092d5e79af5deaa96e0a07400322d5393e0393ad075f26ea16c032d69217ef3b627e6857e79b68ecd4f098495264902d3dcdf8032f49f37a8e119c972847e2d911b9e4d83fbb771c841cb283f9c8898d949724314d3e7726dee45dade79e20c6b8d548568025cb4884e0709da25b7504e85de7ff162b876c1f9dd7c90882c36ed2b779b8758bafb9a56217b0f521a1234bc11249b1eb670a4388728e592791d8c64e69a509f6629903c35c74d105cc65cc72aadcb8bc9397b03e790e4640210327f9fbc4650cca1b6d7212be949919a70da513213f756eaf01ac6ce2cc4e9d0664ddc39fa95e55a1ae89f1cf3ce6cb5963aa1744a83d5ef79da494737dd5e492d7b5daef1fb4780f581187d27e7f260f3545127f86683838b0a6f86b9707e84455acf4fd9fee0c51f060677b05d82ca181a59f6e33a2cb3c86920281cbac3d0010acef275ffd94de6e591cc223fde8e0810b14e256badc9979956c39974b856230d05d771980ec7819064fa072ba3e305c19bcf9d17d8ab283b9e161169e4219e5bc4955c9e1f7bd773a1640ad8bcd84ea1f9b4f5a08f4877a435ffd81dac60fa108f87af8324bf9aed2509fab2890defd82471d1295e13cabef5cbc1943f901bf2b5697f6076e4fcb4c0abd05f5fd2e3bcf01d6b891a3b9cf3e532936e7272fc3108f6ba8c91b27d80a330916be6c4ffa6fb44cd95d903d13adb88fda030c3ebc1599bc175f10ddddfaba89035d4bf414fbbd1215fa9c3e42b8ce78c4cbea77d3794966e1e816e2783fe66cda0845fa154b141fcb7841ed525875834728e41892d7811dbbca88919101c187f5433587380211a43420b49a4082f57a195bcef10ee085c33f40644aa381d66f5c6d85c365c47e65d6406b03384bdde1b861f5a0afc471a3943a695ea31c0233c5a6cc80e7ddbf789ebc5c86ce13d13f878f65de3dcff7db0bd22478a42dc659c60a675aa6c53946b9705829de0c7f373dccef48b345d9c742dedd651c1c8dfe188e48e15fa62a6dc37e738deca2151340c864d0e6b5877761684b491ce7ef484bd80a72f0d659405710d45eaf4a998d30a796329e6314be433cf7930170218a95a669d8b166f15179abf6c01c560900c9246072ee0fbf231fe01609b055766212de73f71ce79a88db5097188fe421b3bb770eaad7d8ebbd7d211aef774427b169128148c3a91c295a19c2263525743e5dd9d50c3d13f23158ac2f0dacc85474fa406a0337205f0c2b777815f19cec6d7745b2da6f5ac21d54e3925c64a0c7e2b9e40377454e33a4456077f0f1a69dcee003a7dc2dd7041e76339bcbdfebd5f53c7070e6e951b14e96e76b9d0e10675ea54b6d982b043c53c6a5e872302eacf2f17bfc4b626f3fab45cc91611efe7ea49d5aa82d9da8fcf44fbb3beac703e3c39e0d4d4ef08204e27f56efc68c7be4702311e7ab7be9515173a20a8331ffe944b5c08693b4e58027532478a3835d2d3bcd8ea7290308fee858e7fac10d27130ef6c7529c42efe677b4c29ae548037fad49390d3708ac534351f7776f23c2ee387127c708198c25c41b0d5e2d9d30d301b576513e5d5c6633886af79f20efae779ca8ceea07fb25072bf5ea72c57a411940e4b73e7d808740f4425af154d709c675bc3fc726847a8d9695d0e4b4d9230e0b9efc954fc76cee6fcef108f1b22d9311158bdfdf3e7b393e2bcedc4dd565ef500b617ec66e15f08efa320f1fe480c4cb2a0fd35daa69139332a821bd0d0f6453e71cac10d312d3e5ae2b347e2132434b6adb8f0b5d209ab0ab420afe99426a5304eb8a1de85d10b5a4ce94f353d4ab7b8a6c8d71b42f0ac2cccce88fb1362710a40939d98eadc306318995bf105c45ca167006d02e75c266cc74e764233b53d75a983951ca6747df000bb6cc374cca8554acfe0e61ecaa53255527babc4f1ee00759656b2e4b680112a15f9dbfba68a71f4f02a54eaedfdf7e2b13f62af0789bfd1bbcfac61e45e841ff9bc83cdd53f7b4dcd325170862918b5be9d6758bc43d836716a01142f7aeb0854828db8b8d218de6c03f6bf0c60731f4262e65f18a6de722c8f3d16fd4e56e387aa4a24a5f2fbb0e999f257a4168070f24ac0b51f7097d057f2e1fc8bef6258e0cc184f0c949565f61fb437858345d9f1ddb1cf01247f2460866107b97cd4c7622f5d48e7fdbc3ead5dcce36f3f72042dda45bb179f7e8239892ad08f5b0aa3efd173ba328a30df06ca91839f28f9793a8933eb5fa9f73440eafcd22c47ea2b63ceb47e6da6124a888bb56ace79dcfc69831b1a86fdc6d0027e75fb3604d5ea98726a40105de669b0e4bec559e8c79b524bdcafa88f74f49530aa43707c6d940383b0a38e640ee995dace03ed3078226479f47ea278d05ebe47f795b5a5909fb7eabc4adfceb048b80a3c5d65d050dde2278fbdc400372cb431ca69f7931ffd11516dddc8d333cd129c319d99ac9d0e1fef5e6bc8a44e7f98c1a26666f83c2f963fcb5d2c7b448452b03a8ad5e53c70a42e6e493fb6845ecae286731e826256590d008b00128d2d22646e24abac29c29c4f75bc3df8a3c42b143f2bfc5ee2a2f61c1241f7ca406bc8042fbc09b2859ccfc0b27a0f710bfba013fbcec1ea1bbcc11cac58200647b034f6bd067d36fc0acb5d52db239de4cafc5701866628b6c63baeb065d23fa48fb71dc166a752c194738385dcb12aae8a0749cf8af5cd0160e7535190fc59e6856198180679dd33bc1a55b765e0f41d827eb2713281dd31338f37feb116f7b3903f9466c24af80af30b53bfbe28d04456af7afee2ed76fa76c7ce13364845f52757092cb867ef85c13c83f0755788a4ef8cbf0e25ec1dbc86ba93ad239b43f21bb1fa42389f8fadeaccfd9877a0f4a1b5fe63d45a05c0fd90f321e7172b4884e052c1a192e39191b4c94f6c1931de94a9bc5f8b6b63029fb16ce6642bbf39a99d6e1d7be3327ccfd4edc6d131b29faa986eaa00abab7c1b6668d81fbf0e94d6f21b644b815207c40d9a72dbad7c9f2ab836a60e7673520e6e3a28964ad8dfdc8218b94a60c5e82cd4907159d80540c1de18d1ee40c1b206b165e74dc856f1f9a54498dd6eb3ff364bfa1b3ea14af38e27605e6a444e5408a77acec4250bf34e960e241d4fbc6ec99ab6aa4285beddd7b61eb59facc710d293757593c01c1f49f53b5e3058dba5125cb2947dcbb5bd3a8a58015cad34d5839954ed278ee966623aba4ac2eb5654302100af025fac7b92a063b99ff7de301f65d579487836614d59c02ac13a3a569edfb882efbb17527549222d2ba935f38eb316371d24ec659ba745fdfd25080000af90bb422cdffda9425f0083d2db6eac6614b913fdad07240d489924d690d7ecbf84c7214f7592f3a1e491e76a03c46e1d1a9afdebc009cc4d1ca4caaa22ad149aadafd4d4437ca4079657e546bfa88b22f0a2c351a245bc89e2389df803474ec67218514d3962eda9c94067af58dfbbf75896735eb782b3c32e2d64e78b4a6ec404dda9f7c2e0ce3afd1fba83686324f539771024c5636d8ec3d01c36ff98b54616fb4254eabaa9414f0ae92615ed15f9b014357a159c42ac227007c67a68819def1c531882f6e8e0ed3b8d44c88797cf590f602947501bd244ca7bdaefe9332ab9853771487ab7fcd4bf1daeb134dd669dcbb937f11c89cc525ee58398bbc4cb3716ac74bd915528665413d932c496bb434deeed60c2195b4c9139236289596963bd20c4f24ebd12611cf32a978e68efe17bde4c980a8356639634cb0ba579276c76b43fba54a378aca8002dacb26e818101db840ded0a0225024b17b38f7d78e9c1e485e14cee1b33e2e439742eada7ae81d76fe20054f90e04d1b9b71ced466a3443effdd24afa693ca3d84989b898fc9b2872c79f72d6f44780706b8547c576934f156587417650b220edf9064a2b2d64b3a946e46fedea2c69ad254c290014eeb5707da3c3b2fa9cc4461a83100c6cb3315f0bc19cf7150a7b39a382225e69ab852f072f162a87e46742ebc27ca8905d554390927ff34b0507e953c381800b1b976ef53ba6e1ddaefc1a591c5519a86e9585db1fcc0f73393f6a3d72e5976a559d8b5903727d04dc99175381ef3ee2ac2567363fa87d4d22572d81366e2172d126f5af1d43a5838f3f6ace9a589f5e79aba0a5560bf96699cd183dbd620f4cc33eab81b73f6912a8e526866ff592220dbf818d154a36a458b9751150ee326edfd14cf2e5a2499ae57ed57e1539f7d1681013e9ba2f679f23d6c6856e245648c17f6bff7b97193ed98e4018f6b8387839f4f16b121123beeeba243537dccc438eb1fd0c349e293e41cbc27cd14381a6884d6d032166e1d05f844f90894714ea06aaf44fc9fc8a16cf8dd3acd8876bd579c04a8274adea0aa42b66eba1089393e2b2400e39d3bf0e343b1dc669cd31a43085ad0b37d7c961d5657682eaba3435fb77188cc400b94b007e07f1c5324ea6da8ee4eb74e5b74780a778f086aca8c42a1d7dd1ee3c7d3c5ad108525e9cfbed2c09281238e996046902d82693559fa60aee5931fa7e724d8a730fdcc478b54d3ba0af6d9b127bfa5bcc57afefd9594f52d2a1c04a27ab43a77351038a40cfbe4d2c6947764c05dfdfb08a8af74c967e95a7da789d32cc0faf518388f3efa56814557d48f97dcc2b79e141df966fa20a5cbfe63e492d4506a3282e42e2df7b4e1aee93fd612d9c3e000b72df5a17bdb5fa784b4f4e1bc01e8437cdd9491243b002896293c2a0f0d1974fe968f49dfdff249f35d1c3eafeac2b92146d35cc35f8578bf9346e27bddb77d15069ef79d22069b0f350ceead266262b8ff992f726e7775a82ea19cb15c3b64a218a2423abea2bf98603f19f7d9baed3934b7d2f4d06296dae0051e18772344424dbe3ee9817749afe53b91ab74500736bf48bad0dfe3b90c9790e09e1ab8cf4a072c26bd30aeab6f9b2d018174883632fd99f1ebbf574ba08e178b774ddaac5048761abc3a0d532cb869b2bcf950f4a7f24e386ab001a364d207496a965ccb78f30eaf33", 0x1000, 0x4000000, 0x0, 0x0)

4.370159751s ago: executing program 1 (id=589):
r0 = syz_open_procfs$namespace(0x0, 0x0)
setns(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)
r4 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
sendfile(r4, r4, 0x0, 0x1000000201005)

2.979105665s ago: executing program 2 (id=590):
r0 = syz_open_procfs(0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
write$FUSE_IOCTL(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0)
preadv(r0, 0x0, 0x0, 0x73, 0x0)

2.639603724s ago: executing program 1 (id=591):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000006880), 0x0, 0x0)
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x248}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, 0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x40001, 0x0, 0x1, 0x0, 0x1})
io_uring_enter(r4, 0x2, 0x0, 0x0, 0x0, 0x0)

114.097107ms ago: executing program 1 (id=592):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x40)
sendfile(r0, r0, 0x0, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='[)\x00', 0x0, 0xffffffffffffffff)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpriority(0x0, r1, 0x5)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, 0x0, 0x0)
write(r4, &(0x7f0000000280)="1b000000080011aaaaaaaaaa0100", 0xe)
socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f86}, 0x94)

0s ago: executing program 2 (id=593):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x0, 0xb, 0x8, 0xbb2, 0x5}, 0x20)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
rmdir(&(0x7f0000000040)='./bus\x00')
unshare(0x2c020400)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000480)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0xfffffffffffffffe, 0x0}, 0x20)

kernel console output (not intermixed with test programs):

Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.297919][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.306098][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.314504][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.323417][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.331642][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.340518][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.354290][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.364624][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.374487][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.383561][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.391831][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.400374][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.857512][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   84.875935][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   84.941452][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   85.012905][ T5781] chnl_net:caif_netlink_parms(): no params data found
[   85.144553][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.155173][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.162798][ T5783] bridge_slave_0: entered allmulticast mode
[   85.170069][ T5783] bridge_slave_0: entered promiscuous mode
[   85.188852][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.196153][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.203759][ T5777] bridge_slave_0: entered allmulticast mode
[   85.211408][ T5777] bridge_slave_0: entered promiscuous mode
[   85.233128][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.240447][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.247938][ T5783] bridge_slave_1: entered allmulticast mode
[   85.255731][ T5783] bridge_slave_1: entered promiscuous mode
[   85.285375][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.293370][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.301042][ T5777] bridge_slave_1: entered allmulticast mode
[   85.308155][ T5777] bridge_slave_1: entered promiscuous mode
[   85.344528][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.351879][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.359389][ T5785] bridge_slave_0: entered allmulticast mode
[   85.367021][ T5785] bridge_slave_0: entered promiscuous mode
[   85.400110][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.410981][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.418191][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.425654][ T5785] bridge_slave_1: entered allmulticast mode
[   85.433062][ T5785] bridge_slave_1: entered promiscuous mode
[   85.442091][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.465041][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.499876][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.509173][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.517514][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.525020][ T5781] bridge_slave_0: entered allmulticast mode
[   85.532651][ T5781] bridge_slave_0: entered promiscuous mode
[   85.540811][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.547924][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.555492][ T5781] bridge_slave_1: entered allmulticast mode
[   85.562903][ T5781] bridge_slave_1: entered promiscuous mode
[   85.604822][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.629099][ T5783] team0: Port device team_slave_0 added
[   85.648879][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.691489][ T5783] team0: Port device team_slave_1 added
[   85.701537][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.713916][ T5777] team0: Port device team_slave_0 added
[   85.723574][ T5777] team0: Port device team_slave_1 added
[   85.741515][ T5785] team0: Port device team_slave_0 added
[   85.768429][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.801877][ T5785] team0: Port device team_slave_1 added
