last executing test programs:

14m21.587021791s ago: executing program 3 (id=4):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/enabled\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='0', 0x1)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r1, &(0x7f0000001000), 0x1000)
madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x15)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
read(r2, &(0x7f0000001000), 0x1)
madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x15)

14m20.947582644s ago: executing program 3 (id=8):
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'syz_tun\x00', {0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syz_tun\x00', {0x1}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syz_tun\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'vlan1\x00', 0x101})
syz_emit_ethernet(0x26, &(0x7f0000000300)={@random="112233445566", @random="aabbccddeeff", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@generic={0x800, "4500001400000000400100000102030405060708"}}}, 0x0)

14m20.639756608s ago: executing program 3 (id=10):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, r2, 0x3e8}}, 0x48)

14m13.81610327s ago: executing program 5 (id=19):
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x2002, &(0x7f0000000200)=0x3, 0x3, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4)

14m8.131765159s ago: executing program 5 (id=27):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0)

14m5.685811799s ago: executing program 5 (id=32):
r0 = syz_usb_connect(0x2, 0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000000000000109025700020100803209040000000e0100000d240100011e00000000000101082402010002000009240302010100010009040100010e0200000e2401011700810002000000010009240c01000000000007058102000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xa1, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xa1, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xa1, 0x81, 0x1a, "0000010100"/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000500)={0x1, 0x1, 0x1})
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000600)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000700)=0x1)
syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000800)='\x00'/16)

14m5.262675359s ago: executing program 32 (id=10):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0x0}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, r2, 0x3e8}}, 0x48)

14m1.326721169s ago: executing program 5 (id=43):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000280)}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x25, 0x2}, 0x3a)
syz_emit_ethernet(0x3a, 0x0, 0x0)

14m0.935138156s ago: executing program 5 (id=46):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x8910, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x198fb580ea88f23a, &(0x7f0000000200)={@local}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)="020030397f00090100"/128, 0x80)

13m59.666720122s ago: executing program 5 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = msgget$private(0x0, 0x193)
msgsnd(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0)
msgrcv(r3, &(0x7f0000001240)={0x0, ""/144}, 0x98, 0x3, 0x2000)
symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r2, 0x25, 0xa, @void}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000002680))
r4 = socket(0x10, 0x803, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_getaffinity(0x0, 0x8, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)

13m44.044948558s ago: executing program 33 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = msgget$private(0x0, 0x193)
msgsnd(r3, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0)
msgrcv(r3, &(0x7f0000001240)={0x0, ""/144}, 0x98, 0x3, 0x2000)
symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r2, 0x25, 0xa, @void}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000002680))
r4 = socket(0x10, 0x803, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_getaffinity(0x0, 0x8, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)

10m6.317766307s ago: executing program 0 (id=485):
syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x7)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}})

10m4.347450567s ago: executing program 0 (id=488):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0xfffffffc, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c"})

10m0.635596616s ago: executing program 0 (id=489):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010200", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x5, '\x00', {0x2, 0x6, "0f44f7", 0x800, 0x2f, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [], "40da70cffac70148"}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x400)
mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r6, 0x1e67e000)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x49cdee)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000807, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000240))

9m52.555506793s ago: executing program 0 (id=502):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==")
mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x28)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
close_range(r1, 0xffffffffffffffff, 0x0)

9m50.80750465s ago: executing program 0 (id=505):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a)
syz_emit_ethernet(0x3a, 0x0, 0x0)

9m49.873927257s ago: executing program 0 (id=507):
r0 = socket(0x18, 0x0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x147}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

9m49.537285873s ago: executing program 34 (id=507):
r0 = socket(0x18, 0x0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x147}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

6.522822186s ago: executing program 7 (id=2924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000180000000800000041"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20)

6.198666894s ago: executing program 2 (id=2929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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")
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r5, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

6.14955075s ago: executing program 8 (id=2930):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7005}, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef)

6.029135242s ago: executing program 7 (id=2931):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)

6.027328547s ago: executing program 6 (id=2943):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_RMID(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
read(r1, &(0x7f0000000240)=""/254, 0xfe)

5.773540607s ago: executing program 1 (id=2932):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='active', 0x6)

4.757369523s ago: executing program 2 (id=2933):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090)

4.63736657s ago: executing program 8 (id=2935):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x18, 0xb05, 0x101, 0x0, 0x0, "05010902a1010901a100050919012903150025019503750181029501750581030501093009311581257f750895028106c0c0"}}, 0x14a)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)={0xe, {0x1}}, 0xc)
write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x6, "5dff00000000"}}, 0xc)

4.582135038s ago: executing program 6 (id=2936):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ec0)=@newlink={0x7c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x1b200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x40, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x1, 0xae}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0xc4)

4.417246795s ago: executing program 1 (id=2937):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x47e, &(0x7f0000000880)="$eJzs3MtvVNUfAPDvnU5Ly6v8+OGDl1bRSHy0tDxk4UajiQuNJrrAuKrTQpCBGloTIUTQBca4MCTujQsXJv4FrnRj1JWJW90bEmPYgK6uuTP3wnS4U9syMJX5fJIL59x7h3O+c+6Ze+45MwTQt8ayP5KIjRHxa0SMRkS1/YSx5l/Xrpyr/XXlXC2JNH3tz2TRv5PkW2ZDc0ea5vl1JeVefDNiul6fPZ3nJxZOvjMxf+bsU8dPTh+bPTZ7aurw4QP7dw8dmjp4ixGm5yOP6+qO9+d2bX/xjUsv145ceuvHr7P6bszPunrlXO0WC7rJWPPdLfVotwvrsU0t6aTaw4qwIpvy/j7Y6P+jOwdi5Pqx0Xjhw55WDrit0jRNy+7PuQspcBdLotc1AHqjuNFnz7/FdoeGHmvCH882H4CyuK/lW/NINSr5OYNtz7fdNBwRRy78/Xm2xW2ahwAAaPVtNv55smz8V4l7W87bnK+hbImI/0XE1oj4f0Rsi4h7Ihrn3hcR96+w/PYVkpvHP5XLqwpsmbLx3zP52tbi8V8x+ostA3luUyP+weTo8frsvvw92RuD67L85KKXLPbd87982r7vk3yafaxl/JdtWfnFWDCvx+Vq2wTdzPTCdFeCz+L/IGJHtSz+5Po6YBIR2yNixyrLOP74V7s6Hfv3+JfQhXWm9IuIx5rtfyHa4i8kHdcnJ58+NHVwYjjqs/smiqviZj/9fPHVTuXfUvxdkLX/+tLrvxl/9oyYDEfMnzl7orFeO7/yMi7+9lEt6XBs2yqv/6Hk9UZ6KN/33vTCwunJiKHkpSw7smj/1I3XFvni/Cz+vXvK+//W5uNZ453YGRHZRbw7Ih6IiAfztnsoIh6OiD1LxP/Dc4+83elY5/ZfYla+i7L4Z5Zo/+wjL0vdaP/WxJeb2/eUJQZOfP9Np/LTZbX/gUZqb75nOZ9/y6nX6q5mAAAA+O+pNL4Dn1TGr6crlfHx5nf4t8X6Sn1ufuGJo3Pvnpppfld+SwxWipmu0Zb50Ml8brjIT7Xl9+fzxp8NjDTy47W5+kyvg4c+t6FD/8/8PtDr2gG3nd9rQf/S/6F/6f/Qv8r6/3AP6gHcee7/0KeGynefv9P1AHpi5fd/TwdwtzD+h/6l/0P/0v+hL3X8bXyl86G7OFFdG9UoTYysjWoUiaisiWp0L/HKx80usVbqUySqy/7PLFaZWFd6qNefTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xTwAAAP//F7LlOQ==")
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x1f842f947b598ea3, 0x0)

4.40959348s ago: executing program 7 (id=2938):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

4.338210753s ago: executing program 8 (id=2939):
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa88aaaaaaaaaaaaaaaabb08004500106800000000000690"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef)

4.323472927s ago: executing program 4 (id=2940):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)="d6b04d513e25b2a2a0ab05d22298fedf253e215868817f93e4d1d0ffbf4f683d3a46c9f2adf3af6627cf18f6333b1c8564d91770fe790eabbcd232e057dfa687d4acc12b4a8dcc3ff3023628d3a8ebe634d101061423d8f8c542131b0cbc0933a9324d7952d807f041baa21c50a35f8bfea9dee344cf06b83e9dfa4ea965", 0x0, 0xf26}, 0x38)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r0, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14)

4.240346727s ago: executing program 2 (id=2941):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0)
close(0x3)

4.182127163s ago: executing program 6 (id=2942):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x233, &(0x7f0000000c80)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)

4.142767827s ago: executing program 4 (id=2944):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180), 0xfa, 0x483, &(0x7f0000000f00)="$eJzs3MtvFdUfAPDvTG/L+9f+EB8gSBWNxEdLy0MWbjSasNDERBcYV7UtpFKooTURQrS6wKUhcW/8L4wr3RgfC03c6t6QEMMG1M2YuTMDbbm3vYXbXuB+Psm058yczjnfmTn3npnTewPoWoP5jyRia0T8HhH9RXZxgcHi1/WrF8b/vnphPIkse/OvpF7u2tUL41XR6u+2FJmsym9oUO/FdyLGpqcnz5b54bnT7w/Pnjv//NTpsZOTJyfPjB49eujgnr4jo4fbEmce17VdH83s3nns7Uuvjx+/9O6PSRpF3LEkjnYZLI5uQ0+1u7IO27YgndQWbtn7y810oyuBTuqJiPx09db7f3/0xKYb2/rj1U872jhgTWVZli3zqjyfAfexJDrdAqAzqjf6/P63WtZp6HFXuPJScQOUx329XIottUiLxN7eJfe3W9tY/2BEHJ//58t8iTV6DgEAsNC3+fjnuUbjvzQeKhJ9+Y//lXMoAxHx/4jYHhEPRMSOiHgwol724Yh4ZJX1L50huXX8k16+7eBakI//XiznthaP/9KqyEBPmdtWj783OTE1PXmgPCb7o3fDialkcmSZOr575bfPG26oLR7/5UtefzUW/Llox+Xakgd0E2NzY20Ive7KJxG7ao3iT6KaxkkiYmdE7LrNOqaeqTXdtlz8K2q+25ZlX0U8XZz/+VgSfyVpOj858sKR0cPDG2N68sBwdVXc6qdfL77RrP47ir8N8vO/ueH1fyP+gWRjxOy586fq87Wzq9p93nXi4h+fNb2nKePPu1eT+Bdd/8e2ldd/X/JWfUVfueHDsbm5syMRfclrt64fvbm3Kl+Vz+Pfv69x/98eN4/EoxGxOyL2RMRj+U1h2fbHI+KJiNi3zEH44eUn31sh/uL8ZwvjX5+50jz+iZXOfyw8/6tP9Jz6/puV498YEc3O/6F6an+5ppXXv1YbeCfHDgAAAO4Vxf/AJ+nQjXSaDg0V/8O/Izan0zOzc8+emPngzEQx7z0QvWn1pKt/wfPQkfLZcJUfXZI/mBXPjb/o2VTPD43PTE90Onjoclua9P/cnz2dbh2w5towjwbco/R/6F76P3SnRP+Hrqb/Q/dq1P8/blp66Os1bQywrrz/Q/dqof/PF7+ajwqAe5P3f+he+j90paafjU/v6CP/LSc2tWk//5bfZ7gebZbIE5HeFc24/xO1lr/MYhWJrL/o//maDQ3LdPqVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD3+CwAA//+LaOQ6")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
fdatasync(r0)

4.074699915s ago: executing program 1 (id=2945):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_mptcp(0x2, 0x1, 0x106)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0)

3.998333094s ago: executing program 8 (id=2946):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33)

3.831688719s ago: executing program 4 (id=2947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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")
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r5, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

3.828388803s ago: executing program 2 (id=2959):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x88f5}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x3a)

2.5574499s ago: executing program 1 (id=2948):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7005}, 0x4)
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef)

2.101943679s ago: executing program 8 (id=2949):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_emit_ethernet(0x106, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500d00601fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="5002"], 0x0)

1.856912771s ago: executing program 4 (id=2950):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="b364445e8cb94820a6979719d830707aecffde0a605166d4680bf81760058a838cbd05bc30b1f88f1b0d8f4d280f80b6e417066d0fbf6f2ff1"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000300)="800001000000000000000001", 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

1.669461198s ago: executing program 6 (id=2951):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x4, 0xffff}}}, 0x24}}, 0x24040084)
r0 = socket(0xa, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90)

1.550630498s ago: executing program 1 (id=2952):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)

1.524249809s ago: executing program 7 (id=2953):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32, @ANYBLOB="14000200"/14], 0x40}}, 0x0)
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
close(0x3)
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x4)

1.257094445s ago: executing program 6 (id=2954):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000c00)='re', 0x2)

1.182754841s ago: executing program 2 (id=2955):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000001180)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, 0x0, 0x0)