[   85.809060][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.816325][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.842442][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.876162][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.883279][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.909393][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.943510][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.950862][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.977579][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.992726][ T5781] team0: Port device team_slave_0 added
[   85.999458][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.007525][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.038285][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.058986][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.066190][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.092630][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.125698][ T5781] team0: Port device team_slave_1 added
[   86.145117][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.152162][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.178579][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.225135][ T5777] hsr_slave_0: entered promiscuous mode
[   86.231997][ T5777] hsr_slave_1: entered promiscuous mode
[   86.251007][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.258002][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.284661][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.284968][ T5780] Bluetooth: hci0: command tx timeout
[   86.305171][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.312398][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.338455][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.350177][ T5780] Bluetooth: hci1: command tx timeout
[   86.373431][ T5783] hsr_slave_0: entered promiscuous mode
[   86.380187][ T5783] hsr_slave_1: entered promiscuous mode
[   86.386500][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.394517][ T5783] Cannot create hsr debugfs directory
[   86.419776][ T5780] Bluetooth: hci2: command tx timeout
[   86.453374][ T5785] hsr_slave_0: entered promiscuous mode
[   86.460589][ T5785] hsr_slave_1: entered promiscuous mode
[   86.466750][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.474444][ T5785] Cannot create hsr debugfs directory
[   86.499742][ T5780] Bluetooth: hci3: command tx timeout
[   86.538763][ T5781] hsr_slave_0: entered promiscuous mode
[   86.545599][ T5781] hsr_slave_1: entered promiscuous mode
[   86.552717][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.561010][ T5781] Cannot create hsr debugfs directory
[   87.112007][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.152519][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.179568][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.217740][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.283367][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.313482][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.351668][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.390237][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.506314][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.523721][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.560425][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.579055][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.644677][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.659367][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.677372][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.688849][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.712541][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.739276][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   87.772262][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.779691][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.826863][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.834150][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.858907][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.904212][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[   87.941369][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.948567][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.982238][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.989420][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.043025][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.133573][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   88.175439][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.182660][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.238340][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.245560][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.265786][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.342090][ T5780] Bluetooth: hci0: command tx timeout
[   88.380294][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   88.397916][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.405135][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.420453][ T5780] Bluetooth: hci1: command tx timeout
[   88.482764][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.490011][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.503978][ T5780] Bluetooth: hci2: command tx timeout
[   88.581087][ T5780] Bluetooth: hci3: command tx timeout
[   88.657868][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.840813][ T5777] veth0_vlan: entered promiscuous mode
[   88.866677][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.902583][ T5777] veth1_vlan: entered promiscuous mode
[   89.026486][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.055327][ T5777] veth0_macvtap: entered promiscuous mode
[   89.089544][ T5781] veth0_vlan: entered promiscuous mode
[   89.097142][ T5777] veth1_macvtap: entered promiscuous mode
[   89.148892][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.176036][ T5781] veth1_vlan: entered promiscuous mode
[   89.200973][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.253487][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.274789][ T5785] veth0_vlan: entered promiscuous mode
[   89.299468][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.311227][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.320683][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.329391][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.350274][ T5785] veth1_vlan: entered promiscuous mode
[   89.358777][ T5781] veth0_macvtap: entered promiscuous mode
[   89.402296][ T5783] veth0_vlan: entered promiscuous mode
[   89.420420][ T5781] veth1_macvtap: entered promiscuous mode
[   89.459102][ T5783] veth1_vlan: entered promiscuous mode
[   89.477510][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.495735][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.509326][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.542215][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.555901][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.567715][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.605940][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.615923][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.625493][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.634375][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.656130][ T5785] veth0_macvtap: entered promiscuous mode
[   89.681533][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.689598][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.696108][ T5785] veth1_macvtap: entered promiscuous mode
[   89.736763][ T5783] veth0_macvtap: entered promiscuous mode
[   89.786102][ T5783] veth1_macvtap: entered promiscuous mode
[   89.810364][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.823047][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.872748][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.887600][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.899330][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.913813][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.926121][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.940686][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.953389][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.964359][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.975129][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.985197][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.995803][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.008946][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.052521][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.065541][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.080995][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.098828][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.111031][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.123447][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.137084][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.153795][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.169269][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.179539][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.195334][ T5841] syz.0.1[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   90.195778][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.220738][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.232040][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.245163][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.269380][ T5841] loop0: detected capacity change from 0 to 512
[   90.283314][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.293473][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.302788][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.311853][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.350421][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.361076][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.373843][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.382900][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.395471][ T5841] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1: corrupted in-inode xattr: invalid ea_ino
[   90.421516][ T5780] Bluetooth: hci0: command tx timeout
[   90.438375][ T5841] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1: couldn't read orphan inode 15 (err -117)
[   90.454393][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.486571][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.500684][ T5780] Bluetooth: hci1: command tx timeout
[   90.537443][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.581142][ T5780] Bluetooth: hci2: command tx timeout
[   90.719767][ T5780] Bluetooth: hci3: command tx timeout
[   90.739707][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.758376][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.889910][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.909142][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.575876][ T5816] IPVS: starting estimator thread 0...
[   91.799861][ T5851] IPVS: using max 16 ests per chain, 38400 per kthread
[   91.813249][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.916509][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.946939][   T23] cfg80211: failed to load regulatory.db
[   91.956325][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.114970][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.159228][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.239743][ T5854] loop1: detected capacity change from 0 to 1024
[   92.809913][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.299082][ T5780] Bluetooth: hci0: command tx timeout
[   94.305072][ T5786] Bluetooth: hci1: command tx timeout
[   94.319744][   T51] Bluetooth: hci2: command tx timeout
[   94.325203][   T51] Bluetooth: hci3: command tx timeout
[   95.369931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   96.029402][ T5862] FAT-fs (mtdblock0): bogus logical sector size 65535
[   96.036518][ T5862] FAT-fs (mtdblock0): Can't find a valid FAT filesystem
[   96.579482][ T5868] loop1: detected capacity change from 0 to 128
[   98.850146][ T5878] Zero length message leads to an empty skb
[   98.881760][ T5878] jffs2: notice: (5878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   99.301907][ T5886] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  102.639680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  103.299440][ T5906] loop1: detected capacity change from 0 to 2048
[  103.348601][ T5906] =======================================================
[  103.348601][ T5906] WARNING: The mand mount option has been deprecated and
[  103.348601][ T5906]          and is ignored by this kernel. Remove the mand
[  103.348601][ T5906]          option from the mount to silence this warning.
[  103.348601][ T5906] =======================================================
[  103.467594][ T5906] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  105.735587][ T5921] warning: `syz.1.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  108.099202][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[  108.226907][ T5924] syz.0.21: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  108.242155][ T5924] CPU: 1 PID: 5924 Comm: syz.0.21 Not tainted syzkaller #0
[  108.249385][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  108.259484][ T5924] Call Trace:
[  108.262807][ T5924]  <TASK>
[  108.265752][ T5924]  dump_stack_lvl+0x18c/0x250
[  108.270892][ T5924]  ? show_regs_print_info+0x20/0x20
[  108.276119][ T5924]  ? load_image+0x420/0x420
[  108.280666][ T5924]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  108.287136][ T5924]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  108.293687][ T5924]  warn_alloc+0x246/0x340
[  108.298507][ T5924]  ? zone_watermark_ok_safe+0x230/0x230
[  108.304102][ T5924]  ? __mutex_trylock_common+0x160/0x270
[  108.309702][ T5924]  __vmalloc_node_range+0x129/0x1320
[  108.315043][ T5924]  ? tomoyo_path_number_perm+0x217/0x5e0
[  108.320709][ T5924]  ? rcu_is_watching+0x15/0xb0
[  108.325529][ T5924]  ? trace_contention_end+0x39/0xe0
[  108.330767][ T5924]  ? __mutex_lock+0x30d/0xc80
[  108.335517][ T5924]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  108.341190][ T5924]  ? tomoyo_path_number_perm+0x217/0x5e0
[  108.346893][ T5924]  ? free_vm_area+0x50/0x50
[  108.351468][ T5924]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  108.356533][ T5924]  vmalloc+0x79/0x90
[  108.360462][ T5924]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  108.365631][ T5924]  dvb_dvr_do_ioctl+0x12e/0x220
[  108.370764][ T5924]  dvb_usercopy+0x195/0x2b0
[  108.375303][ T5924]  ? dvb_dvr_release+0x3e0/0x3e0
[  108.380277][ T5924]  ? dvb_generic_ioctl+0xb0/0xb0
[  108.385280][ T5924]  ? dvb_dvr_poll+0x230/0x230
[  108.390035][ T5924]  dvb_dvr_ioctl+0x29/0x30
[  108.394536][ T5924]  __se_sys_ioctl+0xfd/0x170
[  108.399200][ T5924]  do_syscall_64+0x55/0xb0
[  108.403677][ T5924]  ? clear_bhb_loop+0x40/0x90
[  108.408435][ T5924]  ? clear_bhb_loop+0x40/0x90
[  108.413179][ T5924]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  108.419220][ T5924] RIP: 0033:0x7fb62719e1d9
[  108.423656][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.443558][ T5924] RSP: 002b:00007fb62805e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.452009][ T5924] RAX: ffffffffffffffda RBX: 00007fb627425fa0 RCX: 00007fb62719e1d9
[  108.460014][ T5924] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005
[  108.468007][ T5924] RBP: 00007fb627235888 R08: 0000000000000000 R09: 0000000000000000
[  108.476023][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.484088][ T5924] R13: 00007fb627426038 R14: 00007fb627425fa0 R15: 00007ffc066ff3e8
[  108.492108][ T5924]  </TASK>
[  108.496661][ T5924] Mem-Info:
[  108.499912][ T5924] active_anon:10767 inactive_anon:0 isolated_anon:0
[  108.499912][ T5924]  active_file:16047 inactive_file:39958 isolated_file:0
[  108.499912][ T5924]  unevictable:768 dirty:187 writeback:0
[  108.499912][ T5924]  slab_reclaimable:10314 slab_unreclaimable:91099
[  108.499912][ T5924]  mapped:24290 shmem:6692 pagetables:513
[  108.499912][ T5924]  sec_pagetables:0 bounce:0
[  108.499912][ T5924]  kernel_misc_reclaimable:0
[  108.499912][ T5924]  free:1340609 free_pcp:12737 free_cma:0
[  108.545242][ T5924] Node 0 active_anon:43068kB inactive_anon:0kB active_file:64188kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97160kB dirty:744kB writeback:0kB shmem:25232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10484kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no
[  108.577558][ T5924] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  108.610684][ T5924] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  108.638927][ T5924] lowmem_reserve[]: 0 2505 2506 2506 2506
[  108.644833][ T5924] Node 0 DMA32 free:1454724kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:43032kB inactive_anon:0kB active_file:64188kB inactive_file:158544kB unevictable:1536kB writepending:744kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:31280kB local_pcp:18708kB free_cma:0kB
[  108.675426][ T5924] lowmem_reserve[]: 0 0 1 1 1
[  108.680205][ T5924] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  108.708617][ T5924] lowmem_reserve[]: 0 0 0 0 0
[  108.713623][ T5924] Node 1 Normal free:3892352kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19608kB local_pcp:5696kB free_cma:0kB
[  108.743191][ T5924] lowmem_reserve[]: 0 0 0 0 0
[  108.747927][ T5924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  108.760661][ T5924] Node 0 DMA32: 1041*4kB (UM) 1384*8kB (UM) 772*16kB (UME) 492*32kB (M) 231*64kB (ME) 33*128kB (ME) 17*256kB (ME) 13*512kB (M) 11*1024kB (UM) 9*2048kB (UME) 330*4096kB (M) = 1454724kB
[  108.778957][ T5924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  108.791515][ T5924] Node 1 Normal: 164*4kB (UM) 46*8kB (UME) 22*16kB (UME) 57*32kB (UME) 8*64kB (UE) 4*128kB (UM) 0*256kB 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3892352kB
[  108.808722][ T5924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  108.818372][ T5924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  108.827911][ T5924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  108.837526][ T5924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  108.846863][ T5924] 62698 total pagecache pages
[  108.851627][ T5924] 0 pages in swap cache
[  108.855812][ T5924] Free swap  = 124996kB
[  108.860055][ T5924] Total swap = 124996kB
[  108.864234][ T5924] 2097051 pages RAM
[  108.868070][ T5924] 0 pages HighMem/MovableOnly
[  108.872848][ T5924] 421118 pages reserved
[  108.877027][ T5924] 0 pages cma reserved
[  108.936257][   T23] IPVS: starting estimator thread 0...
[  109.040721][ T5939] IPVS: using max 19 ests per chain, 45600 per kthread
[  109.870057][ T5948] Bluetooth: MGMT ver 1.22
[  110.848238][   T27] audit: type=1326 audit(1791831433.761:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.0.26" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb62719e1d9 code=0x0
[  117.539649][    C0] sched: RT throttling activated
[  117.955046][ T5971] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  118.409954][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  120.415021][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  122.710708][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  122.905920][ T5814] usb 4-1: device descriptor read/all, error -71
[  123.530023][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  126.811677][ T6001] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  126.822033][ T6001] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  126.833318][ T6001] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  126.844553][ T6001] Error parsing options; rc = [-22]
[  130.800330][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  131.209975][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  133.272625][ T6024] autofs4:pid:6024:autofs_fill_super: called with bogus options
[  134.179701][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  134.589691][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  134.722753][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  134.730592][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  137.993442][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'.
[  139.887147][ T6039] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6040] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6039]
[  142.693480][ T6047] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  142.724661][ T6047] CIFS mount error: No usable UNC path provided in device string!
[  142.724661][ T6047] 
[  142.737567][ T6047] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  144.910775][ T6052] loop2: detected capacity change from 0 to 512
[  144.944524][ T6052] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  145.412891][ T6060] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  145.421447][ T6060] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  145.458906][ T6052] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.46: Allocating blocks 41-42 which overlap fs metadata
[  148.069760][ T6052] EXT4-fs (loop2): Remounting filesystem read-only
[  148.090248][ T6052] Quota error (device loop2): write_blk: dquota write failed
[  148.158768][ T6052] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  148.182830][ T6069] loop0: detected capacity change from 0 to 1024
[  148.286202][ T6052] Quota error (device loop2): write_blk: dquota write failed
[  148.325130][ T6052] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  148.364351][ T6052] EXT4-fs (loop2): 1 truncate cleaned up
[  148.399312][ T6052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.559000][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.266964][ T6089] xt_policy: output policy not valid in PREROUTING and INPUT
[  154.060018][ T6099] process 'syz.3.61' launched '/dev/fd/4' with NULL argv: empty string added
[  156.355929][ T6103] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  164.802805][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[  164.969296][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[  165.205466][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.70'.
[  165.218980][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'.
[  165.231756][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[  166.040379][ T6143] loop0: detected capacity change from 0 to 32768
[  166.057068][ T6143] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.72 (6143)
[  166.113852][ T6143] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  166.128860][ T6143] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  166.141810][ T6143] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  166.154499][ T6143] BTRFS info (device loop0): use zstd compression, level 3
[  166.164828][ T6143] BTRFS info (device loop0): force clearing of disk cache
[  166.175226][ T6143] BTRFS info (device loop0): enabling disk space caching
[  166.183914][ T6143] BTRFS info (device loop0): disk space caching is enabled
[  167.054308][ T6151] input: syz1 as /devices/virtual/input/input5
[  168.469934][ T6143] BTRFS info (device loop0): enabling ssd optimizations
[  168.478585][ T6143] BTRFS info (device loop0): auto enabling async discard
[  168.496081][ T6143] BTRFS info (device loop0): rebuilding free space tree
[  168.574447][ T6143] BTRFS info (device loop0): disabling free space tree
[  168.583039][ T6143] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  168.597265][ T6143] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  168.713961][ T5777] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  177.970096][   T27] audit: type=1800 audit(1791831501.971:3): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.73" name="file1" dev="sda1" ino=2043 res=0 errno=0
[  180.288994][ T6206] input: syz1 as /devices/virtual/input/input6
[  183.283366][ T6218] loop2: detected capacity change from 0 to 764
[  183.675595][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'.
[  183.699732][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.86'.
[  183.710245][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'.
[  183.721743][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'.
[  188.826898][ T6240] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  188.837438][ T6240] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  189.701590][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'.
[  190.235329][ T6252] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  191.631298][ T6246] team0 (unregistering): Port device team_slave_0 removed
[  191.882769][ T6246] team0 (unregistering): Port device team_slave_1 removed
[  192.550409][ T5861] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  192.563608][ T5861] CPU: 0 PID: 5861 Comm: kworker/u5:4 Not tainted syzkaller #0
[  192.573474][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  192.586417][ T5861] Workqueue: hci3 hci_rx_work
[  192.591339][ T5861] Call Trace:
[  192.594881][ T5861]  <TASK>
[  192.598988][ T5861]  dump_stack_lvl+0x18c/0x250
[  192.605673][ T5861]  ? show_regs_print_info+0x20/0x20
[  192.612903][ T5861]  ? load_image+0x420/0x420
[  192.618261][ T5861]  sysfs_create_dir_ns+0x26e/0x2a0
[  192.624732][ T5861]  ? __lock_acquire+0x7eb0/0x7eb0
[  192.631129][ T5861]  ? sysfs_warn_dup+0xa0/0xa0
[  192.636394][ T5861]  ? do_raw_spin_unlock+0x121/0x230
[  192.642255][ T5861]  kobject_add_internal+0x617/0xc90
[  192.649563][ T5861]  kobject_add+0x164/0x240
[  192.654826][ T5861]  ? kobject_init+0x1d0/0x1d0
[  192.660579][ T5861]  ? get_device_parent+0x366/0x390
[  192.666767][ T5861]  device_add+0x3fa/0xc40
[  192.672697][ T5861]  hci_conn_add_sysfs+0xd5/0x1e0
[  192.677897][ T5861]  le_conn_complete_evt+0xe9a/0x1480
[  192.686004][ T5861]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  192.694418][ T5861]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  192.703328][ T5861]  ? mutex_unlock+0x10/0x10
[  192.709341][ T5861]  ? skb_pull_data+0xf0/0x1f0
[  192.714797][ T5861]  hci_le_conn_complete_evt+0x187/0x440
[  192.720927][ T5861]  ? hci_remote_host_features_evt+0x150/0x150
[  192.728736][ T5861]  hci_event_packet+0x7b4/0x1280
[  192.735982][ T5861]  ? __lock_acquire+0x7eb0/0x7eb0
[  192.743844][ T5861]  ? lock_chain_count+0x20/0x20
[  192.751024][ T5861]  ? bis_list+0x290/0x290
[  192.756897][ T5861]  ? kcov_remote_start+0x513/0x810
[  192.766831][ T5861]  ? lockdep_hardirqs_on+0x98/0x150
[  192.772880][ T5861]  ? hci_send_to_monitor+0xd7/0x4f0
[  192.778271][ T5861]  hci_rx_work+0x43a/0xd60
[  192.783868][ T5861]  ? process_scheduled_works+0x975/0x1600
[  192.791605][ T5861]  process_scheduled_works+0xa60/0x1600
[  192.798130][ T5861]  ? worker_attach_to_pool+0x370/0x370
[  192.807132][ T5861]  ? assign_work+0x3cc/0x5d0
[  192.813173][ T5861]  worker_thread+0xa5e/0xfe0
[  192.820577][ T5861]  ? _raw_spin_unlock+0x40/0x40
[  192.827479][ T5861]  ? __kthread_parkme+0x71/0x1c0
[  192.832875][ T5861]  kthread+0x2fa/0x390
[  192.838625][ T5861]  ? pr_cont_work+0x550/0x550
[  192.845055][ T5861]  ? kthread_blkcg+0xd0/0xd0
[  192.852508][ T5861]  ret_from_fork+0x48/0x80
[  192.857289][ T5861]  ? kthread_blkcg+0xd0/0xd0
[  192.863296][ T5861]  ret_from_fork_asm+0x11/0x20
[  192.872888][ T5861]  </TASK>
[  193.294904][ T5861] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  193.314296][ T5861] Bluetooth: hci3: failed to register connection device
[  194.345600][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.353606][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  197.077948][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[  197.093429][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.242064][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.313757][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'.