1.158758924s ago: executing program 1 (id=2956):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)="d6b04d513e25b2a2a0ab05d22298fedf253e215868817f93e4d1d0ffbf4f683d3a46c9f2adf3af6627cf18f6333b1c8564d91770fe790eabbcd232e057dfa687d4acc12b4a8dcc3ff3023628d3a8ebe634d101061423d8f8c542131b0cbc0933a9324d7952d807f041baa21c50a35f8bfea9dee344cf06b83e9dfa4ea965", 0x0, 0xf26}, 0x38)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r0, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14)

1.103155714s ago: executing program 7 (id=2957):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0)
write(r0, &(0x7f0000000280)='1.0', 0x3)
read(r0, 0x0, 0x0)

961.814319ms ago: executing program 7 (id=2958):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x800, &(0x7f0000000340), 0x2, 0xba16, &(0x7f00000130c0)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x4000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8)
socket$packet(0x11, 0x3, 0x300)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
rename(&(0x7f0000000000)='./file2\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f00000001c0)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {&(0x7f0000000300)=[{0x1, 0x700}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000080)='0\x00', 0x2)

609.092473ms ago: executing program 2 (id=2961):
socket(0x11, 0x3, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
iopl(0x3)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = syz_clone(0x4008400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r1)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)

608.920125ms ago: executing program 6 (id=2962):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0)

483.736914ms ago: executing program 4 (id=2963):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="880c0000000000"], 0x70)

373.70877ms ago: executing program 8 (id=2964):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

0s ago: executing program 4 (id=2965):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1)
getdents(r3, 0x0, 0x58)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x43348, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000)

kernel console output (not intermixed with test programs):