[  197.729205][ T6263] hsr_slave_1 (unregistering): left promiscuous mode
[  197.779390][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'.
[  199.010198][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'.
[  199.137884][ T6287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.100'.
[  199.156000][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[  199.172450][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'.
[  201.866862][ T6304] loop2: detected capacity change from 0 to 1024
[  201.959749][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  203.140094][ T5861] Bluetooth: hci3: command 0x0406 tx timeout
[  203.190208][ T6306] hfsplus: invalid extended attribute record
[  203.235443][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.378489][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.482042][   T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  203.579663][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.615175][   T23] usb 2-1: config 0 descriptor??
[  207.365130][   T23] usbhid 2-1:0.0: can't add hid device: -71
[  207.387530][   T23] usbhid: probe of 2-1:0.0 failed with error -71
[  207.462004][   T23] usb 2-1: USB disconnect, device number 2
[  207.645414][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[  207.723998][ T6320] tipc: Started in network mode
[  207.730559][ T6320] tipc: Node identity 4, cluster identity 4711
[  207.739878][ T6320] tipc: Node number set to 4
[  208.588888][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  208.599969][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  208.613213][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[  210.119042][ T6329] loop0: detected capacity change from 0 to 2048
[  211.106328][   T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  211.117192][   T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0
[  211.129243][   T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  211.143082][   T51] Workqueue: hci3 hci_rx_work
[  211.149282][   T51] Call Trace:
[  211.155071][   T51]  <TASK>
[  211.159577][   T51]  dump_stack_lvl+0x18c/0x250
[  211.166086][   T51]  ? show_regs_print_info+0x20/0x20
[  211.172766][   T51]  ? load_image+0x420/0x420
[  211.185409][   T51]  sysfs_create_dir_ns+0x26e/0x2a0
[  211.192525][   T51]  ? __lock_acquire+0x7eb0/0x7eb0
[  211.198474][   T51]  ? sysfs_warn_dup+0xa0/0xa0
[  211.204654][   T51]  ? do_raw_spin_unlock+0x121/0x230
[  211.214269][   T51]  kobject_add_internal+0x617/0xc90
[  211.219671][   T51]  kobject_add+0x164/0x240
[  211.225667][   T51]  ? kobject_init+0x1d0/0x1d0
[  211.231318][   T51]  ? get_device_parent+0x366/0x390
[  211.237164][   T51]  device_add+0x3fa/0xc40
[  211.242318][   T51]  hci_conn_add_sysfs+0xd5/0x1e0
[  211.248541][   T51]  le_conn_complete_evt+0xe9a/0x1480
[  211.256310][   T51]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  211.264614][   T51]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  211.272565][   T51]  ? mutex_unlock+0x10/0x10
[  211.279929][   T51]  ? skb_pull_data+0xf0/0x1f0
[  211.286180][   T51]  hci_le_conn_complete_evt+0x187/0x440
[  211.294345][   T51]  ? hci_remote_host_features_evt+0x150/0x150
[  211.302576][   T51]  hci_event_packet+0x7b4/0x1280
[  211.308661][   T51]  ? __lock_acquire+0x7eb0/0x7eb0
[  211.316673][   T51]  ? lock_chain_count+0x20/0x20
[  211.323976][   T51]  ? bis_list+0x290/0x290
[  211.329052][   T51]  ? kcov_remote_start+0x513/0x810
[  211.335819][   T51]  ? lockdep_hardirqs_on+0x98/0x150
[  211.343683][   T51]  ? hci_send_to_monitor+0xd7/0x4f0
[  211.350932][   T51]  hci_rx_work+0x43a/0xd60
[  211.355816][   T51]  ? process_scheduled_works+0x975/0x1600
[  211.364561][   T51]  process_scheduled_works+0xa60/0x1600
[  211.372428][   T51]  ? worker_attach_to_pool+0x370/0x370
[  211.378744][   T51]  ? assign_work+0x3cc/0x5d0
[  211.383876][   T51]  worker_thread+0xa5e/0xfe0
[  211.394750][   T51]  kthread+0x2fa/0x390
[  211.401985][   T51]  ? pr_cont_work+0x550/0x550
[  211.409210][   T51]  ? kthread_blkcg+0xd0/0xd0
[  211.414942][   T51]  ret_from_fork+0x48/0x80
[  211.419644][   T51]  ? kthread_blkcg+0xd0/0xd0
[  211.425562][   T51]  ret_from_fork_asm+0x11/0x20
[  211.430807][   T51]  </TASK>
[  211.481151][   T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  211.503513][   T51] Bluetooth: hci3: failed to register connection device
[  211.618082][ T6329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.861891][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[  211.878900][ T6336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.115'.
[  211.892238][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'.
[  211.911897][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[  214.345730][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[  215.417784][ T6355] loop2: detected capacity change from 0 to 256
[  218.807520][ T6372] ip_tables: iptables: counters copy to user failed while replacing table
[  219.614472][ T6381] loop0: detected capacity change from 0 to 1024
[  219.641791][ T6381] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.648937][ T6381] EXT4-fs: inline encryption not supported
[  219.680733][ T6381] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.712926][ T6381] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  219.736030][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[  219.749525][ T6383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.133'.
[  219.769426][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'.
[  219.781928][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[  219.886560][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  219.916853][ T6381] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.160610][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  221.943108][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'.
[  225.171500][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'.
[  226.034300][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'.
[  226.079948][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.713970][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.907677][ T6419] loop3: detected capacity change from 0 to 2048
[  227.929246][ T6419] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  229.417329][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'.
[  229.765961][ T6437] loop0: detected capacity change from 0 to 512
[  229.811107][ T6437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  229.919336][ T6439] virtio-fs: tag </dev/nullb0> not found
[  230.435203][ T6437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.665588][ T6437] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.283174][ T6447] Cannot find add_set index 0 as target
[  233.964909][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.374068][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[  236.386644][ T6463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.145'.
[  236.398033][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'.
[  236.410096][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[  239.897102][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'.
[  240.886297][   T27] audit: type=1400 audit(1791831564.981:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=6478 comm="syz.1.152"
[  241.176756][ T6487] CIFS mount error: No usable UNC path provided in device string!
[  241.176756][ T6487] 
[  241.188947][ T6487] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  243.694853][ T6496] loop1: detected capacity change from 0 to 4096
[  244.941689][ T6496] ntfs3: loop1: Failed to load $Extend (-22).
[  245.051022][ T6496] ntfs3: loop1: Failed to initialize $Extend.
[  246.338723][   T27] audit: type=1800 audit(1791831570.441:5): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.155" name="file2" dev="loop1" ino=31 res=0 errno=0
[  248.054010][ T5861] Bluetooth: hci3: command 0x0406 tx timeout
[  248.817590][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.160'.
[  249.317144][ T6520] loop2: detected capacity change from 0 to 128
[  250.747845][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'.
[  250.758295][ T6533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.161'.
[  250.767510][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'.
[  250.778111][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'.
[  251.045126][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[  251.368501][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.683053][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.270582][ T6559] input: syz0 as /devices/virtual/input/input7
[  255.788463][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.800985][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.326015][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'.
[  256.467872][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[  263.269899][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'.
[  263.817329][ T6609] CIFS mount error: No usable UNC path provided in device string!
[  263.817329][ T6609] 
[  263.827726][ T6609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  267.254747][ T6628] loop2: detected capacity change from 0 to 1024
[  267.639926][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  267.800849][ T6636] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  268.677038][ T6638] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  274.039911][   T28] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  274.315002][   T28] usb 4-1: config 2 has an invalid interface number: 79 but max is 0
[  274.354553][   T28] usb 4-1: config 2 has no interface number 0
[  274.450976][   T28] usb 4-1: config 2 interface 79 has no altsetting 0
[  274.551133][   T28] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb
[  274.606488][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.849810][   T28] usb 4-1: Product: syz
[  274.854096][   T28] usb 4-1: Manufacturer: syz
[  274.858744][   T28] usb 4-1: SerialNumber: syz
[  275.358428][ T6673] loop1: detected capacity change from 0 to 1024
[  276.041271][   T28] esd_usb 4-1:2.79: sending version message failed
[  276.049051][   T28] esd_usb: probe of 4-1:2.79 failed with error -22
[  276.261487][   T28] usb 4-1: USB disconnect, device number 4
[  277.061557][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'.
[  277.259021][ T6683] Cannot find add_set index 0 as target
[  278.235998][ T6683] loop0: detected capacity change from 0 to 512
[  278.254446][ T6683] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  278.269338][ T6683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  279.423721][ T6683] EXT4-fs (loop0): 1 truncate cleaned up
[  279.434766][ T6683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.757033][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.693199][ T6721] loop1: detected capacity change from 0 to 164
[  288.185159][ T6725] rock: directory entry would overflow storage
[  288.193808][ T6725] rock: sig=0x4f50, size=4, remaining=3
[  288.199664][ T6725] iso9660: Corrupted directory entry in block 5 of inode 1792
[  289.647034][ T6737] loop1: detected capacity change from 0 to 764
[  294.266794][ T6765] CIFS mount error: No usable UNC path provided in device string!
[  294.266794][ T6765] 
[  294.277261][ T6765] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  295.220882][ T6772] ima: policy update failed
[  295.225700][   T27] audit: type=1802 audit(1791831876.342:6): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.227" res=0 errno=0
[  295.912462][ T6773] UBIFS error (pid: 6773): cannot open "ubi:0", error -19
[  295.915976][ T6773] ima: Unable to open file: / (-22)
[  296.041092][ T6768] ima: policy update failed
[  297.419681][   T27] audit: type=1802 audit(1791831877.172:7): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.227" res=0 errno=0
[  301.795383][ T6797] loop0: detected capacity change from 0 to 164
[  303.240198][ T6792] loop3: detected capacity change from 0 to 512
[  303.248640][ T6792] EXT4-fs: Ignoring removed orlov option
[  303.261249][ T6792] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  303.358370][ T6792] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2974: inode #15: comm syz.3.232: corrupted xattr block 252: invalid header
[  303.377915][ T6792] EXT4-fs (loop3): Remounting filesystem read-only
[  303.385406][ T6792] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  303.395464][ T6792] EXT4-fs (loop3): 1 orphan inode deleted
[  303.404138][ T6792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.785620][ T6806] netlink: 64 bytes leftover after parsing attributes in process `syz.0.236'.
[  303.885519][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.680475][ T6825] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  305.688563][ T6825] ALSA: mixer_oss: invalid OSS volume ''
[  305.712616][ T6821] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[  314.304367][ T6896] loop3: detected capacity change from 0 to 128
[  315.190986][ T6903] loop0: detected capacity change from 0 to 512
[  315.793458][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'.
[  317.230359][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.237814][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.548735][ T6913] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  319.321485][   T12] kworker/u4:1: attempt to access beyond end of device
[  319.321485][   T12] loop3: rw=1, sector=145, nr_sectors = 6 limit=128
[  323.321248][   T27] audit: type=1326 audit(1791831904.442:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  323.495737][   T27] audit: type=1326 audit(1791831904.442:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  323.658180][   T27] audit: type=1326 audit(1791831904.442:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  323.917654][   T27] audit: type=1326 audit(1791831904.452:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  324.399235][   T27] audit: type=1326 audit(1791831904.472:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  324.551155][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.254'.
[  324.569637][   T27] audit: type=1326 audit(1791831904.472:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  324.627332][   T27] audit: type=1326 audit(1791831904.472:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  324.699740][   T27] audit: type=1326 audit(1791831904.472:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  324.781256][   T27] audit: type=1326 audit(1791831904.502:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  324.874825][ T6957] veth3: entered promiscuous mode
[  324.919860][   T27] audit: type=1326 audit(1791831904.552:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eac99e1d9 code=0x7ffc0000
[  324.987147][ T6958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.254'.
[  325.932667][ T6970] Cannot find add_set index 0 as target
[  329.392767][ T6994] loop3: detected capacity change from 0 to 64
[  331.395031][ T7006] loop2: detected capacity change from 0 to 512
[  331.634096][ T7003] loop0: detected capacity change from 0 to 40427
[  331.649198][ T7003] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  331.655795][ T6972] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  331.657426][ T7003] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  331.752078][ T7003] F2FS-fs (loop0): Found nat_bits in checkpoint
[  332.379483][ T7015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'.
[  333.414328][ T7006] loop2: detected capacity change from 0 to 128
[  333.476760][ T7006] FAT-fs (loop2): bogus logical sector size 5
[  333.483354][ T7006] FAT-fs (loop2): Can't find a valid FAT filesystem
[  333.583669][ T5785] BFS-fs: bfs_iget(): Bad inode number loop3:0000fe02
[  333.670868][ T5785] BFS-fs: bfs_iget(): Bad inode number loop3:0000fe02
[  334.351478][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  334.588956][ T5845] usb 1-1: config 2 has an invalid interface number: 79 but max is 0
[  334.617686][ T5845] usb 1-1: config 2 has no interface number 0
[  334.638408][ T5845] usb 1-1: config 2 interface 79 has no altsetting 0
[  334.695790][ T5845] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb
[  334.719888][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.760125][ T5845] usb 1-1: Product: syz
[  334.764398][ T5845] usb 1-1: Manufacturer: syz
[  334.769049][ T5845] usb 1-1: SerialNumber: syz
[  335.082801][ T5845] esd_usb 1-1:2.79: sending version message failed
[  335.103414][ T5845] esd_usb: probe of 1-1:2.79 failed with error -22
[  335.142846][ T5845] usb 1-1: USB disconnect, device number 2
[  335.547381][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[  335.730780][ T7040] veth3: entered promiscuous mode
[  335.822900][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'.
[  337.908390][ T7061] mmap: syz.1.277 (7061) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  338.183785][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.197927][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.208439][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.225825][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.234067][ T5861] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  338.243057][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.469866][ T7080] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  339.474096][ T7087] loop1: detected capacity change from 0 to 512
[  339.627202][ T7012] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  340.396143][   T51] Bluetooth: hci3: command tx timeout
[  340.714275][ T7074] chnl_net:caif_netlink_parms(): no params data found
[  342.460797][ T7101] loop1: detected capacity change from 0 to 128
[  343.299983][   T51] Bluetooth: hci3: command tx timeout
[  343.328946][ T7101] FAT-fs (loop1): bogus logical sector size 5
[  343.335183][ T7101] FAT-fs (loop1): Can't find a valid FAT filesystem
[  343.373563][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'.
[  343.605089][ T7012] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  343.819678][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.876068][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.948667][ T7074] bridge_slave_0: entered allmulticast mode
[  343.981749][ T7074] bridge_slave_0: entered promiscuous mode
[  344.386276][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.586115][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.630775][ T7074] bridge_slave_1: entered allmulticast mode
[  344.695491][ T7074] bridge_slave_1: entered promiscuous mode
[  344.887132][ T7074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.919425][ T7074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.519664][ T5861] Bluetooth: hci3: command tx timeout
[  346.757019][ T7074] team0: Port device team_slave_0 added
[  346.781959][ T7074] team0: Port device team_slave_1 added
[  346.884683][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.912987][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.979645][ T7074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.020017][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.027052][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.064033][ T7074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.085954][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[  347.233835][ T7124] veth3: entered promiscuous mode
[  347.293321][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'.
[  347.455849][ T7074] hsr_slave_0: entered promiscuous mode
[  347.490208][ T7074] hsr_slave_1: entered promiscuous mode
[  347.499667][ T7074] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.507297][ T7074] Cannot create hsr debugfs directory
[  347.686718][ T7135] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  348.652129][ T5861] Bluetooth: hci3: command tx timeout
[  351.585337][ T7074] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  351.787105][ T7074] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  351.865410][ T7074] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  351.896906][ T7074] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  352.134769][ T7164] virtio-fs: tag </dev/nullb0> not found
[  353.949119][ T7074] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.023934][ T7074] 8021q: adding VLAN 0 to HW filter on device team0
[  354.084919][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.092276][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.124076][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.131328][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.212118][ T7074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  354.233875][ T7074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  354.287698][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'.
[  354.389938][ T7172] veth3: entered promiscuous mode
[  355.339485][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.298'.
[  355.352433][ T7178] tipc: Started in network mode
[  355.357387][ T7178] tipc: Node identity 4, cluster identity 4711
[  355.365573][ T7178] tipc: Node number set to 4
[  358.059663][ T7192] loop0: detected capacity change from 0 to 32768
[  358.122540][ T7192] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.296 (7192)
[  359.178542][ T7074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.828030][ T7192] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  359.839943][ T7192] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  359.848725][ T7192] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  359.858692][ T7192] BTRFS info (device loop0): use zstd compression, level 3
[  359.866113][ T7192] BTRFS info (device loop0): force clearing of disk cache
[  359.875206][ T7192] BTRFS info (device loop0): enabling disk space caching
[  359.882406][ T7192] BTRFS info (device loop0): disk space caching is enabled
[  360.011203][ T7192] BTRFS info (device loop0): enabling ssd optimizations
[  360.018328][ T7192] BTRFS info (device loop0): auto enabling async discard
[  360.035686][ T7192] BTRFS info (device loop0): rebuilding free space tree
[  360.062878][ T7192] BTRFS info (device loop0): disabling free space tree
[  360.070057][ T7192] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  360.081603][ T7192] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  360.957077][ T7074] veth0_vlan: entered promiscuous mode
[  361.032105][ T7074] veth1_vlan: entered promiscuous mode
[  361.093783][ T7234] virtio-fs: tag </dev/nullb0> not found
[  361.441902][ T5777] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  362.430491][ T7074] veth0_macvtap: entered promiscuous mode
[  362.598209][ T7074] veth1_macvtap: entered promiscuous mode
[  362.653358][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.696117][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.755090][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.766102][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.776420][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.787730][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.798026][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.809024][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.841058][ T7074] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.863794][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'.
[  362.921631][ T7242] veth3: entered promiscuous mode
[  363.024241][ T7074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.049561][ T7074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.062672][ T7074] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.071146][ T7247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'.
[  363.120746][ T7074] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.133978][ T7074] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.159667][ T7074] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.174155][ T7074] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.838515][ T7254] loop1: detected capacity change from 0 to 256
[  368.389671][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.397610][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.466503][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.486009][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.221889][ T7277] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  373.150128][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'.
[  373.295823][ T7295] veth3: entered promiscuous mode
[  373.338770][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'.
[  375.429796][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[  375.551950][ T7308] loop0: detected capacity change from 0 to 256
[  377.370923][ T7317] loop7: detected capacity change from 0 to 16384
[  377.550562][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'.
[  377.700082][ T7319] loop7: detected capacity change from 16384 to 0
[  378.462216][ T7328] trusted_key: encrypted_key: keylen parameter is missing
[  378.672141][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.678724][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  379.282876][ T7337] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  379.480264][ T7334] loop0: detected capacity change from 0 to 764
[  381.123277][ T5815] IPVS: starting estimator thread 0...
[  381.299913][ T7348] IPVS: using max 16 ests per chain, 38400 per kthread
[  381.366675][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'.
[  382.290316][ T7349] veth3: entered promiscuous mode
[  382.373649][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'.
[  382.617754][ T7361] loop4: detected capacity change from 0 to 256
[  387.691712][ T5861] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  387.702004][ T5861] CPU: 1 PID: 5861 Comm: kworker/u5:4 Not tainted syzkaller #0
[  387.709620][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  387.719730][ T5861] Workqueue: hci1 hci_rx_work
[  387.724495][ T5861] Call Trace:
[  387.727828][ T5861]  <TASK>
[  387.730823][ T5861]  dump_stack_lvl+0x18c/0x250
[  387.735571][ T5861]  ? show_regs_print_info+0x20/0x20
[  387.740833][ T5861]  ? load_image+0x420/0x420
[  387.745418][ T5861]  sysfs_create_dir_ns+0x26e/0x2a0
[  387.750596][ T5861]  ? __lock_acquire+0x7eb0/0x7eb0
[  387.755691][ T5861]  ? sysfs_warn_dup+0xa0/0xa0
[  387.760441][ T5861]  ? do_raw_spin_unlock+0x121/0x230
[  387.765720][ T5861]  kobject_add_internal+0x617/0xc90
[  387.771000][ T5861]  kobject_add+0x164/0x240
[  387.775483][ T5861]  ? kobject_init+0x1d0/0x1d0
[  387.780227][ T5861]  ? get_device_parent+0x366/0x390
[  387.785408][ T5861]  device_add+0x3fa/0xc40
[  387.789833][ T5861]  hci_conn_add_sysfs+0xd5/0x1e0
[  387.794856][ T5861]  le_conn_complete_evt+0xe9a/0x1480
[  387.800241][ T5861]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  387.806564][ T5861]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  387.812272][ T5861]  ? mutex_unlock+0x10/0x10
[  387.816863][ T5861]  ? skb_pull_data+0xf0/0x1f0
[  387.821612][ T5861]  hci_le_conn_complete_evt+0x187/0x440
[  387.827275][ T5861]  ? hci_remote_host_features_evt+0x150/0x150
[  387.833423][ T5861]  hci_event_packet+0x7b4/0x1280
[  387.838430][ T5861]  ? __lock_acquire+0x7eb0/0x7eb0
[  387.843516][ T5861]  ? lock_chain_count+0x20/0x20
[  387.848465][ T5861]  ? bis_list+0x290/0x290
[  387.852853][ T5861]  ? kcov_remote_start+0x513/0x810
[  387.858027][ T5861]  ? lockdep_hardirqs_on+0x98/0x150
[  387.863287][ T5861]  ? hci_send_to_monitor+0xd7/0x4f0
[  387.868543][ T5861]  hci_rx_work+0x43a/0xd60
[  387.873049][ T5861]  ? process_scheduled_works+0x975/0x1600
[  387.878830][ T5861]  process_scheduled_works+0xa60/0x1600
[  387.884475][ T5861]  ? worker_attach_to_pool+0x370/0x370
[  387.890013][ T5861]  ? assign_work+0x3cc/0x5d0
[  387.894675][ T5861]  worker_thread+0xa5e/0xfe0
[  387.899390][ T5861]  ? _raw_spin_unlock+0x40/0x40
[  387.904304][ T5861]  ? __kthread_parkme+0x71/0x1c0
[  387.909351][ T5861]  kthread+0x2fa/0x390
[  387.913478][ T5861]  ? pr_cont_work+0x550/0x550
[  387.918216][ T5861]  ? kthread_blkcg+0xd0/0xd0
[  387.922868][ T5861]  ret_from_fork+0x48/0x80
[  387.927343][ T5861]  ? kthread_blkcg+0xd0/0xd0
[  387.931998][ T5861]  ret_from_fork_asm+0x11/0x20
[  387.936848][ T5861]  </TASK>
[  387.939987][    C1] vkms_vblank_simulate: vblank timer overrun
[  387.951282][ T5861] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  387.965435][ T5861] Bluetooth: hci1: failed to register connection device
[  388.525874][   T27] kauditd_printk_skb: 47 callbacks suppressed
[  388.525915][   T27] audit: type=1400 audit(1791832226.639:65): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7381 comm="syz.4.343" name="unknown" offset=28
[  389.108924][ T7389] netlink: 'syz.1.345': attribute type 1 has an invalid length.