ing VLAN 0 to HW filter on device batadv0
[  496.178769][   T52] Bluetooth: hci6: command tx timeout
[  496.463577][ T5752] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  496.638890][ T5752] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  496.649792][ T5752] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  496.649877][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.677045][ T5752] usb 9-1: config 0 descriptor??
[  496.978816][ T5752] pwc: Askey VC010 type 2 USB webcam detected.
[  497.292073][ T5752] pwc: recv_control_msg error -32 req 02 val 2b00
[  497.393677][ T5752] pwc: recv_control_msg error -32 req 02 val 2700
[  497.413780][ T5752] pwc: recv_control_msg error -32 req 02 val 2c00
[  497.612566][ T5752] pwc: recv_control_msg error -32 req 04 val 1000
[  497.615200][ T5752] pwc: recv_control_msg error -32 req 04 val 1300
[  497.629044][ T5752] pwc: recv_control_msg error -32 req 04 val 1400
[  497.660562][ T5752] pwc: recv_control_msg error -32 req 02 val 2000
[  497.669776][ T5752] pwc: recv_control_msg error -32 req 02 val 2100
[  497.682245][ T5752] pwc: recv_control_msg error -32 req 04 val 1500
[  497.693457][ T5752] pwc: recv_control_msg error -32 req 02 val 2500
[  497.695200][ T5752] pwc: recv_control_msg error -32 req 02 val 2400
[  497.699804][ T5752] pwc: recv_control_msg error -32 req 02 val 2600
[  497.705325][ T5752] pwc: recv_control_msg error -32 req 02 val 2900
[  497.707679][ T5752] pwc: recv_control_msg error -32 req 02 val 2800
[  497.917124][ T5752] pwc: recv_control_msg error -71 req 04 val 1200
[  497.926657][ T5752] pwc: Registered as video103.
[  497.951588][ T5752] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input19
[  498.032040][ T5752] usb 9-1: USB disconnect, device number 5
[  498.257808][   T52] Bluetooth: hci6: command tx timeout
[  499.277679][   T59] bridge_slave_1: left allmulticast mode
[  499.277745][   T59] bridge_slave_1: left promiscuous mode
[  499.278002][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.316554][   T59] bridge_slave_0: left allmulticast mode
[  499.316617][   T59] bridge_slave_0: left promiscuous mode
[  499.316884][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.915463][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.8.747'.
[  500.355611][   T52] Bluetooth: hci6: command tx timeout
[  500.548360][ T9752] loop2: detected capacity change from 0 to 2048
[  500.664863][ T9752] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  500.664933][ T9752] NILFS (loop2): mounting unchecked fs
[  500.758507][ T9752] NILFS (loop2): recovery complete
[  500.832247][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.749'.
[  500.986405][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  500.995625][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  501.457720][ T9767] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  501.680846][ T9752] loop2: detected capacity change from 2048 to 0
[  501.873735][   T31] audit: type=1400 audit(1700000391.330:60): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9769 comm="syz.4.752"
[  502.009164][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.030739][ T9752] Buffer I/O error on dev loop2, logical block 1020, lost sync page write
[  502.030800][ T9752] NILFS (loop2): unable to write superblock: err=-5
[  502.030839][ T9752] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  502.030863][ T9752] NILFS (loop2): unable to write superblock: err=-5
[  502.048241][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.060749][   T59] bond0 (unregistering): Released all slaves
[  502.080125][ T9767] NILFS (loop2): I/O error writing log (start-blocknr=106, block-count=6) in segment 6
[  502.093369][ T9767] NILFS (loop2): I/O error writing log (start-blocknr=112, block-count=5) in segment 7
[  502.120096][ T9752] NILFS (loop2): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  502.127383][ T9752] NILFS (loop2): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  502.132035][ T9752] NILFS (loop2): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  502.139226][ T9752] NILFS (loop2): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  502.140018][ T9752] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  502.140048][ T9752] NILFS (loop2): unable to write superblock: err=-5
[  502.417443][   T52] Bluetooth: hci6: command tx timeout
[  502.439840][   T59] hsr_slave_0: left promiscuous mode
[  502.446805][   T59] hsr_slave_1: left promiscuous mode
[  502.447915][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.461016][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.055815][   T59] team0 (unregistering): Port device team_slave_1 removed
[  503.137218][   T59] team0 (unregistering): Port device team_slave_0 removed
[  503.556802][ T9793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.757'.
[  507.971497][ T9817] loop8: detected capacity change from 0 to 4096
[  508.013893][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  508.013893][ T9817] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  508.168545][ T9260] veth0_vlan: entered promiscuous mode
[  508.224544][ T8448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.504879][ T9260] veth1_vlan: entered promiscuous mode
[  508.583128][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.765'.
[  509.827873][ T9260] veth0_macvtap: entered promiscuous mode
[  509.888053][ T9260] veth1_macvtap: entered promiscuous mode
[  510.030155][ T9260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.096798][ T9260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.250933][ T1167] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.251137][ T1167] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.294261][ T3379] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.302283][   T38] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.455010][ T5845] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  510.797097][ T5845] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  510.818173][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.826752][ T5845] usb 9-1: Product: syz
[  510.831634][ T5845] usb 9-1: Manufacturer: syz
[  510.836872][ T5845] usb 9-1: SerialNumber: syz
[  511.532357][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.536213][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.536417][ T9666] bridge_slave_0: entered allmulticast mode
[  511.542903][ T9666] bridge_slave_0: entered promiscuous mode
[  511.594461][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.594610][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.594811][ T9666] bridge_slave_1: entered allmulticast mode
[  511.603292][ T9666] bridge_slave_1: entered promiscuous mode
[  511.946548][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.978591][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.101965][ T9666] team0: Port device team_slave_0 added
[  512.109439][ T5845] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  512.109524][ T5845] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  512.154297][ T9666] team0: Port device team_slave_1 added
[  512.323104][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.323154][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.323224][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.342250][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.342276][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.342324][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.565400][ T9666] hsr_slave_0: entered promiscuous mode
[  512.572663][ T9666] hsr_slave_1: entered promiscuous mode
[  514.289403][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9
[  514.328744][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  514.367192][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  514.381417][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  514.389795][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  514.397698][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  514.538359][ T5845] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE
[  516.121155][ T5845] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  516.125033][ T5845] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  516.125107][ T5845] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  516.125925][ T5845] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  516.193269][ T5845] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[  516.264647][ T5845] usb 9-1: USB disconnect, device number 6
[  516.495661][ T5632] Bluetooth: hci2: command tx timeout
[  516.637989][ T1167] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.655515][ T9901] loop2: detected capacity change from 0 to 4096
[  516.689223][ T9901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.879214][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.984897][ T5845] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  517.157919][ T5845] usb 9-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00
[  517.171634][ T5845] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  517.171695][ T5845] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  517.171772][ T5845] usb 9-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  517.171832][ T5845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.263130][ T5845] usb 9-1: 0:1 : does not exist
[  517.281024][ T1167] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.573605][ T5632] Bluetooth: hci2: command tx timeout
[  519.757372][ T1167] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.501940][ T9069] usb 9-1: USB disconnect, device number 7
[  520.732055][ T5632] Bluetooth: hci2: command tx timeout
[  522.893691][ T5632] Bluetooth: hci2: command tx timeout
[  523.349715][ T1167] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.648966][ T9966] loop8: detected capacity change from 0 to 2048
[  524.643595][ T9966] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  524.643661][ T9966] NILFS (loop8): mounting unchecked fs
[  525.021121][ T9966] NILFS (loop8): recovery complete
[  525.038551][ T9974] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  525.377202][ T9966] loop8: detected capacity change from 2048 to 0
[  525.468752][    C1] I/O error, dev loop8, sector 56 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  525.970833][ T9966] Buffer I/O error on dev loop8, logical block 1020, lost sync page write
[  525.970893][ T9966] NILFS (loop8): unable to write superblock: err=-5
[  525.970951][ T9966] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  525.971002][ T9966] NILFS (loop8): unable to write superblock: err=-5
[  525.978272][ T9974] NILFS (loop8): I/O error writing log (start-blocknr=106, block-count=6) in segment 6
[  525.978315][ T9974] NILFS (loop8): I/O error writing log (start-blocknr=112, block-count=5) in segment 7
[  525.996428][ T9966] NILFS (loop8): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  525.999228][ T9966] NILFS (loop8): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  526.004596][ T9966] NILFS (loop8): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  526.005677][ T9966] NILFS (loop8): I/O error writing log (start-blocknr=112, block-count=10) in segment 7
[  526.010692][ T9966] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  526.010724][ T9966] NILFS (loop8): unable to write superblock: err=-5
[  528.878012][T10021] loop1: detected capacity change from 0 to 2048
[  528.890471][T10021] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  528.890539][T10021] NILFS (loop1): mounting unchecked fs
[  528.965010][ T9666] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  528.976145][T10021] NILFS (loop1): recovery complete
[  528.980739][T10027] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  528.992221][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  529.039969][ T9666] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  529.228363][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  529.246145][ T9666] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  529.365609][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  529.437916][T10036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'.
[  530.077301][   T31] audit: type=1804 audit(1700000419.540:61): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.803" name="/newroot/211/file0/bus" dev="loop1" ino=20 res=1 errno=0
[  530.886928][ T9666] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  531.140683][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  531.324395][ T1167] bridge_slave_1: left allmulticast mode
[  531.330269][ T1167] bridge_slave_1: left promiscuous mode
[  531.337151][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.361304][ T1167] bridge_slave_0: left allmulticast mode
[  531.368584][ T1167] bridge_slave_0: left promiscuous mode
[  531.376144][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.009612][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'.
[  534.321234][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.652480][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  534.729432][ T1167] bond0 (unregistering): Released all slaves
[  534.888267][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  534.928487][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.937838][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.938038][ T9884] bridge_slave_0: entered allmulticast mode
[  534.958589][ T9884] bridge_slave_0: entered promiscuous mode
[  534.967655][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.975015][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.982426][ T9884] bridge_slave_1: entered allmulticast mode
[  534.991074][ T9884] bridge_slave_1: entered promiscuous mode
[  535.058587][   T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  535.059970][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.060008][   T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  535.060061][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.322134][ T9069] usb 5-1: USB disconnect, device number 20
[  535.360937][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  535.398120][ T1167] hsr_slave_0: left promiscuous mode
[  535.410427][ T1167] hsr_slave_1: left promiscuous mode
[  535.418567][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.418618][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.436465][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  535.446842][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.498365][ T1167] veth1_macvtap: left promiscuous mode
[  535.498434][ T1167] veth0_macvtap: left promiscuous mode
[  535.498573][ T1167] veth1_vlan: left promiscuous mode
[  535.498673][ T1167] veth0_vlan: left promiscuous mode
[  535.677458][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  535.686869][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.686911][   T10] usb 3-1: Product: syz
[  535.686937][   T10] usb 3-1: Manufacturer: syz
[  535.686963][   T10] usb 3-1: SerialNumber: syz
[  536.166119][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  536.166227][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  538.427174][ T1167] team0 (unregistering): Port device team_slave_1 removed
[  538.548527][ T1167] team0 (unregistering): Port device team_slave_0 removed
[  539.861391][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO
[  539.874101][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  539.874618][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  539.874692][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  540.226662][T10117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.479824][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.821'.
[  540.818787][   T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  540.849161][   T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  540.875070][T10125] loop2: detected capacity change from 0 to 2048
[  540.895014][T10125] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  540.895079][T10125] NILFS (loop2): mounting unchecked fs
[  540.945233][   T10] usb 3-1: USB disconnect, device number 22
[  541.010575][T10125] NILFS (loop2): recovery complete
[  541.025427][T10126] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  541.080311][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.130850][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.359316][ T9884] team0: Port device team_slave_0 added
[  541.373039][ T9884] team0: Port device team_slave_1 added
[  541.585120][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.592410][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.623273][ T9884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.650793][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.650841][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.650902][ T9884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.037946][ T9884] hsr_slave_0: entered promiscuous mode
[  542.039236][ T9884] hsr_slave_1: entered promiscuous mode
[  542.040074][ T9884] debugfs: 'hsr0' already exists in 'hsr'
[  542.040102][ T9884] Cannot create hsr debugfs directory
[  542.480605][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.236193][ T9666] 8021q: adding VLAN 0 to HW filter on device team0
[  543.587646][T10163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.827'.
[  545.118187][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.118343][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.142183][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.142486][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.892662][T10181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  549.212034][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'.
[  549.224131][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'.
[  550.408409][T10212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.047102][ T9884] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  551.068110][ T9884] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  551.079241][ T9884] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  551.096154][ T9884] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  551.105710][ T9884] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  551.757029][ T9884] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  551.758184][ T9884] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  551.818306][ T9884] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  552.211911][T10243] loop8: detected capacity change from 0 to 2048
[  552.264939][T10243] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  552.265016][T10243] NILFS (loop8): mounting unchecked fs
[  553.350471][T10243] NILFS (loop8): recovery complete
[  553.434847][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.519072][ T9884] 8021q: adding VLAN 0 to HW filter on device team0
[  553.724233][ T9884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  553.724303][ T9884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  554.046030][T10251] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  554.117948][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.118122][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.172703][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.172875][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.439270][T10288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.301829][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  556.311719][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  556.324883][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  556.333976][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  556.343252][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  558.055310][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'.
[  558.354944][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'.
[  558.691216][ T5632] Bluetooth: hci4: command tx timeout
[  558.842427][ T9884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  560.733710][ T5632] Bluetooth: hci4: command tx timeout
[  561.655121][ T1145] bridge_slave_1: left allmulticast mode
[  561.655971][ T1145] bridge_slave_1: left promiscuous mode
[  561.656220][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.691585][ T1145] bridge_slave_0: left allmulticast mode
[  561.691633][ T1145] bridge_slave_0: left promiscuous mode
[  561.691864][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.256826][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  562.256940][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  562.721878][T10377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.814868][ T5632] Bluetooth: hci4: command tx timeout
[  563.224136][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.255337][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.268352][ T1145] bond0 (unregistering): Released all slaves
[  563.518048][ T1145] hsr_slave_0: left promiscuous mode
[  563.525150][ T1145] hsr_slave_1: left promiscuous mode
[  563.527845][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.542492][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.893668][ T5632] Bluetooth: hci4: command tx timeout
[  565.654485][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'.
[  566.130649][ T5731] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  566.306040][ T5731] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  566.320321][ T5731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  566.320426][ T5731] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  566.320501][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.393200][ T5731] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  566.393481][ T5731] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81
[  566.418335][ T5731] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1
[  566.430949][ T5731] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  566.439452][ T5731] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  566.485082][ T5731] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  566.519153][ T5731] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  566.535774][ T5731] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  566.563468][ T5731] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  566.670671][ T1145] team0 (unregistering): Port device team_slave_1 removed
[  566.694688][ T1145] team0 (unregistering): Port device team_slave_0 removed
[  566.871294][ T5731] usb 5-1: USB disconnect, device number 21
[  566.909785][ T5731] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  566.950908][ T5731] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  566.962651][ T5731] keyspan 5-1:1.0: device disconnected
[  567.548575][ T9884] veth0_vlan: entered promiscuous mode
[  567.633084][ T9884] veth1_vlan: entered promiscuous mode
[  567.829048][ T9884] veth0_macvtap: entered promiscuous mode
[  567.859604][ T9884] veth1_macvtap: entered promiscuous mode
[  567.985000][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  568.283077][T10437] 9p: Bad value for 'rfdno'
[  570.217899][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.8.880'.
[  570.599790][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.640737][T10289] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.648199][T10289] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.659698][T10289] bridge_slave_0: entered allmulticast mode
[  570.670886][T10289] bridge_slave_0: entered promiscuous mode
[  570.718796][T10289] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.718987][T10289] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.719183][T10289] bridge_slave_1: entered allmulticast mode
[  570.751822][T10289] bridge_slave_1: entered promiscuous mode
[  570.809810][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.883'.
[  570.932495][T10289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  570.946265][   T38] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.987792][T10289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.117590][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9
[  571.124389][   T38] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.734167][ T3379] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.734265][ T3379] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.757428][T10289] team0: Port device team_slave_0 added
[  571.808722][T10289] team0: Port device team_slave_1 added
[  572.840310][T10289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.850968][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.877256][T10289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.940843][T10289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.948976][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.973705][T10289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.063682][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  573.216359][   T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  573.219005][T10289] hsr_slave_0: entered promiscuous mode
[  573.221872][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  573.221963][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.229196][T10289] hsr_slave_1: entered promiscuous mode
[  573.246630][   T10] usb 5-1: config 0 descriptor??
[  573.281725][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  573.736138][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  573.746689][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  573.749184][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  573.757317][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  573.796208][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  573.808557][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  573.814218][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  573.826604][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  573.838832][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[  573.850990][   T10] pwc: recv_control_msg error -32 req 02 val 2500
[  573.888800][   T10] pwc: recv_control_msg error -32 req 02 val 2400
[  573.896732][   T10] pwc: recv_control_msg error -32 req 02 val 2600
[  573.918506][   T10] pwc: recv_control_msg error -32 req 02 val 2900
[  573.921324][   T10] pwc: recv_control_msg error -32 req 02 val 2800
[  574.156089][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  574.296759][   T10] pwc: Registered as video103.
[  574.309050][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20
[  574.364280][   T10] usb 5-1: USB disconnect, device number 22
[  574.689328][   T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  574.705519][   T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  574.717556][   T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  574.728578][   T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  574.738281][   T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  575.333991][T10495] loop4: detected capacity change from 0 to 2048
[  575.342799][T10495] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  575.355316][T10495] NILFS (loop4): mounting unchecked fs
[  575.473009][T10495] NILFS (loop4): recovery complete
[  575.486665][T10501] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  576.342809][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.888125][ T1167] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.054434][ T5632] Bluetooth: hci6: command tx timeout
[  577.175392][ T1167] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.751482][ T1167] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.105494][ T1167] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.173596][ T5632] Bluetooth: hci6: command tx timeout
[  579.182472][T10289] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  579.250779][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  579.269751][T10289] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  579.322167][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  579.376451][T10289] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  579.626724][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  579.693500][T10289] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  579.717006][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  579.818432][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.8.895'.
[  580.941676][T10289] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.077778][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.8.898'.
[  581.227841][ T5632] Bluetooth: hci6: command tx timeout
[  581.828409][T10289] 8021q: adding VLAN 0 to HW filter on device team0
[  581.868936][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.869085][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.341641][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'.
[  583.063373][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.063572][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.247154][ T1167] bridge_slave_1: left allmulticast mode
[  583.247218][ T1167] bridge_slave_1: left promiscuous mode
[  583.247533][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.262743][ T1167] bridge_slave_0: left allmulticast mode
[  583.262781][ T1167] bridge_slave_0: left promiscuous mode
[  583.263057][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.293638][ T5632] Bluetooth: hci6: command tx timeout
[  583.987603][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  584.008550][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  584.031311][ T1167] bond0 (unregistering): Released all slaves
[  584.503951][ T1167] hsr_slave_0: left promiscuous mode
[  584.514530][ T1167] hsr_slave_1: left promiscuous mode
[  584.515516][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.515554][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  584.546218][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.546271][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  584.594470][ T1167] veth1_macvtap: left promiscuous mode
[  584.594550][ T1167] veth0_macvtap: left promiscuous mode
[  584.598658][ T1167] veth1_vlan: left promiscuous mode
[  584.598749][ T1167] veth0_vlan: left promiscuous mode
[  585.655892][ T1167] team0 (unregistering): Port device team_slave_1 removed
[  585.690322][ T1167] team0 (unregistering): Port device team_slave_0 removed
[  585.929352][T10594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.903'.
[  586.396411][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'.
[  588.832414][T10485] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.839900][T10485] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.847584][T10485] bridge_slave_0: entered allmulticast mode
[  588.859396][T10485] bridge_slave_0: entered promiscuous mode
[  588.873874][T10485] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.874017][T10485] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.874218][T10485] bridge_slave_1: entered allmulticast mode
[  588.899490][T10485] bridge_slave_1: entered promiscuous mode
[  589.083165][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.099202][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.171333][T10485] team0: Port device team_slave_0 added
[  589.182682][T10485] team0: Port device team_slave_1 added
[  589.241184][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  589.248324][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.254172][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  589.273256][T10289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  589.278861][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.278883][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.278929][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.571473][T10485] hsr_slave_0: entered promiscuous mode
[  591.573257][T10485] hsr_slave_1: entered promiscuous mode
[  591.574477][T10485] debugfs: 'hsr0' already exists in 'hsr'
[  591.574515][T10485] Cannot create hsr debugfs directory
[  592.337117][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9
[  592.943430][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'.
[  593.164281][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.8.929'.
[  593.783230][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.8.919'.
[  595.490854][T10289] veth0_vlan: entered promiscuous mode
[  595.568972][T10289] veth1_vlan: entered promiscuous mode
[  595.678757][T10289] veth0_macvtap: entered promiscuous mode
[  596.003283][T10289] veth1_macvtap: entered promiscuous mode
[  596.692362][T10289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.172267][T10289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  597.870101][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  597.883833][ T7498] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  597.885059][ T7498] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.885129][ T7498] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.582590][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.592459][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.807428][ T8348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.807489][ T8348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.895194][T10485] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  598.959748][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  598.979433][T10485] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  599.104812][T10738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  599.759770][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  599.785447][T10485] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  599.841307][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  599.862020][T10485] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  599.889630][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  601.093388][T10485] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.148886][T10758] ceph: No mds server is up or the cluster is laggy
[  601.801279][T10485] 8021q: adding VLAN 0 to HW filter on device team0
[  601.969232][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.969388][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  602.060924][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.061083][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  602.985769][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.6.933'.
[  603.970549][T10788] binder: 10786:10788 ioctl c0306201 200000000640 returned -22
[  605.005021][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.8.938'.
[  606.462068][T10821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.942'.
[  608.139084][ T5845] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  608.184955][T10485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  608.294060][ T5845] usb 7-1: Using ep0 maxpacket: 32
[  608.298703][ T5845] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  608.300126][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.300176][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.300232][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.322289][ T5845] usb 7-1: config 0 descriptor??
[  608.837665][ T5845] hid_parser_main: 10 callbacks suppressed
[  608.837746][ T5845] ft260 0003:0403:6030.0002: unknown main item tag 0x0
[  608.837793][ T5845] ft260 0003:0403:6030.0002: unknown main item tag 0x0
[  609.020345][ T5845] ft260 0003:0403:6030.0002: chip code: 0000 0000
[  609.238875][ T5845] ft260 0003:0403:6030.0002: failed to retrieve system status
[  609.239366][ T5845] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -5
[  609.495520][ T4994] usb 7-1: USB disconnect, device number 2
[  609.606855][T10485] veth0_vlan: entered promiscuous mode
[  609.650338][T10485] veth1_vlan: entered promiscuous mode
[  609.960026][T10485] veth0_macvtap: entered promiscuous mode
[  609.965483][T10485] veth1_macvtap: entered promiscuous mode
[  609.982943][T10485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  609.988025][T10485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.018924][  T186] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.971078][ T9816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.971536][ T9816] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.971919][ T9816] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.786672][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.956'.
[  611.965887][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.8.955'.
[  612.044166][ T6044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.052221][ T6044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.829614][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.838904][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.147079][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.959'.
[  613.355525][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.8.962'.
[  616.917789][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'.
[  617.762780][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'.
[  620.310559][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.8.983'.
[  621.005452][ T9069] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  621.103656][ T5871] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  621.143639][ T9069] usb 7-1: device descriptor read/64, error -71
[  621.260268][ T5871] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  621.274557][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.274624][ T5871] usb 8-1: Product: syz
[  621.274651][ T5871] usb 8-1: Manufacturer: syz
[  621.274678][ T5871] usb 8-1: SerialNumber: syz
[  621.383697][ T9069] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  621.531895][ T9069] usb 7-1: device descriptor read/64, error -71
[  621.638386][ T9069] usb usb7-port1: attempt power cycle