[  389.300707][ T7389] veth3: entered promiscuous mode
[  389.316128][ T7389] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  389.335424][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'.
[  389.353627][ T7394] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.448887][ T7399] loop2: detected capacity change from 0 to 512
[  389.522850][ T7399] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  389.561985][ T7399] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.347: invalid indirect mapped block 256 (level 1)
[  389.636748][ T7399] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.347: invalid indirect mapped block 2683928664 (level 1)
[  389.718144][ T7399] EXT4-fs (loop2): 1 truncate cleaned up
[  389.746295][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.311017][ T7401] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  390.361814][ T7401] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  390.907020][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.263856][ T7439] netlink: 'syz.4.356': attribute type 1 has an invalid length.
[  399.215580][ T7441] veth3: entered promiscuous mode
[  399.334383][ T7447] loop2: detected capacity change from 0 to 128
[  399.349730][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'.
[  400.648096][ T7452] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  403.452408][   T23] IPVS: starting estimator thread 0...
[  403.559689][ T7469] IPVS: using max 18 ests per chain, 43200 per kthread
[  404.367785][ T7482] atomic_op ffff88805f1ed998 conn xmit_atomic 0000000000000000
[  404.459770][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  406.341964][   T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  406.359164][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.373460][   T23] usb 2-1: config 0 descriptor??
[  406.485888][ T7488] loop4: detected capacity change from 0 to 764
[  406.771284][ T7475] batman_adv: batadv0: Adding interface: macvtap1
[  406.777940][ T7475] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.839735][ T7475] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  408.915313][ T7475] batman_adv: batadv0: Removing interface: macvtap1
[  409.214904][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[  409.225459][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.379'.
[  409.234510][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'.
[  409.243522][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[  409.261948][ T7505] loop4: detected capacity change from 0 to 32768
[  409.282884][ T7505] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.370 (7505)
[  409.303652][ T7505] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  409.314454][ T7505] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  409.323345][ T7505] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  409.334143][ T7505] BTRFS info (device loop4): use zstd compression, level 3
[  409.341467][ T7505] BTRFS info (device loop4): force clearing of disk cache
[  409.348657][ T7505] BTRFS info (device loop4): enabling disk space caching
[  409.355853][ T7505] BTRFS info (device loop4): disk space caching is enabled
[  409.430478][ T7505] BTRFS info (device loop4): enabling ssd optimizations
[  409.437850][ T7505] BTRFS info (device loop4): auto enabling async discard
[  409.448754][ T7505] BTRFS info (device loop4): rebuilding free space tree
[  409.476766][  T174] usb 2-1: USB disconnect, device number 3
[  409.497288][ T7505] BTRFS info (device loop4): disabling free space tree
[  409.506293][ T7505] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  409.516260][ T7505] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  413.755403][ T7074] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  416.998298][ T7549] loop1: detected capacity change from 0 to 40427
[  417.051852][ T7549] F2FS-fs (loop1): invalid crc value
[  417.075971][ T7549] F2FS-fs (loop1): Found nat_bits in checkpoint
[  417.294157][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'.
[  417.740252][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[  417.750375][ T7570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.382'.
[  417.759343][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'.
[  417.768302][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[  418.882155][ T7549] F2FS-fs (loop1): Start checkpoint disabled!
[  420.589284][ T7581] loop2: detected capacity change from 0 to 16
[  420.810404][ T7581] erofs: (device loop2): mounted with root inode @ nid 36.
[  422.111526][ T7587] loop0: detected capacity change from 0 to 4096
[  422.188344][ T7587] ntfs3: loop0: Failed to load $Extend (-22).
[  422.211821][ T7587] ntfs3: loop0: Failed to initialize $Extend.
[  424.631730][   T27] audit: type=1800 audit(1791832262.086:66): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.386" name="file2" dev="loop0" ino=31 res=0 errno=0
[  425.767179][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'.
[  425.778164][ T7606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.393'.
[  425.787730][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'.
[  425.796868][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'.
[  426.809239][ T7610] loop0: detected capacity change from 0 to 512
[  427.056365][ T7610] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.392: bg 0: block 385: padding at end of block bitmap is not set
[  427.082622][ T7610] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  427.094774][ T7610] EXT4-fs (loop0): 2 truncates cleaned up
[  427.102140][ T7610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.686637][ T7607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.922943][ T7619] tipc: Started in network mode
[  427.928028][ T7619] tipc: Node identity 4, cluster identity 4711
[  427.934404][ T7619] tipc: Node number set to 4
[  429.568230][ T7629] loop2: detected capacity change from 0 to 512
[  429.665613][ T7629] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  429.675554][ T7629] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  429.685492][ T7629] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  429.729072][ T7629] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  429.737207][ T7629] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000]
[  429.746581][ T7629] EXT4-fs (loop2): orphan cleanup on readonly fs
[  430.346228][ T7629] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.398: bg 0: block 34: padding at end of block bitmap is not set
[  430.371111][ T7629] Quota error (device loop2): write_blk: dquota write failed
[  430.379234][ T7629] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  430.389574][ T7629] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.398: Failed to acquire dquot type 1
[  430.434921][ T7629] EXT4-fs (loop2): 1 truncate cleaned up
[  430.453545][ T7629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  431.458763][   T28] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  431.733160][   T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  431.769831][   T28] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  431.795471][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  431.824445][   T28] usb 3-1: SerialNumber: syz
[  431.868765][   T28] usb 3-1: config 0 descriptor??
[  431.893728][   T28] usb 3-1: selecting invalid altsetting 1
[  431.918481][   T28] usb 3-1: Can not set alternate setting to 1, error: -22
[  431.937564][   T28] synaptics_usb: probe of 3-1:0.0 failed with error -22
[  433.000404][ T7643] loop4: detected capacity change from 0 to 4096
[  433.163874][   T28] usb 3-1: USB disconnect, device number 2
[  433.202663][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.233521][ T7640] loop1: detected capacity change from 0 to 32768
[  433.242245][ T7640] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.401 (7640)
[  433.294840][ T7640] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  433.305099][ T7640] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  433.314394][ T7640] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  433.323917][ T7640] BTRFS info (device loop1): use zstd compression, level 3
[  433.331180][ T7640] BTRFS info (device loop1): force clearing of disk cache
[  433.338330][ T7640] BTRFS info (device loop1): enabling disk space caching
[  433.345420][ T7640] BTRFS info (device loop1): disk space caching is enabled
[  433.532885][ T7643] ntfs3: loop4: Failed to load $Extend (-22).
[  433.539075][ T7643] ntfs3: loop4: Failed to initialize $Extend.
[  433.562868][ T7640] BTRFS info (device loop1): enabling ssd optimizations
[  433.570214][ T7640] BTRFS info (device loop1): auto enabling async discard
[  433.602005][ T7640] BTRFS info (device loop1): rebuilding free space tree
[  433.644214][ T7640] BTRFS info (device loop1): disabling free space tree
[  433.651376][ T7640] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  433.661256][ T7640] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  433.781830][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'.
[  433.791665][ T7662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.402'.
[  433.802083][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'.
[  433.811160][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'.
[  434.762622][   T27] audit: type=1800 audit(1791832273.846:67): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="file2" dev="loop4" ino=31 res=0 errno=0
[  435.251605][ T5781] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  436.514199][ T7678] tipc: Started in network mode
[  436.519150][ T7678] tipc: Node identity 4, cluster identity 4711
[  436.525461][ T7678] tipc: Node number set to 4
[  437.040277][ T7679] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  438.274059][ T7681] Bluetooth: MGMT ver 1.22
[  439.872748][ T7695] loop2: detected capacity change from 0 to 764
[  441.393950][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  441.416086][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  442.158733][ T7709] loop1: detected capacity change from 0 to 512
[  442.689019][ T7710] x_tables: ip_tables: osf match: only valid for protocol 6
[  444.842642][ T7631] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  444.868091][ T7709] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  444.878102][ T7709] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  444.888058][ T7709] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  444.939720][ T7709] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  444.947787][ T7709] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000]
[  444.957497][ T7709] EXT4-fs (loop1): orphan cleanup on readonly fs
[  444.975578][ T7709] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.412: bg 0: block 34: padding at end of block bitmap is not set
[  445.029681][ T7709] Quota error (device loop1): write_blk: dquota write failed
[  445.037819][ T7709] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  445.048270][ T7709] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.412: Failed to acquire dquot type 1
[  445.075447][ T7709] EXT4-fs (loop1): 1 truncate cleaned up
[  445.134438][ T7709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  445.816222][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  445.826645][ T7723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'.
[  445.835772][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'.
[  445.844803][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  447.140187][  T174] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  447.251356][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.003321][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.674593][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.007167][ T7768] atomic_op ffff88801bb52998 conn xmit_atomic 0000000000000000
[  452.994907][ T7775] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7775]
[  453.107818][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.171057][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[  453.181476][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.429'.
[  453.190436][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'.
[  453.199337][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[  453.256519][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.541153][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[  456.551177][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.433'.
[  456.560988][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'.
[  456.569932][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[  458.019831][ T7804] CIFS: Attempting to mount //127.0.0.1/share
[  458.035232][ T7804] CIFS: VFS: Error connecting to socket. Aborting operation.
[  458.043040][ T7804] CIFS: VFS: cifs_mount failed w/return code = -111
[  460.095405][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[  460.105810][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.441'.
[  460.114821][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'.
[  460.124019][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[  461.699195][ T7837] loop4: detected capacity change from 0 to 1024
[  462.739947][ T5861] Bluetooth: hci3: command 0x0406 tx timeout
[  464.153450][ T7855] loop2: detected capacity change from 0 to 512
[  465.531594][ T7855] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.443: bg 0: block 385: padding at end of block bitmap is not set
[  465.565284][ T7855] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  466.238651][ T7855] EXT4-fs (loop2): 2 truncates cleaned up
[  466.247527][ T7855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.347936][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.855982][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'.
[  466.866064][ T7868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.445'.
[  466.875074][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'.
[  466.884297][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'.
[  469.068789][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'.
[  469.078886][ T7880] netlink: 36 bytes leftover after parsing attributes in process `syz.0.451'.
[  469.087891][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'.
[  469.096828][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'.
[  473.138974][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'.
[  473.149729][ T7889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.457'.
[  473.158663][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'.
[  473.170612][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'.