[  621.916498][ T5871] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  621.916616][ T5871] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  622.004482][ T9069] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  622.034863][ T9069] usb 7-1: device descriptor read/8, error -71
[  622.273651][ T9069] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  622.294906][ T9069] usb 7-1: device descriptor read/8, error -71
[  622.404094][ T9069] usb usb7-port1: unable to enumerate USB device
[  623.935236][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  623.941738][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  624.506614][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.995'.
[  624.939634][ T5871] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  624.951982][ T5871] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  624.952610][ T5871] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  624.952682][ T5871] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  624.953445][ T5871] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  625.030397][ T5871] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[  625.055085][ T5871] usb 8-1: USB disconnect, device number 2
[  627.323661][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'.
[  629.604352][ T5752] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  629.774428][ T5752] usb 7-1: Using ep0 maxpacket: 16
[  629.782579][ T5752] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  629.797628][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.808868][ T5752] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  629.808918][ T5752] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  629.808989][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.854633][ T5752] usb 7-1: config 0 descriptor??
[  630.324985][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.325740][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.396279][ T5752] microsoft 0003:045E:07DA.0003: unknown main item tag 0x1
[  630.404193][ T5752] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  630.411554][ T5752] microsoft 0003:045E:07DA.0003: unexpected long global item
[  630.420151][ T5752] microsoft 0003:045E:07DA.0003: parse failed
[  630.430589][ T5752] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22
[  630.649604][ T9069] usb 7-1: USB disconnect, device number 7
[  631.585541][ T5632] Bluetooth: hci6: link tx timeout
[  631.585770][ T5632] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  631.613807][   T52] Bluetooth: hci6: link tx timeout
[  631.613847][   T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  631.670744][   T52] Bluetooth: hci6: link tx timeout
[  631.670798][   T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  631.688661][   T52] Bluetooth: hci6: link tx timeout
[  631.688709][   T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  631.716402][   T52] Bluetooth: hci6: link tx timeout
[  631.725602][   T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  631.744809][   T52] Bluetooth: hci6: link tx timeout
[  631.744870][   T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  631.761215][   T52] Bluetooth: hci6: link tx timeout
[  631.761263][   T52] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  632.541104][   T31] audit: type=1800 audit(1700000522.000:62): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1020" name="enable" dev="configfs" ino=30713 res=0 errno=0
[  633.314065][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1022'.
[  633.672846][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1024'.
[  633.955218][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[  634.947694][T11178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1029'.
[  637.121131][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1034'.
[  638.410811][   T31] audit: type=1800 audit(1700000527.870:63): pid=11218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1037" name="enable" dev="configfs" ino=31700 res=0 errno=0
[  639.086800][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1039'.
[  640.253796][ T5845] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  640.431300][ T5845] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  640.436645][ T5845] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  640.436712][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.481011][ T5845] usb 8-1: config 0 descriptor??
[  640.527114][ T5845] pwc: Askey VC010 type 2 USB webcam detected.
[  641.000206][ T5845] pwc: recv_control_msg error -32 req 02 val 2b00
[  641.008928][ T5845] pwc: recv_control_msg error -32 req 02 val 2700
[  641.010929][ T5845] pwc: recv_control_msg error -32 req 02 val 2c00
[  641.017674][ T5845] pwc: recv_control_msg error -32 req 04 val 1000
[  641.020224][ T5845] pwc: recv_control_msg error -32 req 04 val 1300
[  641.023076][ T5845] pwc: recv_control_msg error -32 req 04 val 1400
[  641.034777][ T5845] pwc: recv_control_msg error -32 req 02 val 2000
[  641.042424][ T5845] pwc: recv_control_msg error -32 req 02 val 2100
[  641.044244][ T5845] pwc: recv_control_msg error -32 req 04 val 1500
[  641.045412][ T5845] pwc: recv_control_msg error -32 req 02 val 2500
[  641.085409][ T5845] pwc: recv_control_msg error -32 req 02 val 2400
[  641.122955][ T5845] pwc: recv_control_msg error -32 req 02 val 2600
[  641.123985][ T5845] pwc: recv_control_msg error -32 req 02 val 2900
[  641.138724][ T5845] pwc: recv_control_msg error -32 req 02 val 2800
[  641.348182][ T5845] pwc: recv_control_msg error -71 req 04 val 1200
[  641.402553][ T5845] pwc: Registered as video103.
[  641.432819][ T5845] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input21
[  641.481082][ T5845] usb 8-1: USB disconnect, device number 3
[  642.966644][   T31] audit: type=1800 audit(1700000532.430:64): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1052" name="enable" dev="configfs" ino=32781 res=0 errno=0
[  643.132807][T11294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  644.339244][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1053'.
[  645.448043][T11307] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1056'.
[  646.180221][T11309] loop7: detected capacity change from 0 to 2048
[  646.244564][T11309] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  646.244639][T11309] NILFS (loop7): mounting unchecked fs
[  646.449385][T11309] NILFS (loop7): recovery complete
[  646.518593][T11317] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  646.773708][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'.
[  647.985675][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1062'.
[  648.703452][T11309] loop7: detected capacity change from 2048 to 0
[  648.743302][T11325] Buffer I/O error on dev loop7, logical block 1020, lost sync page write
[  648.743384][T11325] NILFS (loop7): unable to write superblock: err=-5
[  648.743426][T11325] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  648.743449][T11325] NILFS (loop7): unable to write superblock: err=-5
[  648.753978][T11325] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  648.754009][T11325] NILFS (loop7): unable to write superblock: err=-5
[  649.035036][   T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  649.186607][   T30] usb 7-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00
[  649.188358][   T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  649.188395][   T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  649.188448][   T30] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  649.188634][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.227405][   T30] usb 7-1: 0:1 : does not exist
[  649.841365][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1072'.
[  649.862866][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1072'.
[  649.879893][   T31] audit: type=1400 audit(1700000539.340:65): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11351 comm="syz.4.1070"
[  650.009631][   T30] usb 7-1: USB disconnect, device number 8
[  650.679494][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1075'.
[  652.796611][T11388] loop6: detected capacity change from 0 to 2048
[  652.913917][T11389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.503083][T11388] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  653.503151][T11388] NILFS (loop6): mounting unchecked fs
[  653.598415][T11388] NILFS (loop6): recovery complete
[  653.611087][T11394] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  654.940324][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1086'.
[  654.982633][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1086'.
[  655.437942][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1088'.
[  655.463639][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[  656.256116][   T31] audit: type=1400 audit(1700000545.720:66): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11416 comm="syz.2.1090"
[  656.956155][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1104'.
[  657.162961][T11439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1094'.
[  660.186256][    C0] Unknown status report in ack skb
[  660.400112][    C1] Unknown status report in ack skb
[  660.923046][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'.
[  662.480178][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1116'.
[  663.278473][T11509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1117'.
[  665.568894][T11537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1122'.
[  666.500626][T11543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  667.237531][T11546] syz_tun: entered allmulticast mode
[  667.505175][T11550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.576391][T11561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.165642][T11594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  673.116486][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1143'.
[  675.505909][T11641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  675.659669][    C0] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  676.509959][T11653] syz_tun: entered allmulticast mode
[  677.619523][ T5632] Bluetooth: hci4: command 0x0406 tx timeout
[  678.210940][   T49] IPVS: starting estimator thread 0...
[  678.314358][T11662] IPVS: using max 22 ests per chain, 52800 per kthread
[  678.708296][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'.
[  680.401149][T11705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  681.302469][  T186] IPVS: starting estimator thread 0...
[  681.383881][T11713] IPVS: using max 24 ests per chain, 57600 per kthread
[  682.880190][T11730] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  682.902313][   T59] IPVS: starting estimator thread 0...
[  682.993743][T11732] IPVS: using max 24 ests per chain, 57600 per kthread
[  683.432907][T11745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.777741][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'.
[  685.136570][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  685.143185][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  686.402368][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1195'.
[  693.242204][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.894220][    C1] Unknown status report in ack skb
[  700.948424][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1251'.
[  702.278613][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1252'.
[  704.404080][T11971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  715.903699][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  718.400018][T12089] overlayfs: failed to resolve './cgroup': -2
[  719.872739][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1297'.
[  719.999131][T12108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  722.448260][T12129] fuse: Bad value for 'fd'
[  726.033762][T12140] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1304'.
[  727.344728][T12164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  727.528568][T12166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  728.188213][T12173] overlayfs: missing 'lowerdir'
[  730.143954][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1321'.
[  731.352950][T12213] fuse: Bad value for 'fd'
[  733.486156][    C0] Unknown status report in ack skb
[  734.545947][T12240] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  734.936313][T12246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  735.192628][T12249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  738.275427][    C1] Unknown status report in ack skb
[  738.307180][   T31] audit: type=1326 audit(1700000627.770:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8d9e159 code=0x7ffc0000
[  738.307298][   T31] audit: type=1326 audit(1700000627.770:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f19b8d9e159 code=0x7ffc0000
[  738.307368][   T31] audit: type=1326 audit(1700000627.770:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8d9e159 code=0x7ffc0000
[  738.388476][   T31] audit: type=1326 audit(1700000627.770:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b8d9e159 code=0x7ffc0000
[  738.416990][   T31] audit: type=1326 audit(1700000627.860:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19b8d9e159 code=0x7ffc0000
[  738.447753][   T31] audit: type=1326 audit(1700000627.910:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19b8d9dec2 code=0x7ffc0000
[  738.460449][   T31] audit: type=1326 audit(1700000627.910:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19b8d5e98e code=0x7ffc0000
[  738.486927][   T31] audit: type=1326 audit(1700000627.940:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f19b8d9df87 code=0x7ffc0000
[  738.502207][   T31] audit: type=1326 audit(1700000627.970:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19b8d5e98e code=0x7ffc0000
[  738.512678][   T31] audit: type=1326 audit(1700000627.970:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.7.1348" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19b8d5e98e code=0x7ffc0000
[  740.324884][T12313] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1353'.
[  740.501263][T12320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  745.411403][T12353] fuse: Bad value for 'fd'
[  746.576359][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  746.576464][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  748.785567][T12376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  750.375147][T12389] fuse: Bad value for 'fd'
[  754.440784][T12419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  761.730211][T12481] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1398'.
[  761.892087][T12489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  762.369834][   T31] kauditd_printk_skb: 550 callbacks suppressed
[  762.369894][   T31] audit: type=1326 audit(1700000651.830:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4206b9e159 code=0x7ffc0000
[  762.369980][   T31] audit: type=1326 audit(1700000651.830:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4206b9e159 code=0x7ffc0000
[  762.436185][   T31] audit: type=1326 audit(1700000651.900:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4206b9e159 code=0x7ffc0000
[  762.436304][   T31] audit: type=1326 audit(1700000651.900:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4206b9e159 code=0x7ffc0000
[  762.590633][   T31] audit: type=1326 audit(1700000651.900:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4206b9e159 code=0x7ffc0000
[  762.590748][   T31] audit: type=1326 audit(1700000652.050:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4206b9e159 code=0x7ffc0000
[  762.590815][   T31] audit: type=1326 audit(1700000652.050:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4206b9dec2 code=0x7ffc0000
[  762.645870][   T31] audit: type=1326 audit(1700000652.070:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4206b5e98e code=0x7ffc0000
[  762.670319][   T31] audit: type=1326 audit(1700000652.130:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4206b9df87 code=0x7ffc0000
[  762.673490][   T31] audit: type=1326 audit(1700000652.130:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.4.1399" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4206b5e98e code=0x7ffc0000
[  763.903224][T12499] overlayfs: failed to resolve './cgroup': -2
[  764.533567][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1405'.
[  767.457801][T12532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  768.809104][   T31] kauditd_printk_skb: 143 callbacks suppressed
[  768.809165][   T31] audit: type=1326 audit(1700000658.270:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918699e159 code=0x7ffc0000
[  768.849507][   T31] audit: type=1326 audit(1700000658.310:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918699e159 code=0x7ffc0000
[  768.890958][   T31] audit: type=1326 audit(1700000658.350:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f918699e159 code=0x7ffc0000
[  768.916579][   T31] audit: type=1326 audit(1700000658.350:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918699e159 code=0x7ffc0000
[  768.916665][   T31] audit: type=1326 audit(1700000658.350:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918699e159 code=0x7ffc0000
[  768.989236][   T31] audit: type=1326 audit(1700000658.450:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f918699e159 code=0x7ffc0000
[  768.989347][   T31] audit: type=1326 audit(1700000658.450:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f918699dec2 code=0x7ffc0000
[  769.053213][   T31] audit: type=1326 audit(1700000658.510:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f918695e98e code=0x7ffc0000
[  769.072468][   T31] audit: type=1326 audit(1700000658.530:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f918699df87 code=0x7ffc0000
[  769.105646][   T31] audit: type=1326 audit(1700000658.570:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12548 comm="syz.1.1415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f918695e98e code=0x7ffc0000
[  771.983649][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1420'.
[  772.352352][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1419'.
[  773.121490][T12588] fuse: Bad value for 'fd'
[  774.511136][T12589] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1422'.
[  777.010986][T12606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.748311][T12624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  783.024300][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1436'.
[  786.533595][T12688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  786.809354][T12691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  790.462418][T12711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  796.881291][T12772] overlayfs: failed to clone upperpath
[  800.930839][T12909] fuse: Bad value for 'fd'
[  801.041699][T12915] fuse: fd is not a fuse device
[  801.049354][T12915] fuse: fd is not a fuse device
[  801.338303][T12928] overlayfs: cannot append lower layer
[  801.992703][T12953] fuse: fd is not a fuse device
[  802.140626][T12956] capability: warning: `syz.6.1543' uses deprecated v2 capabilities in a way that may be insecure
[  804.192171][T12990] unsupported nlmsg_type 40
[  804.226929][T12989] bridge0: port 3(veth0_vlan) entered blocking state
[  804.243961][T12989] bridge0: port 3(veth0_vlan) entered disabled state
[  804.246009][T12989] veth0_vlan: entered allmulticast mode
[  804.360607][T12989] veth0_vlan: left allmulticast mode
[  804.619207][T13009] overlayfs: failed to clone upperpath
[  806.068796][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1589'.
[  807.195625][T13088] syz.4.1606 uses obsolete (PF_INET,SOCK_PACKET)
[  807.949171][T13119] CIFS: Attempting to mount //127.0.0.1/share
[  808.018129][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  808.018228][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  808.061122][T13124] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  808.492459][T13146] 9pnet_virtio: no channels available for device syz
[  808.774338][T13119] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -512
[  808.774660][T13119] CIFS: VFS: cifs_mount failed w/return code = -512
[  809.031070][   T52] Bluetooth: hci5: unexpected event for opcode 0x0c2d
[  809.436356][T13181] bridge1: entered promiscuous mode
[  809.436413][T13181] bridge1: entered allmulticast mode
[  810.562750][T13228] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1658'.
[  810.989822][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1667'.
[  811.658747][T13263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.658802][T13263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.679339][T13263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.679395][T13263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  812.180465][T13287] CIFS: Attempting to mount //127.0.0.1/share
[  812.280657][T13287] CIFS: VFS: cifs_mount failed w/return code = -5
[  812.324846][T13296] 9pnet_virtio: no channels available for device syz
[  812.373977][T13299] 9pnet_virtio: no channels available for device syz
[  812.721257][T13317] CIFS: Attempting to mount //127.0.0.1/share
[  813.305866][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'.
[  813.537593][T13317] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11
[  813.537763][T13317] CIFS: VFS: cifs_mount failed w/return code = -11
[  813.608054][T13352] xt_LOG: prefix is not null-terminated
[  813.732385][T13359] overlayfs: failed to clone upperpath
[  814.060067][T13371] jffs2: notice: (13371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  814.437936][T13383] overlayfs: failed to clone upperpath
[  814.664160][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  814.817206][T13397] 8021q: adding VLAN 0 to HW filter on device bond1
[  814.915719][T13403] bond1: (slave ip6erspan0): making interface the new active one
[  814.944920][T13403] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  816.181401][T13447] bridge1: entered promiscuous mode
[  816.189229][T13447] bridge1: entered allmulticast mode
[  817.704014][T13466] overlayfs: failed to clone upperpath
[  817.816116][T13468] fuse: fd is not a fuse device
[  818.316135][T13484] 9pnet_virtio: no channels available for device syz
[  818.367119][T13486] fuse: fd is not a fuse device
[  818.526923][T13489] bridge_slave_0: left allmulticast mode
[  818.536615][T13489] bridge_slave_0: left promiscuous mode
[  818.539777][T13489] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.626961][T13489] bridge_slave_1: left allmulticast mode
[  818.634616][T13489] bridge_slave_1: left promiscuous mode
[  818.642771][T13489] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.762799][T13489] bond0: (slave bond_slave_0): Releasing backup interface
[  818.832864][T13489] bond0: (slave bond_slave_1): Releasing backup interface
[  818.899898][T13489] team0: Port device team_slave_0 removed
[  818.928118][T13489] team0: Port device team_slave_1 removed
[  818.937611][T13489] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  818.946625][T13489] batman_adv: batadv0: Removing interface: batadv_slave_0
[  818.966390][T13489] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  818.966453][T13489] batman_adv: batadv0: Removing interface: batadv_slave_1
[  818.986247][T13489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  819.099011][T13500] CIFS: Attempting to mount //127.0.0.1/share
[  819.150686][T13500] CIFS: decode_ntlmssp_challenge: authentication has been weakened as server does not support key exchange
[  819.215296][ T1167] wlan1: Trigger new scan to find an IBSS to join
[  819.241830][T13500] CIFS: VFS: \\127.0.0.1 failed to connect to IPC (rc=-11)
[  819.249743][T13500] CIFS: VFS: \\127.0.0.1 disabling echoes and oplocks
[  819.263797][T13500] CIFS: VFS: cifs_mount failed w/return code = -11
[  819.619623][T13508] bridge1: entered promiscuous mode
[  819.619684][T13508] bridge1: entered allmulticast mode
[  819.685657][T13514] netlink: 'syz.2.1773': attribute type 3 has an invalid length.
[  819.959894][T13519] CIFS: Attempting to mount //127.0.0.1/share
[  820.032503][T13519] CIFS: VFS: \\127.0.0.1 Invalid 0x8400 dialect returned: not requested
[  820.032669][T13519] CIFS: VFS: cifs_mount failed w/return code = -5
[  821.532953][T13574] CIFS: Attempting to mount //127.0.0.1/share
[  822.035910][T13584] jffs2: notice: (13584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  822.369898][T13574] CIFS: VFS: cifs_mount failed w/return code = -112
[  824.009158][T13616] bridge2: entered promiscuous mode
[  824.009264][T13616] bridge2: entered allmulticast mode
[  824.029776][T13614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1813'.
[  824.174384][ T6293] wlan1: Trigger new scan to find an IBSS to join
[  825.078465][ T1167] wlan1: Creating new IBSS network, BSSID 02:e8:e0:d5:1a:4d
[  825.517073][   T31] kauditd_printk_skb: 575 callbacks suppressed
[  825.517139][   T31] audit: type=1800 audit(2000000025.970:1365): pid=13661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1837" name="nullb0" dev="tmpfs" ino=2137 res=0 errno=0
[  826.136753][T13675] 9pnet_virtio: no channels available for device syz
[  826.263464][T13681] bridge2: entered promiscuous mode
[  826.269006][T13681] bridge2: entered allmulticast mode
[  826.301523][T13682] netlink: Setting conntrack mark requires 'commit' flag.
[  826.301597][T13682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  826.667557][T13698] jffs2: notice: (13698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  826.822538][T13706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1855'.
[  827.127013][T13715] fuse: Bad value for 'fd'
[  827.522070][T13723] bridge1: entered promiscuous mode
[  827.522137][T13723] bridge1: entered allmulticast mode
[  827.572900][T13724] Driver unsupported XDP return value 0 on prog  (id 188) dev N/A, expect packet loss!
[  827.841244][   T52] Bluetooth: hci6: unexpected subevent 0x18 length: 28 > 19
[  827.841331][   T52] Bluetooth: hci6: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  828.657383][T13755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1876'.
[  828.657437][T13755] openvswitch: netlink: Flow key attr not present in new flow.
[  828.860834][T13763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1880'.
[  829.182064][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'.
[  829.240908][T13769] 8021q: adding VLAN 0 to HW filter on device bond1
[  829.961067][T13785] overlayfs: failed to clone upperpath
[  830.275796][T13791] CIFS: Attempting to mount //127.0.0.1/share
[  830.417245][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'.
[  830.427889][T13805] bond1: option mode: unable to set because the bond device is up
[  830.648238][T13811] jffs2: notice: (13811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  830.940727][T13791] CIFS: VFS: cifs_mount failed w/return code = -512
[  830.957640][   T52] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  831.399682][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'.
[  831.437153][T13841] bond1: option mode: unable to set because the bond device is up
[  831.769012][T13855] bridge_slave_0: left allmulticast mode
[  831.778549][T13855] bridge_slave_0: left promiscuous mode
[  831.784756][T13855] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.931683][T13855] bridge_slave_1: left allmulticast mode
[  831.931758][T13855] bridge_slave_1: left promiscuous mode
[  831.931994][T13855] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.151421][T13855] bond0: (slave bond_slave_0): Releasing backup interface
[  832.237393][T13855] bond0: (slave bond_slave_1): Releasing backup interface
[  832.367922][T13855] team0: Port device team_slave_0 removed
[  832.447194][T13855] team0: Port device team_slave_1 removed
[  832.448643][T13855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.462058][T13855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.520686][T13855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  832.520758][T13855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.588867][T13855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  832.633214][T13877] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  832.662059][T13877] CIFS: Attempting to mount //127.0.0.1/share
[  832.689026][T13877] CIFS: VFS: \\127.0.0.1 Invalid dialect returned by server 0x8400
[  832.697955][T13877] CIFS: VFS: cifs_mount failed w/return code = -5
[  832.801770][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1931'.
[  832.853112][T13883] 8021q: adding VLAN 0 to HW filter on device bond1
[  833.277323][T13897] 9pnet_virtio: no channels available for device syz
[  834.046462][T13919] bridge_slave_1: entered promiscuous mode
[  837.745863][T13986] bridge3: entered promiscuous mode
[  837.745976][T13986] bridge3: entered allmulticast mode
[  840.194276][T14022] CIFS: Attempting to mount //127.0.0.1/share
[  840.962032][T14022] CIFS: VFS: Error connecting to socket. Aborting operation.
[  840.962134][T14022] CIFS: VFS: cifs_mount failed w/return code = -4
[  842.097145][T14046] CIFS: Attempting to mount //127.0.0.1/share
[  842.890905][T14046] CIFS: VFS: Error connecting to socket. Aborting operation.
[  842.891367][T14046] CIFS: VFS: cifs_mount failed w/return code = -4
[  843.941373][T14078] CIFS: Attempting to mount //127.0.0.1/share
[  844.741843][T14078] CIFS: VFS: cifs_mount failed w/return code = -112
[  844.748699][T14085] CIFS: Attempting to mount //127.0.0.1/share
[  844.897706][T14085] CIFS: VFS: cifs_mount failed w/return code = -112
[  848.587214][T14145] bridge1: entered promiscuous mode
[  848.587297][T14145] bridge1: entered allmulticast mode
[  851.740028][T14178] bridge2: entered promiscuous mode
[  851.745540][T14178] bridge2: entered allmulticast mode
[  853.890647][T14212] bridge3: entered promiscuous mode
[  853.890709][T14212] bridge3: entered allmulticast mode
[  854.439193][T14220] CIFS: Attempting to mount //127.0.0.1/share
[  855.250309][T14220] CIFS: VFS: cifs_mount failed w/return code = -112
[  855.366930][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'.
[  855.405135][T14242] bond1: (slave ip6erspan0): making interface the new active one
[  855.416285][T14242] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  855.749714][T14252] bridge3: entered promiscuous mode
[  855.749790][T14252] bridge3: entered allmulticast mode
[  857.293830][ T6541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  858.235317][T14279] CIFS: Attempting to mount //127.0.0.1/share
[  858.275649][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'.
[  858.395714][T14281] 8021q: adding VLAN 0 to HW filter on device bond2
[  858.705342][T14291] bridge1: entered promiscuous mode
[  858.710814][T14291] bridge1: entered allmulticast mode
[  859.039868][T14279] CIFS: VFS: cifs_mount failed w/return code = -512
[  860.456229][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'.
[  860.609609][T14313] 8021q: adding VLAN 0 to HW filter on device bond3
[  861.257180][T14324] bridge4: entered promiscuous mode
[  861.262680][T14324] bridge4: entered allmulticast mode
[  862.754760][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'.
[  862.901627][T14345] 8021q: adding VLAN 0 to HW filter on device bond4
[  864.466935][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'.
[  866.509599][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'.
[  866.703669][T14399] overlayfs: failed to clone upperpath
[  867.891710][T14444] bridge2: entered promiscuous mode
[  867.891794][T14444] bridge2: entered allmulticast mode
[  868.028410][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'.
[  868.180146][T14452] nfs4: Unknown parameter 'smackfsdef'
[  869.460860][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  869.460971][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  871.395007][T14476] overlayfs: failed to clone upperpath
[  872.100345][T14523] CIFS: Attempting to mount //127.0.0.1/share
[  872.134203][T14523] CIFS: VFS: Error connecting to socket. Aborting operation.
[  872.134293][T14523] CIFS: VFS: cifs_mount failed w/return code = -111
[  874.056514][T14543] bridge4: entered promiscuous mode
[  874.056602][T14543] bridge4: entered allmulticast mode
[  874.790180][T14555] CIFS: Attempting to mount //127.0.0.1/share
[  874.808863][T14555] CIFS: VFS: Error connecting to socket. Aborting operation.
[  874.808952][T14555] CIFS: VFS: cifs_mount failed w/return code = -111
[  875.846341][T14571] bridge4: entered promiscuous mode
[  875.846417][T14571] bridge4: entered allmulticast mode
[  876.604528][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'.
[  876.604595][T14586] bond1: option mode: unable to set because the bond device has slaves
[  876.768273][T14589] CIFS: Attempting to mount //127.0.0.1/share
[  876.778073][T14589] CIFS: VFS: Error connecting to socket. Aborting operation.
[  876.785731][T14589] CIFS: VFS: cifs_mount failed w/return code = -111
[  878.770872][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'.
[  878.770945][T14618] bond1: option mode: unable to set because the bond device has slaves
[  879.229793][T14624] CIFS: Attempting to mount //127.0.0.1/share
[  879.235284][T14624] CIFS: VFS: Error connecting to socket. Aborting operation.
[  879.235340][T14624] CIFS: VFS: cifs_mount failed w/return code = -111
[  881.019812][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'.
[  881.101985][T14648] 8021q: adding VLAN 0 to HW filter on device bond1
[  881.248769][T14648] bond1: (slave ip6erspan0): making interface the new active one
[  881.313775][T14648] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  883.851237][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'.
[  883.851323][T14692] bond1: option mode: unable to set because the bond device has slaves
[  884.151595][T14698] bridge5: entered promiscuous mode
[  884.157076][T14698] bridge5: entered allmulticast mode
[  885.324877][T14710] CIFS: Attempting to mount //127.0.0.1/share
[  885.340440][T14710] CIFS: VFS: Error connecting to socket. Aborting operation.
[  885.348205][T14710] CIFS: VFS: cifs_mount failed w/return code = -111
[  885.904412][T14719] overlayfs: failed to clone upperpath
[  886.152606][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'.
[  886.237003][T14723] 8021q: adding VLAN 0 to HW filter on device bond1
[  886.354201][T14727] bridge5: entered promiscuous mode
[  886.354301][T14727] bridge5: entered allmulticast mode
[  886.702706][T14737] CIFS: Attempting to mount //127.0.0.1/share
[  886.716701][T14737] CIFS: VFS: Error connecting to socket. Aborting operation.
[  886.716783][T14737] CIFS: VFS: cifs_mount failed w/return code = -111
[  887.861865][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2329'.
[  887.874758][T14762] bond1: option mode: unable to set because the bond device is up
[  888.020785][T14762] bond1: (slave ip6erspan0): making interface the new active one
[  888.028905][T14762] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  888.655951][ T1167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  890.310007][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2346'.
[  890.480461][T14793] 8021q: adding VLAN 0 to HW filter on device bond2
[  891.843752][T14827] bridge6: entered promiscuous mode
[  891.849365][T14827] bridge6: entered allmulticast mode
[  893.079240][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2362'.
[  893.211921][T14834] 8021q: adding VLAN 0 to HW filter on device bond1
[  894.750576][T14863] CIFS: Attempting to mount //127.0.0.1/share
[  895.566933][T14863] CIFS: VFS: Error connecting to socket. Aborting operation.
[  895.567035][T14863] CIFS: VFS: cifs_mount failed w/return code = -4
[  895.732835][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'.
[  896.124730][T14874] 8021q: adding VLAN 0 to HW filter on device bond5
[  896.756913][T14890] bridge7: entered promiscuous mode
[  896.757001][T14890] bridge7: entered allmulticast mode
[  897.787328][T14906] CIFS: Attempting to mount //127.0.0.1/share
[  897.790227][T14906] CIFS: VFS: Error connecting to socket. Aborting operation.
[  897.790310][T14906] CIFS: VFS: cifs_mount failed w/return code = -111
[  899.014409][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'.
[  899.323938][T14916] mount: server 127.0.0.1 not responding, timed out
[  900.511311][T14941] bridge5: entered promiscuous mode
[  900.511412][T14941] bridge5: entered allmulticast mode
[  900.776361][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'.
[  903.086998][T14972] CIFS: Attempting to mount //127.0.0.1/share
[  903.108861][T14972] CIFS: VFS: Error connecting to socket. Aborting operation.
[  903.108960][T14972] CIFS: VFS: cifs_mount failed w/return code = -111
[  903.325183][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'.
[  905.009028][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2438'.
[  905.175104][T15008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  906.567662][T15045] overlayfs: failed to clone upperpath
[  907.326366][T15055] mount: server 127.0.0.1 not responding, timed out
[  907.724238][T15072] CIFS: Attempting to mount //127.0.0.1/share
[  907.796681][T15073] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0
[  907.807697][T15073] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  907.836608][T15072] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11
[  907.854048][T15072] CIFS: VFS: cifs_mount failed w/return code = -11
[  908.728732][T15088] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2474'.
[  910.110831][T15107] capability: warning: `syz.6.2481' uses 32-bit capabilities (legacy support in use)
[  910.395452][T15116] fuse: fd is not a fuse device
[  911.080749][   T52] Bluetooth: hci6: unexpected event for opcode 0x0c1a
[  911.110913][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2494'.
[  911.125890][T15137] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2494'.
[  911.827805][T15151] mount: server 127.0.0.1 not responding, timed out