[  477.995499][   T49] hsr_slave_0: left promiscuous mode
[  478.430882][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.438456][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.643999][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.651560][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.740833][   T49] bridge_slave_1: left allmulticast mode
[  479.756902][   T49] bridge_slave_1: left promiscuous mode
[  479.772463][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.423074][   T49] bridge_slave_0: left allmulticast mode
[  481.428818][   T49] bridge_slave_0: left promiscuous mode
[  481.463197][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.618416][   T49] veth1_macvtap: left promiscuous mode
[  481.653987][ T7953] loop1: detected capacity change from 0 to 16
[  482.011457][   T49] veth0_macvtap: left promiscuous mode
[  482.052272][ T7953] erofs: (device loop1): mounted with root inode @ nid 36.
[  482.158122][   T49] veth1_vlan: left promiscuous mode
[  482.181635][   T49] veth0_vlan: left promiscuous mode
[  484.532019][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[  484.576196][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.467'.
[  484.669578][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'.
[  484.706006][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[  486.300996][ T7984] loop1: detected capacity change from 0 to 256
[  490.996433][ T7994] loop1: detected capacity change from 0 to 32768
[  491.004702][ T7994] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.478 (7994)
[  491.021280][ T7994] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  491.031611][ T7994] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  491.040491][ T7994] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  491.051059][ T7994] BTRFS info (device loop1): use zstd compression, level 3
[  491.058351][ T7994] BTRFS info (device loop1): force clearing of disk cache
[  491.065632][ T7994] BTRFS info (device loop1): enabling disk space caching
[  491.072787][ T7994] BTRFS info (device loop1): disk space caching is enabled
[  491.351597][ T7994] BTRFS info (device loop1): enabling ssd optimizations
[  491.358656][ T7994] BTRFS info (device loop1): auto enabling async discard
[  491.367767][ T7994] BTRFS info (device loop1): rebuilding free space tree
[  491.408522][ T7994] BTRFS info (device loop1): disabling free space tree
[  491.415595][ T7994] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  491.425359][ T7994] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  492.183939][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  492.204036][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  492.215776][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  492.230356][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  492.249680][ T5861] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  492.267672][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  494.130211][ T8025] loop2: detected capacity change from 0 to 512
[  494.137389][ T8025] ext3: Unknown parameter 'measure'
[  494.285710][ T8010] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  494.349634][ T5861] Bluetooth: hci3: command tx timeout
[  494.972485][   T49] team0 (unregistering): Port device team_slave_1 removed
[  495.041519][   T49] team0 (unregistering): Port device team_slave_0 removed
[  495.108642][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  495.215572][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  495.641960][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[  495.652537][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.482'.
[  495.661649][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'.
[  495.670898][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[  495.820980][   T49] bond0 (unregistering): Released all slaves
[  496.423160][ T5861] Bluetooth: hci3: command tx timeout
[  497.960950][ T8018] chnl_net:caif_netlink_parms(): no params data found
[  498.678260][ T5781] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  498.699741][ T5861] Bluetooth: hci3: command tx timeout
[  498.887924][ T8053] syz.0.486 (8053) used greatest stack depth: 17048 bytes left
[  500.275890][ T8057] bridge0: port 3(syz_tun) entered blocking state
[  500.327051][ T8057] bridge0: port 3(syz_tun) entered disabled state
[  500.355989][ T8057] syz_tun: entered allmulticast mode
[  500.370222][ T8057] FAULT_INJECTION: forcing a failure.
[  500.370222][ T8057] name failslab, interval 1, probability 0, space 0, times 1
[  500.409679][ T8057] CPU: 1 PID: 8057 Comm: syz.2.487 Not tainted syzkaller #0
[  500.417067][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  500.427181][ T8057] Call Trace:
[  500.430546][ T8057]  <TASK>
[  500.433553][ T8057]  dump_stack_lvl+0x18c/0x250
[  500.438287][ T8057]  ? show_regs_print_info+0x20/0x20
[  500.443545][ T8057]  ? load_image+0x420/0x420
[  500.448124][ T8057]  ? __might_sleep+0xe0/0xe0
[  500.452782][ T8057]  ? __lock_acquire+0x7eb0/0x7eb0
[  500.457865][ T8057]  should_fail_ex+0x394/0x4c0
[  500.462606][ T8057]  should_failslab+0x9/0x20
[  500.467172][ T8057]  slab_pre_alloc_hook+0x59/0x300
[  500.472258][ T8057]  kmem_cache_alloc+0x5a/0x2c0
[  500.477066][ T8057]  ? __kernfs_new_node+0xe5/0x7f0
[  500.482144][ T8057]  __kernfs_new_node+0xe5/0x7f0
[  500.487050][ T8057]  ? kernfs_new_node+0x260/0x260
[  500.492062][ T8057]  kernfs_new_node+0x14c/0x260
[  500.496888][ T8057]  __kernfs_create_file+0x4b/0x2e0
[  500.502042][ T8057]  sysfs_add_file_mode_ns+0x237/0x2f0
[  500.507455][ T8057]  sysfs_create_file_ns+0x12c/0x1b0
[  500.512685][ T8057]  ? kernfs_add_one+0x149/0x6b0
[  500.517581][ T8057]  ? sysfs_add_bin_file_mode_ns+0x200/0x200
[  500.523510][ T8057]  ? kernfs_create_link+0x18a/0x200
[  500.528745][ T8057]  br_sysfs_addif+0xc8/0x220
[  500.533367][ T8057]  br_add_if+0x39b/0xee0
[  500.537651][ T8057]  ? bpf_lsm_capable+0x9/0x10
[  500.542360][ T8057]  ? security_capable+0x89/0xb0
[  500.547255][ T8057]  br_ioctl_stub+0x730/0xd50
[  500.551895][ T8057]  ? rcu_is_watching+0x15/0xb0
[  500.556741][ T8057]  ? rcu_read_unlock+0xa0/0xa0
[  500.561549][ T8057]  ? trace_contention_end+0x39/0xe0
[  500.566781][ T8057]  ? __mutex_lock+0x30d/0xc80
[  500.571537][ T8057]  ? mutex_lock_nested+0x20/0x20
[  500.576527][ T8057]  ? rcu_read_unlock+0xa0/0xa0
[  500.581330][ T8057]  sock_ioctl+0x4d7/0x7e0
[  500.585698][ T8057]  ? sock_poll+0x3e0/0x3e0
[  500.590169][ T8057]  ? bpf_lsm_file_ioctl+0x9/0x10
[  500.595147][ T8057]  ? security_file_ioctl+0x80/0xa0
[  500.600302][ T8057]  ? sock_poll+0x3e0/0x3e0
[  500.604759][ T8057]  __se_sys_ioctl+0xfd/0x170
[  500.609388][ T8057]  do_syscall_64+0x55/0xb0
[  500.613837][ T8057]  ? clear_bhb_loop+0x40/0x90
[  500.618542][ T8057]  ? clear_bhb_loop+0x40/0x90
[  500.623275][ T8057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  500.629224][ T8057] RIP: 0033:0x7fd1f259e1d9
[  500.633679][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.653340][ T8057] RSP: 002b:00007fd1f343d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  500.661792][ T8057] RAX: ffffffffffffffda RBX: 00007fd1f2825fa0 RCX: 00007fd1f259e1d9
[  500.669800][ T8057] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000008
[  500.677806][ T8057] RBP: 00007fd1f2635888 R08: 0000000000000000 R09: 0000000000000000
[  500.685811][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.693810][ T8057] R13: 00007fd1f2826038 R14: 00007fd1f2825fa0 R15: 00007ffc6eb5fa58
[  500.701836][ T8057]  </TASK>
[  500.739614][ T5861] Bluetooth: hci3: command tx timeout
[  500.757772][ T8057] syz_tun: left allmulticast mode
[  500.869078][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.928178][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.000170][ T8018] bridge_slave_0: entered allmulticast mode
[  501.061789][ T8018] bridge_slave_0: entered promiscuous mode
[  501.133054][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.140499][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.147804][ T8018] bridge_slave_1: entered allmulticast mode
[  501.155441][ T8018] bridge_slave_1: entered promiscuous mode
[  501.551108][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.557705][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  501.924559][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.968971][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.614031][ T8018] team0: Port device team_slave_0 added
[  502.628406][ T8018] team0: Port device team_slave_1 added
[  503.614503][   T49] IPVS: stop unused estimator thread 0...
[  503.730523][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.737566][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.829587][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.891176][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.898206][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.959021][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.214322][ T8094] loop2: detected capacity change from 0 to 256
[  505.911846][ T8018] hsr_slave_0: entered promiscuous mode
[  505.944904][ T8018] hsr_slave_1: entered promiscuous mode
[  505.966861][ T8018] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  506.009606][ T8018] Cannot create hsr debugfs directory
[  506.285902][ T8101] loop2: detected capacity change from 0 to 2048
[  506.313904][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.373254][ T8101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  507.583852][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.957101][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.692608][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.197478][   T49] tipc: Left network mode
[  511.455368][ T8018] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  511.488704][ T8018] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  512.199929][ T8018] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  512.395325][ T8018] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  514.043887][ T8163] loop2: detected capacity change from 0 to 256
[  514.158129][ T8163] exfat: Unknown parameter 'ÿ0x0000000000000000'
[  514.434974][ T8166] loop1: detected capacity change from 0 to 1024
[  515.536545][ T8170] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  515.549563][ T8170] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  515.559617][ T8170] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  516.980209][ T8178] syz.1.505 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  517.001867][ T8178] xt_cgroup: invalid path, errno=-2
[  518.375120][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.832423][ T8192] loop1: detected capacity change from 0 to 512
[  519.037798][ T8192] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.509: corrupted in-inode xattr: invalid ea_ino
[  519.060522][ T8200] ip_tables: iptables: counters copy to user failed while replacing table
[  519.109621][ T8192] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.509: couldn't read orphan inode 15 (err -117)
[  519.135169][ T8192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.889583][ T8200] syz.2.512 uses obsolete (PF_INET,SOCK_PACKET)
[  519.912968][ T8018] 8021q: adding VLAN 0 to HW filter on device team0
[  519.967851][  T992] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.975117][  T992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.256823][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'.
[  520.267034][ T8207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.513'.
[  520.276276][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'.
[  520.285544][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'.
[  520.313249][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.524393][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.531705][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.591340][   T49] hsr_slave_0: left promiscuous mode
[  523.635060][   T49] hsr_slave_1: left promiscuous mode
[  523.674336][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.695464][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.711668][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.719165][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.742163][   T49] bridge_slave_1: left allmulticast mode
[  523.747901][   T49] bridge_slave_1: left promiscuous mode
[  523.754744][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.768341][   T49] bridge_slave_0: left allmulticast mode
[  523.776294][   T49] bridge_slave_0: left promiscuous mode
[  523.783389][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.832912][   T49] veth1_macvtap: left promiscuous mode
[  523.838557][   T49] veth0_macvtap: left promiscuous mode
[  523.851738][   T49] veth1_vlan: left promiscuous mode
[  523.857585][   T49] veth0_vlan: left promiscuous mode
[  524.705586][ T8237] loop1: detected capacity change from 0 to 256
[  525.015997][ T8239] loop2: detected capacity change from 0 to 32768
[  525.039151][ T8239] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.526 (8239)
[  525.112878][ T8237] exfat: Unknown parameter 'ÿ0x0000000000000000'
[  525.890920][ T8239] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  525.902192][ T8239] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  525.911099][ T8239] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  525.920603][ T8239] BTRFS info (device loop2): use zstd compression, level 3
[  525.927894][ T8239] BTRFS info (device loop2): force clearing of disk cache
[  525.935183][ T8239] BTRFS info (device loop2): enabling disk space caching
[  525.943243][ T8239] BTRFS info (device loop2): disk space caching is enabled
[  526.888907][ T8261] netlink: 'syz.0.525': attribute type 19 has an invalid length.