[  911.883688][T15166] CIFS mount error: No usable UNC path provided in device string!
[  911.883688][T15166] 
[  911.894251][T15166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  914.029904][T15214] bridge2: entered promiscuous mode
[  914.035693][T15214] bridge2: entered allmulticast mode
[  914.469337][T15221] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode
[  914.857967][T15240] CIFS mount error: No usable UNC path provided in device string!
[  914.857967][T15240] 
[  914.869071][T15240] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  915.886421][T15258] mount: server 127.0.0.1 not responding, timed out
[  916.053270][T15265] bridge8: entered promiscuous mode
[  916.053366][T15265] bridge8: entered allmulticast mode
[  916.642640][T15281] CIFS: Attempting to mount //127.0.0.1/share
[  917.271256][T15298] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.271630][T15298] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.441081][T15281] CIFS: VFS: Error connecting to socket. Aborting operation.
[  917.450418][T15281] CIFS: VFS: cifs_mount failed w/return code = -4
[  917.536908][T15304] CIFS mount error: No usable UNC path provided in device string!
[  917.536908][T15304] 
[  917.547270][T15304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  917.611607][   T52] Bluetooth: hci1: unexpected event for opcode 0x0c24
[  917.751896][T15298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  917.774175][T15298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  917.959059][T15318] mount: server 127.0.0.1 not responding, timed out
[  918.131972][T15320] bridge9: entered promiscuous mode
[  918.132066][T15320] bridge9: entered allmulticast mode
[  918.175656][ T3341] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  918.177845][ T6293] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  918.177913][ T6293] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  918.177977][ T6293] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  918.550583][T15339] CIFS: Attempting to mount //127.0.0.1/share
[  918.612298][T15341] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  918.623448][T15341] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  918.640263][T15339] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11
[  918.640416][T15339] CIFS: VFS: cifs_mount failed w/return code = -11
[  918.929254][T15355] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  919.016255][T15355] lo: entered promiscuous mode
[  919.037474][T15355] tunl0: entered promiscuous mode
[  919.049013][T15355] gre0: entered promiscuous mode
[  919.122941][T15355] gretap0: entered promiscuous mode
[  919.147246][T15355] erspan0: entered promiscuous mode
[  919.162406][T15355] ip_vti0: entered promiscuous mode
[  919.181021][T15355] ip6_vti0: entered promiscuous mode
[  919.197410][T15355] sit0: entered promiscuous mode
[  919.209588][T15355] ip6tnl0: entered promiscuous mode
[  919.224730][T15355] ip6gre0: entered promiscuous mode
[  919.244120][T15355] syz_tun: entered promiscuous mode
[  919.259175][T15355] ip6gretap0: entered promiscuous mode
[  919.274239][T15355] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.275112][T15355] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.290529][T15355] bridge0: entered promiscuous mode
[  919.300572][T15355] vcan0: entered promiscuous mode
[  919.312813][T15355] bond0: entered promiscuous mode
[  919.312883][T15355] bond_slave_0: entered promiscuous mode
[  919.313141][T15355] bond_slave_1: entered promiscuous mode
[  919.404955][T15355] team0: entered promiscuous mode
[  919.405011][T15355] team_slave_0: entered promiscuous mode
[  919.405278][T15355] team_slave_1: entered promiscuous mode
[  919.450054][T15355] dummy0: entered promiscuous mode
[  919.516858][T15355] nlmon0: entered promiscuous mode
[  919.531093][T15355] batadv0: entered promiscuous mode
[  919.596463][T15355] vxcan0: entered promiscuous mode
[  919.650564][T15355] vxcan1: entered promiscuous mode
[  919.716922][T15355] veth0: entered promiscuous mode
[  919.768021][T15355] veth1: entered promiscuous mode
[  919.881771][T15355] wg0: entered promiscuous mode
[  919.952025][T15355] wg1: entered promiscuous mode
[  920.001659][T15355] wg2: entered promiscuous mode
[  920.024778][T15355] veth0_to_bridge: entered promiscuous mode
[  920.132934][T15355] veth1_to_bridge: entered promiscuous mode
[  920.207861][T15355] veth0_to_bond: entered promiscuous mode
[  920.240514][T15355] veth1_to_bond: entered promiscuous mode
[  920.281921][T15355] veth0_to_team: entered promiscuous mode
[  920.350061][T15355] veth1_to_team: entered promiscuous mode
[  920.356615][   T31] audit: type=1800 audit(2000000120.820:1366): pid=15410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2581" name="nullb0" dev="tmpfs" ino=2809 res=0 errno=0
[  920.412896][T15355] veth0_to_batadv: entered promiscuous mode
[  920.434089][T15355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.434184][T15355] batadv_slave_0: entered promiscuous mode
[  920.450367][T15355] veth1_to_batadv: entered promiscuous mode
[  920.472144][T15355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.472261][T15355] batadv_slave_1: entered promiscuous mode
[  920.486253][T15355] xfrm0: entered promiscuous mode
[  920.506324][T15355] veth0_to_hsr: entered promiscuous mode
[  920.537525][T15355] veth1_to_hsr: entered promiscuous mode
[  920.571804][T15355] hsr0: entered promiscuous mode
[  920.590972][T15355] veth1_virt_wifi: entered promiscuous mode
[  920.608312][T15355] veth0_virt_wifi: entered promiscuous mode
[  920.625544][T15355] virt_wifi0: entered promiscuous mode
[  920.638309][T15412] CIFS mount error: No usable UNC path provided in device string!
[  920.638309][T15412] 
[  920.638373][T15412] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  920.661225][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  920.675700][T15355] vlan0: entered promiscuous mode
[  920.722779][T15355] vlan1: entered promiscuous mode
[  920.743822][T15355] macvlan0: entered promiscuous mode
[  920.754599][T15355] macvlan1: entered promiscuous mode
[  920.777478][T15355] ipvlan0: entered promiscuous mode
[  920.777733][T15355] ipvlan1: entered promiscuous mode
[  920.814500][T15355] macvtap0: entered promiscuous mode
[  920.857793][T15355] macsec0: entered promiscuous mode
[  920.881384][T15355] geneve0: entered promiscuous mode
[  920.896595][T15355] geneve1: entered promiscuous mode
[  920.920532][T15355] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  920.943799][T15355] netdevsim netdevsim7 netdevsim1: entered promiscuous mode
[  920.959343][T15355] netdevsim netdevsim7 netdevsim2: entered promiscuous mode
[  920.991002][T15355] netdevsim netdevsim7 netdevsim3: entered promiscuous mode
[  921.049403][T15355] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  921.099991][T15355] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode
[  921.114566][T15355] bridge1: left allmulticast mode
[  921.123421][T15355] syztnl0: entered promiscuous mode
[  921.129068][T15355] ip6erspan0: entered promiscuous mode
[  921.141462][T15355] bond1: entered promiscuous mode
[  921.160219][T15355] bond2: entered promiscuous mode
[  921.174049][T15355] syzkaller0: entered promiscuous mode
[  921.184833][T15355] geneve2: entered promiscuous mode
[  921.226890][  T186] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  921.230733][  T114] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  921.230800][  T114] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  921.230860][  T114] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  921.605285][T15426] CIFS: Attempting to mount //127.0.0.1/share
[  921.643497][T15433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  921.698203][T15431] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  922.365709][T15426] CIFS: VFS: cifs_mount failed w/return code = -112
[  922.386096][T15441] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2594'.
[  922.755594][T15448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.828725][T15452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.900280][T15448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.931843][T15448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  923.058863][   T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  923.059379][   T52] Bluetooth: hci0: Injecting HCI hardware error event
[  923.073480][   T52] Bluetooth: hci0: hardware error 0x00
[  923.994608][ T5632] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  924.933198][ T5632] Bluetooth: hci6: Malformed MSFT vendor event: 0x02
[  925.138027][   T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  925.359567][T15503] bridge2: entered promiscuous mode
[  925.360680][T15503] bridge2: entered allmulticast mode
[  926.886760][T15521] CIFS: Attempting to mount //127.0.0.1/share
[  927.713327][T15521] CIFS: VFS: Error connecting to socket. Aborting operation.
[  927.713436][T15521] CIFS: VFS: cifs_mount failed w/return code = -4
[  929.265339][T15548] infiniband rxe0: set active
[  929.297932][T15548] infiniband rxe0: added veth0
[  929.419924][T15548] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  929.420023][T15548] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  929.420133][T15548] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  929.566917][T15548] RDS/IB: rxe0: added
[  929.567020][T15548] smc: adding ib device rxe0 with port count 1
[  929.567048][T15548] smc:    ib device rxe0 port 1 has no pnetid
[  930.663104][T15598] bridge3: entered promiscuous mode
[  930.668716][T15598] bridge3: entered allmulticast mode
[  930.896537][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  930.903075][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  930.911103][ T1307] aoe: packet could not be sent on syzkaller0.  consider increasing tx_queue_len
[  931.873357][T15620] CIFS: Attempting to mount //127.0.0.1/share
[  931.930085][T15621] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=18432 len=21502)
[  931.945374][T15621] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0
[  931.945617][T15621] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  931.963655][T15620] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11
[  931.974956][T15620] CIFS: VFS: cifs_mount failed w/return code = -11
[  932.328895][T15618] 8021q: adding VLAN 0 to HW filter on device bond0
[  932.331156][T15618] 8021q: adding VLAN 0 to HW filter on device team0
[  932.346279][T15618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  932.474436][T15618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  932.494936][T15618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  932.558205][T15618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  932.558280][T15618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  932.604398][T15618] veth1_vlan: left promiscuous mode
[  932.612867][T15618] veth0_vlan: left promiscuous mode
[  932.634623][T15618] veth0_vlan: entered promiscuous mode
[  932.655521][T15618] veth1_vlan: entered promiscuous mode
[  932.703423][T15618] veth1_macvtap: left promiscuous mode
[  932.714769][T15618] veth0_macvtap: left promiscuous mode
[  932.719857][T15618] veth0_macvtap: entered promiscuous mode
[  932.728525][T15618] veth1_macvtap: entered promiscuous mode
[  932.767587][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  932.774623][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  932.780382][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  932.792123][T15618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  932.839349][T15618] 8021q: adding VLAN 0 to HW filter on device bond1
[  932.868694][T15618] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  932.908121][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.908289][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  932.931098][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.931257][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  933.233824][  T114] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  933.234357][  T114] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  933.234587][  T114] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  933.234812][  T114] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  933.235009][  T114] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  933.235294][  T114] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  933.235492][  T114] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  933.298880][ T6293] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.361632][T15644] macvlan2: entered promiscuous mode
[  933.367132][T15644] dummy0: entered promiscuous mode
[  933.373445][T15644] macvlan2: entered allmulticast mode
[  933.380026][T15644] dummy0: entered allmulticast mode
[  933.909145][T15656] CIFS: Attempting to mount //127.0.0.1/share
[  933.997766][T15658] CIFS: VFS: \\127.0.0.1 disabling echoes and oplocks
[  934.130243][T15656] CIFS: VFS: \\127.0.0.1\IPC$ validate protocol negotiate failed: -11
[  934.131249][T15656] CIFS: VFS: cifs_mount failed w/return code = -35
[  934.850878][T15672] bridge3: entered promiscuous mode
[  934.850985][T15672] bridge3: entered allmulticast mode
[  935.376356][   T52] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  936.005047][T15698] mount: server 127.0.0.1 not responding, timed out
[  936.167891][T15707] bridge4: entered promiscuous mode
[  936.173371][T15707] bridge4: entered allmulticast mode
[  936.638518][T15715] CIFS: Attempting to mount //127.0.0.1/share
[  936.651829][T15715] CIFS: VFS: Error connecting to socket. Aborting operation.
[  936.665156][T15715] CIFS: VFS: cifs_mount failed w/return code = -111
[  936.749231][T15717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2696'.
[  937.317355][T15721] ip_tables: iptables: counters copy to user failed while replacing table
[  938.064315][T15749] bridge6: entered promiscuous mode
[  938.064375][T15749] bridge6: entered allmulticast mode
[  938.244273][T15746] mount: server 127.0.0.1 not responding, timed out
[  938.855096][T15770] CIFS: Attempting to mount //127.0.0.1/share
[  939.387140][   T52] Bluetooth: hci5: unexpected event for opcode 0x0c2d
[  939.643293][T15770] CIFS: VFS: Error connecting to socket. Aborting operation.
[  939.643378][T15770] CIFS: VFS: cifs_mount failed w/return code = -4
[  939.746417][T15784] mount: server 127.0.0.1 not responding, timed out
[  940.611653][T15810] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2731'.
[  941.327937][T15831] fuse: fd is not a fuse device
[  941.624289][T15837] CIFS: Attempting to mount //127.0.0.1/share
[  941.627619][T15837] CIFS: VFS: Error connecting to socket. Aborting operation.
[  941.646789][T15837] CIFS: VFS: cifs_mount failed w/return code = -111
[  942.154149][T15849] bridge5: entered promiscuous mode
[  942.168294][T15849] bridge5: entered allmulticast mode
[  942.550613][T15854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2746'.
[  943.847266][T15881] jffs2: notice: (15881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  943.885854][T15881] jffs2: notice: (15881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  943.997821][T15887] CIFS: Attempting to mount //127.0.0.1/share
[  944.205356][T15894] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2761'.
[  944.778464][T15914] bridge_slave_0: left allmulticast mode
[  944.778523][T15914] bridge_slave_0: left promiscuous mode
[  944.778785][T15914] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.827447][T15887] CIFS: VFS: cifs_mount failed w/return code = -512
[  944.855863][T15914] bridge_slave_1: left allmulticast mode
[  944.855929][T15914] bridge_slave_1: left promiscuous mode
[  944.868042][T15914] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.980648][T15914] bond0: (slave bond_slave_0): Releasing backup interface
[  945.072574][T15914] bond0: (slave bond_slave_1): Releasing backup interface
[  945.106509][   T52] Bluetooth: hci3: unexpected event for opcode 0x1004
[  945.144915][   T52] Bluetooth: hci3: unexpected event for opcode 0x0040
[  945.193217][   T52] Bluetooth: hci3: unexpected event for opcode 0x0c56
[  945.246023][T15914] team0: Port device team_slave_0 removed
[  945.306681][T15914] team0: Port device team_slave_1 removed
[  945.312437][T15914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  945.312473][T15914] batman_adv: batadv0: Removing interface: batadv_slave_0
[  945.347741][T15914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  945.347810][T15914] batman_adv: batadv0: Removing interface: batadv_slave_1
[  945.393279][T15914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  945.828469][T15947] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2777'.
[  946.002823][T15953] bridge4: entered promiscuous mode
[  946.008427][T15953] bridge4: entered allmulticast mode
[  946.424919][T15962] CIFS: Attempting to mount //127.0.0.1/share
[  946.507364][T15963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.051989][T15971] fuse: Bad value for 'fd'
[  947.226295][T15962] CIFS: VFS: cifs_mount failed w/return code = -512
[  947.434288][T15982] CIFS: Attempting to mount //127.0.0.1/share
[  947.879195][T15991] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2795'.
[  948.019088][T15997] overlayfs: failed to clone upperpath
[  948.092565][T15991] bond1: left promiscuous mode
[  948.094387][T15991] 8021q: adding VLAN 0 to HW filter on device bond1
[  948.250023][T15982] CIFS: VFS: cifs_mount failed w/return code = -112
[  948.549480][T16007] fuse: fd is not a fuse device
[  949.690842][T16027] CIFS: Attempting to mount //127.0.0.1/share
[  949.766981][T16032] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2810'.
[  949.816368][T16027] CIFS: VFS: cifs_mount failed w/return code = -5
[  951.552583][T16040] overlayfs: missing 'lowerdir'
[  952.566557][T16071] 8021q: adding VLAN 0 to HW filter on device bond1
[  952.598466][  T186] bond1: (slave ip6erspan0): link status definitely down, disabling slave
[  952.623792][T16073] UBIFS error (pid: 16073): cannot open "ubi0:vol0", error -19
[  952.631759][  T186] bond1: now running without any active interface!
[  954.946580][T16106] fuse: fd is not a fuse device
[  955.206388][T16110] 8021q: adding VLAN 0 to HW filter on device bond2
[  955.550112][T16122] CIFS: Attempting to mount //127.0.0.1/share
[  955.600722][T16004] Set syz1 is full, maxelem 65536 reached
[  955.828249][T16130] syz_tun: entered allmulticast mode
[  955.829721][T16130] syz_tun: left allmulticast mode
[  956.363757][T16122] CIFS: VFS: Error connecting to socket. Aborting operation.
[  956.371554][T16122] CIFS: VFS: cifs_mount failed w/return code = -4
[  956.371972][T16128] CIFS: Attempting to mount //127.0.0.1/share
[  956.617627][T16128] CIFS: VFS: cifs_mount failed w/return code = -112
[  958.119901][   T52] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255