[  527.028536][ T8239] BTRFS info (device loop2): enabling ssd optimizations
[  527.035696][ T8239] BTRFS info (device loop2): auto enabling async discard
[  527.048474][ T8239] BTRFS info (device loop2): rebuilding free space tree
[  527.715522][ T8239] BTRFS info (device loop2): disabling free space tree
[  527.722765][ T8239] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  527.732844][ T8239] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  527.878556][ T5783] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  528.257244][ T8088] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop2 scanned by udevd (8088)
[  529.757691][ T8274] loop2: detected capacity change from 0 to 32768
[  529.816304][ T8274] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  529.833452][ T8274] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  529.842366][ T8274] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  529.852533][ T8274] BTRFS info (device loop2): use zstd compression, level 3
[  529.860132][ T8274] BTRFS info (device loop2): force clearing of disk cache
[  529.867313][ T8274] BTRFS info (device loop2): enabling disk space caching
[  529.874441][ T8274] BTRFS info (device loop2): disk space caching is enabled
[  529.950382][ T8274] BTRFS info (device loop2): enabling ssd optimizations
[  529.959718][ T8274] BTRFS info (device loop2): auto enabling async discard
[  529.968198][ T8274] BTRFS info (device loop2): rebuilding free space tree
[  529.990441][ T8274] BTRFS info (device loop2): disabling free space tree
[  529.997458][ T8274] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  530.007859][ T8274] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  531.109165][   T49] team0 (unregistering): Port device team_slave_1 removed
[  531.182836][   T49] team0 (unregistering): Port device team_slave_0 removed
[  531.280917][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.368111][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.019281][   T49] bond0 (unregistering): Released all slaves
[  532.121710][ T8243] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  532.131698][ T8243] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  532.142407][ T8243] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  532.386461][ T5783] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  533.146082][ T8309] sctp: [Deprecated]: syz.1.524 (pid 8309) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.146082][ T8309] Use struct sctp_sack_info instead
[  533.336204][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.672343][ T8322] loop1: detected capacity change from 0 to 2048
[  534.787767][ T8322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  535.011275][ T8332] loop2: detected capacity change from 0 to 16
[  535.120732][ T8332] erofs: (device loop2): mounted with root inode @ nid 36.
[  536.202983][ T8018] veth0_vlan: entered promiscuous mode
[  536.233325][ T8018] veth1_vlan: entered promiscuous mode
[  536.353595][ T8018] veth0_macvtap: entered promiscuous mode
[  536.476719][ T8018] veth1_macvtap: entered promiscuous mode
[  536.702650][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.766561][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.830724][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.877668][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.959760][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.020397][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.066587][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.132294][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.176578][ T8018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.189926][ T8018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  537.219142][ T8018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.239151][ T8018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.411331][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.441869][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.489385][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.523149][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.426755][ T8372] capability: warning: `syz.2.543' uses deprecated v2 capabilities in a way that may be insecure
[  540.615754][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'.
[  546.675864][ T8418] ip6gretap1: entered allmulticast mode
[  546.693391][ T8418] batman_adv: batadv0: Adding interface: ip6gretap1
[  546.700353][ T8418] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.726299][ T8418] batman_adv: batadv0: Interface activated: ip6gretap1
[  548.534007][ T8432] loop5: detected capacity change from 0 to 256
[  548.605831][ T8432] exfat: Unknown parameter 'ÿ0x0000000000000000'
[  551.925325][ T8457] sctp: [Deprecated]: syz.5.548 (pid 8457) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.925325][ T8457] Use struct sctp_sack_info instead
[  553.070638][ T8465] loop5: detected capacity change from 0 to 164
[  553.970988][ T8474] rock: directory entry would overflow storage
[  553.977299][ T8474] rock: sig=0x4f50, size=4, remaining=3
[  553.983094][ T8474] iso9660: Corrupted directory entry in block 5 of inode 1792
[  554.638604][ T8480] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[  555.513125][ T8480] veth5: entered promiscuous mode
[  555.928386][ T8480] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  556.028046][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.553'.
[  556.106139][ T8499] 8021q: adding VLAN 0 to HW filter on device bond2
[  556.359601][ T8505] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  556.914363][ T8520] loop1: detected capacity change from 0 to 512
[  556.936302][ T8516] loop5: detected capacity change from 0 to 2048
[  557.044824][ T8520] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.559: corrupted in-inode xattr: invalid ea_ino
[  557.145865][ T8516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  557.205225][ T8520] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.559: couldn't read orphan inode 15 (err -117)
[  557.583236][ T8520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.693459][ T8531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  558.845084][ T8531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  558.862942][ T8531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  558.878266][ T8531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  558.959807][ T8531] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  558.967312][ T8531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  559.238257][ T8535] loop5: detected capacity change from 0 to 16
[  560.975005][ T8535] erofs: (device loop5): mounted with root inode @ nid 36.
[  561.069012][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.073203][ T8531] Bluetooth: hci4: command tx timeout
[  562.685587][ T8530] chnl_net:caif_netlink_parms(): no params data found
[  562.984050][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  562.996564][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.150908][ T8531] Bluetooth: hci4: command tx timeout
[  563.785822][ T8557] loop5: detected capacity change from 0 to 16
[  563.892483][ T8557] erofs: (device loop5): mounted with root inode @ nid 36.
[  564.189298][ T8566] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[  564.294205][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.302937][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.328416][ T8530] bridge_slave_0: entered allmulticast mode
[  564.642785][ T8530] bridge_slave_0: entered promiscuous mode
[  564.710697][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.751747][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.767874][ T8530] bridge_slave_1: entered allmulticast mode
[  564.807997][ T8530] bridge_slave_1: entered promiscuous mode
[  564.914140][ T8572] veth7: entered promiscuous mode
[  564.957291][ T8572] bond3: (slave veth7): Enslaving as a backup interface with a down link
[  565.073375][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.566'.
[  565.113533][ T8566] 8021q: adding VLAN 0 to HW filter on device bond3
[  565.219834][ T8531] Bluetooth: hci4: command tx timeout
[  565.243167][ T8584] loop1: detected capacity change from 0 to 512
[  565.307036][ T8584] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.569: bad orphan inode 15
[  565.330000][ T8584] ext4_test_bit(bit=14, block=5) = 0
[  565.342795][ T8584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.461805][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.474811][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.583442][ T8530] team0: Port device team_slave_0 added
[  565.630779][ T8530] team0: Port device team_slave_1 added
[  565.720501][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.727528][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.855442][ T8530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.932691][ T8591] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  566.194896][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.223613][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.286698][ T8530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.363018][ T8596] input: syz0 as /devices/virtual/input/input8
[  566.565266][ T8530] hsr_slave_0: entered promiscuous mode
[  566.605097][ T8530] hsr_slave_1: entered promiscuous mode
[  566.642828][ T8530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.661428][ T8530] Cannot create hsr debugfs directory
[  567.579821][ T8531] Bluetooth: hci4: command tx timeout
[  568.015925][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.655737][ T8530] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  569.074348][ T8530] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  569.123364][ T8530] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  571.135297][ T8530] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  571.392149][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.494885][ T8530] 8021q: adding VLAN 0 to HW filter on device team0
[  571.632816][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.641162][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.673916][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.681196][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.716109][ T8631] netlink: 'syz.2.576': attribute type 1 has an invalid length.
[  571.852440][ T8639] ip_tables: iptables: counters copy to user failed while replacing table
[  571.948776][ T8634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.576'.
[  572.141357][ T8638] veth3: entered promiscuous mode
[  572.172208][ T8638] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  572.226014][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'.
[  572.279833][ T8640] 8021q: adding VLAN 0 to HW filter on device bond1
[  574.736703][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  574.888401][ T8662] loop1: detected capacity change from 0 to 512
[  575.862261][ T8662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.013861][ T8662] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  578.362243][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.934012][ T8690] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  578.942965][ T8690] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  578.951352][ T8690] overlayfs: missing 'lowerdir'
[  580.048834][ T8530] veth0_vlan: entered promiscuous mode
[  580.115092][ T8530] veth1_vlan: entered promiscuous mode
[  580.468179][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[  581.127056][ T8530] veth0_macvtap: entered promiscuous mode
[  581.241346][ T8530] veth1_macvtap: entered promiscuous mode
[  581.336592][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.401045][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.430501][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.465534][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.514100][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.558036][ T8702] input: syz0 as /devices/virtual/input/input9
[  581.564779][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.621267][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.666971][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.711435][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.804949][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.146140][ T8709] loop1: detected capacity change from 0 to 256
[  582.244335][ T8709] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  582.384912][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.681296][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.743637][ T8530] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.859631][ T8530] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.891612][ T8530] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.905066][ T8530] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.330453][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.338359][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.501115][ T8246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.509047][ T8246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.103270][ T8730] loop6: detected capacity change from 0 to 32768
[  585.119341][ T8730] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.557 (8730)
[  585.390413][ T8730] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  585.403914][ T8730] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  585.414616][ T8730] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  585.424183][ T8730] BTRFS info (device loop6): use zstd compression, level 3
[  585.431894][ T8730] BTRFS info (device loop6): force clearing of disk cache
[  585.439787][ T8730] BTRFS info (device loop6): enabling disk space caching
[  585.446893][ T8730] BTRFS info (device loop6): disk space caching is enabled
[  585.670007][ T8730] BTRFS info (device loop6): enabling ssd optimizations
[  585.677173][ T8730] BTRFS info (device loop6): auto enabling async discard
[  585.880814][ T8730] BTRFS info (device loop6): rebuilding free space tree
[  586.305830][ T8730] BTRFS info (device loop6): disabling free space tree
[  586.313005][ T8730] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  586.323313][ T8730] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  588.232358][ T8530] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  588.394589][ T8764] loop2: detected capacity change from 0 to 2048
[  588.681601][ T8764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  589.580925][ T8642] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop6 scanned by udevd (8642)
[  591.445929][ T3516] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.657515][ T3516] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.788352][ T3516] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.894049][ T3516] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.272375][ T3516] hsr_slave_0: left promiscuous mode
[  593.278881][ T3516] hsr_slave_1: left promiscuous mode
[  593.288706][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.296394][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.305381][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.315026][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.327588][ T3516] bridge_slave_1: left allmulticast mode
[  593.334867][ T3516] bridge_slave_1: left promiscuous mode
[  593.347055][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.365227][ T3516] bridge_slave_0: left allmulticast mode
[  593.372522][ T3516] bridge_slave_0: left promiscuous mode
[  593.378339][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.443185][ T3516] veth1_macvtap: left promiscuous mode
[  593.448965][ T3516] veth0_macvtap: left promiscuous mode
[  593.455345][ T3516] veth1_vlan: left promiscuous mode
[  593.462701][ T3516] veth0_vlan: left promiscuous mode
[  594.388435][ T3516] team0 (unregistering): Port device team_slave_1 removed
[  594.451063][ T3516] team0 (unregistering): Port device team_slave_0 removed
[  594.512068][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  594.569450][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.012026][ T3516] bond0 (unregistering): Released all slaves
[  595.535700][ T3516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.626788][ T3516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.746362][ T3516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.834856][ T3516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.123319][ T3516] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.234935][ T3516] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.337898][ T3516] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.439159][ T3516] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.693422][ T3516] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.783834][ T3516] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.863477][ T3516] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.965582][ T3516] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.190829][ T3516] tipc: Left network mode
[  597.196196][ T3516] tipc: Left network mode
[  597.389249][ T3516] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  597.585701][ T3516] batman_adv: batadv0: Removing interface: ip6gretap1