[  959.895013][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2879'.
[  959.911342][   T31] audit: type=1326 audit(2000000160.350:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdd59e159 code=0x7ffc0000
[  959.911452][   T31] audit: type=1326 audit(2000000160.350:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdd59e159 code=0x7ffc0000
[  959.911552][   T31] audit: type=1326 audit(2000000160.350:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdd59e159 code=0x7ffc0000
[  959.911635][   T31] audit: type=1326 audit(2000000160.350:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdd59e159 code=0x7ffc0000
[  959.911712][   T31] audit: type=1326 audit(2000000160.350:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7facdd59e159 code=0x7ffc0000
[  959.973741][   T31] audit: type=1326 audit(2000000160.400:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7facdd55e98e code=0x7ffc0000
[  959.973851][   T31] audit: type=1326 audit(2000000160.410:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7facdd55e98e code=0x7ffc0000
[  959.973926][   T31] audit: type=1326 audit(2000000160.410:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7facdd55e98e code=0x7ffc0000
[  959.973997][   T31] audit: type=1326 audit(2000000160.410:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7facdd55e98e code=0x7ffc0000
[  959.974069][   T31] audit: type=1326 audit(2000000160.410:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16195 comm="syz.2.2877" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7facdd55e98e code=0x7ffc0000
[  960.219128][T16204] CIFS: Attempting to mount //127.0.0.1/share
[  960.231264][T16204] CIFS: VFS: Error connecting to socket. Aborting operation.
[  960.239095][T16204] CIFS: VFS: cifs_mount failed w/return code = -101
[  961.267832][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2894'.
[  961.653342][T16246] mroute: pending queue full, dropping entries
[  961.807449][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2901'.
[  961.839501][T16226] 9pnet_virtio: no channels available for device 127.0.0.1
[  962.884585][T16281] lo: left promiscuous mode
[  962.905015][T16281] tunl0: left promiscuous mode
[  962.916910][T16281] gre0: left promiscuous mode
[  962.939824][T16281] gretap0: left promiscuous mode
[  962.953617][T16281] erspan0: left promiscuous mode
[  962.966477][T16281] ip_vti0: left promiscuous mode
[  962.977748][T16281] ip6_vti0: left promiscuous mode
[  962.993092][T16281] sit0: left promiscuous mode
[  963.030983][T16281] ip6tnl0: left promiscuous mode
[  963.044103][T16281] ip6gre0: left promiscuous mode
[  963.055994][T16281] syz_tun: left promiscuous mode
[  963.073369][T16281] ip6gretap0: left promiscuous mode
[  963.090755][T16281] bridge0: left promiscuous mode
[  963.100367][T16281] vcan0: left promiscuous mode
[  963.110764][T16281] bond0: left promiscuous mode
[  963.125349][T16281] 8021q: adding VLAN 0 to HW filter on device bond0
[  963.136642][T16281] team0: left promiscuous mode
[  963.147047][T16281] 8021q: adding VLAN 0 to HW filter on device team0
[  963.157117][T16281] dummy0: left promiscuous mode
[  963.176830][T16281] nlmon0: left promiscuous mode
[  963.188180][T16281] batadv0: left promiscuous mode
[  963.200292][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.209446][T16281] vxcan0: left promiscuous mode
[  963.220524][T16281] vxcan1: left promiscuous mode
[  963.230202][T16281] veth0: left promiscuous mode
[  963.240950][T16281] veth1: left promiscuous mode
[  963.560180][T16281] wg0: left promiscuous mode
[  963.585512][T16281] wg1: left promiscuous mode
[  963.612674][T16281] wg2: left promiscuous mode
[  963.614401][T16281] veth0_to_bridge: left promiscuous mode
[  963.617705][T16281] veth1_to_bridge: left promiscuous mode
[  963.620301][T16281] veth0_to_bond: left promiscuous mode
[  963.621420][T16281] bond_slave_0: left promiscuous mode
[  963.622565][T16281] veth1_to_bond: left promiscuous mode
[  963.623723][T16281] bond_slave_1: left promiscuous mode
[  963.624933][T16281] veth0_to_team: left promiscuous mode
[  963.626094][T16281] team_slave_0: left promiscuous mode
[  963.627377][T16281] veth1_to_team: left promiscuous mode
[  963.628483][T16281] team_slave_1: left promiscuous mode
[  963.629751][T16281] veth0_to_batadv: left promiscuous mode
[  963.630850][T16281] batadv_slave_0: left promiscuous mode
[  963.631522][T16281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  963.631880][T16281] veth1_to_batadv: left promiscuous mode
[  963.632959][T16281] batadv_slave_1: left promiscuous mode
[  963.633701][T16281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  963.634057][T16281] xfrm0: left promiscuous mode
[  963.635565][T16281] veth0_to_hsr: left promiscuous mode
[  963.637312][T16281] veth1_to_hsr: left promiscuous mode
[  963.639025][T16281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  963.639055][T16281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  963.639141][T16281] hsr0: left promiscuous mode
[  963.640443][T16281] veth1_virt_wifi: left promiscuous mode
[  963.641565][T16281] veth0_virt_wifi: left promiscuous mode
[  963.642849][T16281] virt_wifi0: left promiscuous mode
[  963.644297][T16281] veth1_vlan: left promiscuous mode
[  963.647705][T16281] vlan0: left promiscuous mode
[  963.648979][T16281] vlan1: left promiscuous mode
[  963.650194][T16281] veth1_vlan: entered promiscuous mode
[  963.650387][T16281] macvlan0: left promiscuous mode
[  963.652148][T16281] macvlan1: left promiscuous mode
[  963.653504][T16281] ipvlan0: left promiscuous mode
[  963.654873][T16281] ipvlan1: left promiscuous mode
[  963.656205][T16281] veth1_macvtap: left promiscuous mode
[  963.657289][T16281] veth0_macvtap: left promiscuous mode
[  963.658327][T16281] veth0_macvtap: entered promiscuous mode
[  963.658509][T16281] macvtap0: left promiscuous mode
[  963.659735][T16281] veth1_macvtap: entered promiscuous mode
[  963.659946][T16281] macsec0: left promiscuous mode
[  963.661439][T16281] geneve0: left promiscuous mode
[  963.663283][T16281] geneve1: left promiscuous mode
[  963.665602][T16281] netdevsim netdevsim7 netdevsim0: left promiscuous mode
[  963.665887][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  963.667017][T16281] netdevsim netdevsim7 netdevsim1: left promiscuous mode
[  963.667314][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  963.668427][T16281] netdevsim netdevsim7 netdevsim2: left promiscuous mode
[  963.668703][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  963.669867][T16281] netdevsim netdevsim7 netdevsim3: left promiscuous mode
[  963.670159][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  963.671325][T16281] mac80211_hwsim hwsim27 wlan0: left promiscuous mode
[  963.672152][T16281] mac80211_hwsim hwsim28 wlan1: left promiscuous mode
[  963.673105][T16281] bridge1: left promiscuous mode
[  963.674504][T16281] syztnl0: left promiscuous mode
[  963.675531][T16281] ip6erspan0: left promiscuous mode
[  963.677692][T16281] bond2: left promiscuous mode
[  963.677974][T16281] 8021q: adding VLAN 0 to HW filter on device bond2
[  963.678972][T16281] syzkaller0: left promiscuous mode
[  963.679881][T16281] geneve2: left promiscuous mode
[  963.681186][T16281] bridge2: left promiscuous mode
[  963.681207][T16281] bridge2: left allmulticast mode
[  963.780210][ T1167] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.843097][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[  963.843226][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  963.870619][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.870746][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  964.256390][ T9816] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.256494][ T9816] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  964.256559][ T9816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  964.403182][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'.
[  964.992844][T16309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2923'.
[  965.105024][T16313] netlink: 'syz.8.2927': attribute type 12 has an invalid length.
[  965.105073][T16313] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2927'.
[  966.246446][T16325] bridge1: left promiscuous mode
[  966.246580][T16325] bridge1: left allmulticast mode
[  966.250655][T16325] bridge2: left promiscuous mode
[  966.250760][T16325] bridge2: left allmulticast mode
[  966.254017][T16325] bridge3: left promiscuous mode
[  966.254056][T16325] bridge3: left allmulticast mode
[  966.278771][T16325] bridge4: left promiscuous mode
[  966.278895][T16325] bridge4: left allmulticast mode
[  966.290100][T16325] bridge5: left promiscuous mode
[  966.290217][T16325] bridge5: left allmulticast mode
[  966.545353][  T114] wlan1: Trigger new scan to find an IBSS to join
[  966.931679][T16333] netlink: 'syz.2.2933': attribute type 25 has an invalid length.
[  966.988493][T16338] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  968.783377][T16367] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.785606][T16367] 8021q: adding VLAN 0 to HW filter on device team0
[  968.791611][T16367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  969.331513][T16367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  969.331565][T16367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  969.336999][T16367] veth1_vlan: left promiscuous mode
[  969.338176][T16367] veth0_vlan: left promiscuous mode
[  969.340196][T16367] veth0_vlan: entered promiscuous mode
[  969.342986][T16367] veth1_vlan: entered promiscuous mode
[  969.348024][T16367] veth1_macvtap: left promiscuous mode
[  969.349181][T16367] veth0_macvtap: left promiscuous mode
[  969.350408][T16367] veth0_macvtap: entered promiscuous mode
[  969.351701][T16367] veth1_macvtap: entered promiscuous mode
[  969.357769][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  969.359146][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  969.360530][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  969.362001][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  969.406463][T16367] bridge1: left promiscuous mode
[  969.406488][T16367] bridge1: left allmulticast mode
[  969.409414][T16367] bridge2: left promiscuous mode
[  969.409437][T16367] bridge2: left allmulticast mode
[  969.412625][T16367] bridge3: left promiscuous mode
[  969.412646][T16367] bridge3: left allmulticast mode
[  969.415752][T16367] bridge4: left promiscuous mode
[  969.415774][T16367] bridge4: left allmulticast mode
[  969.417839][T16367] bridge5: left promiscuous mode
[  969.417861][T16367] bridge5: left allmulticast mode
[  969.419547][T16367] bridge6: left promiscuous mode
[  969.419568][T16367] bridge6: left allmulticast mode
[  969.421555][T16367] bridge7: left promiscuous mode
[  969.421577][T16367] bridge7: left allmulticast mode
[  969.423325][T16367] bridge8: left promiscuous mode
[  969.423346][T16367] bridge8: left allmulticast mode
[  969.425544][T16367] bridge9: left promiscuous mode
[  969.425564][T16367] bridge9: left allmulticast mode
[  969.427128][T16367] macvlan2: left promiscuous mode
[  969.427289][T16367] macvlan2: left allmulticast mode
[  969.427307][T16367] dummy0: left allmulticast mode
[  969.926202][T16375] xt_hashlimit: size too large, truncated to 1048576
[  970.046931][T16379] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2953'.
[  970.164996][ T3341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  970.165474][ T3341] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  970.186028][ T3341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  970.187784][ T1167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  970.187852][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  970.259119][ T6293] wlan1: Trigger new scan to find an IBSS to join
[  970.288848][ T6293] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  970.410003][ T9816] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  970.523806][ T6293] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  970.635241][ T3341] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  970.745102][ T9816] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  970.854180][ T9816] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  970.964645][ T3341] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  971.074016][  T186] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  971.181983][ T9816] wlan1: Creating new IBSS network, BSSID 36:55:20:fc:86:64
[  971.382119][T16408] 
[  971.384561][T16408] =============================
[  971.389420][T16408] WARNING: suspicious RCU usage
[  971.394767][T16408] syzkaller #0 Tainted: G             L     
[  971.401820][T16408] -----------------------------
[  971.407375][T16408] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage!
[  971.415689][T16408] 
[  971.415689][T16408] other info that might help us debug this:
[  971.415689][T16408] 
[  971.426455][T16408] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  971.426455][T16408] rcu_scheduler_active = 2, debug_locks = 1
[  971.434611][T16408] locks held by syz.6.2962/16408: 1, last CPU#0:
[  971.440945][T16408]  #0: ffff88807977c410 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90
[  971.451750][T16408] 
[  971.451750][T16408] stack backtrace:
[  971.458418][T16408] CPU: 0 UID: 0 PID: 16408 Comm: syz.6.2962 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  971.469437][T16408] Tainted: [L]=SOFTLOCKUP
[  971.473758][T16408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  971.483813][T16408] Call Trace:
[  971.487098][T16408]  <TASK>
[  971.490027][T16408]  dump_stack_lvl+0x100/0x190
[  971.494753][T16408]  lockdep_rcu_suspicious.cold+0x4f/0xb2
[  971.500431][T16408]  xfrm_do_migrate_state+0x2463/0x2f10
[  971.505923][T16408]  ? __pfx_xfrm_do_migrate_state+0x10/0x10
[  971.511748][T16408]  ? __asan_memset+0x23/0x50
[  971.516361][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.522020][T16408]  ? __nla_validate_parse+0x1e7/0x28b0
[  971.527519][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.533195][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.538847][T16408]  ? __nla_parse+0x40/0x60
[  971.543319][T16408]  ? __pfx_xfrm_do_migrate_state+0x10/0x10
[  971.549154][T16408]  ? xfrm_user_rcv_msg+0x483/0xd80
[  971.554281][T16408]  xfrm_user_rcv_msg+0x483/0xd80
[  971.559245][T16408]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  971.564718][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.570376][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.576030][T16408]  ? finish_task_switch.isra.0+0x3b3/0x10d0
[  971.581948][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.587595][T16408]  ? __lock_acquire+0x4c5/0x1ec0
[  971.592592][T16408]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  971.598414][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.604150][T16408]  ? lockdep_hardirqs_on+0x7d/0x110
[  971.609366][T16408]  ? __mutex_lock+0x829/0x1bd0
[  971.614145][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.619791][T16408]  ? __mutex_lock+0x26c/0x1bd0
[  971.624580][T16408]  netlink_rcv_skb+0x159/0x420
[  971.629354][T16408]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  971.634826][T16408]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  971.640141][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.645793][T16408]  xfrm_netlink_rcv+0x71/0x90
[  971.650478][T16408]  netlink_unicast+0x585/0x850
[  971.655338][T16408]  ? __pfx_netlink_unicast+0x10/0x10
[  971.660630][T16408]  ? aa_sk_perm+0x389/0xab0
[  971.665170][T16408]  netlink_sendmsg+0x8b0/0xda0
[  971.669968][T16408]  ? __pfx_netlink_sendmsg+0x10/0x10
[  971.675269][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.680918][T16408]  ? apparmor_socket_sendmsg+0x165/0x280
[  971.686565][T16408]  ____sys_sendmsg+0xa4d/0xbe0
[  971.691352][T16408]  ? __pfx_netlink_sendmsg+0x10/0x10
[  971.696654][T16408]  ? __pfx_____sys_sendmsg+0x10/0x10
[  971.701973][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.707630][T16408]  ? lockdep_hardirqs_on+0x7d/0x110
[  971.712850][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.718498][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.724150][T16408]  ? find_held_lock+0x2b/0x80
[  971.728846][T16408]  ___sys_sendmsg+0x190/0x1e0
[  971.733551][T16408]  ? __pfx____sys_sendmsg+0x10/0x10
[  971.738787][T16408]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  971.744823][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.750467][T16408]  ? find_held_lock+0x2b/0x80
[  971.755188][T16408]  __sys_sendmsg+0x160/0x210
[  971.759793][T16408]  ? __pfx___sys_sendmsg+0x10/0x10
[  971.764914][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.770575][T16408]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.776226][T16408]  do_syscall_64+0x123/0x790
[  971.780837][T16408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.786730][T16408] RIP: 0033:0x7fc4a219e159
[  971.791144][T16408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  971.810755][T16408] RSP: 002b:00007fc4a03d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  971.819177][T16408] RAX: ffffffffffffffda RBX: 00007fc4a2426090 RCX: 00007fc4a219e159
[  971.827179][T16408] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  971.835148][T16408] RBP: 00007fc4a2235024 R08: 0000000000000000 R09: 0000000000000000
[  971.843144][T16408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  971.851139][T16408] R13: 00007fc4a2426128 R14: 00007fc4a2426090 R15: 00007ffe0a32fc38
[  971.859137][T16408]  </TASK>
[  971.995530][T16404] ptrace attach of ""[16412] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[16404]
[  972.104889][ T1167] net_ratelimit: 3 callbacks suppressed
[  972.163354][ T1167] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  972.265795][ T1155] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  972.298651][T16414] netlink: 'syz.4.2965': attribute type 1 has an invalid length.
[  972.603709][  T186] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  972.625205][T16416] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  972.714562][ T1155] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  972.825119][  T186] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  972.933824][  T186] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  973.048473][ T1155] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  973.285631][ T9816] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  973.393696][ T9816] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  973.523681][  T186] bond1: (slave ip6erspan0): failed to get link speed/duplex
[  974.105395][T10289] syz_tun (unregistering): left allmulticast mode
[  974.218252][T16410] syz_tun (unregistering): left allmulticast mode
[  974.631778][  T186] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.738282][  T186] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.837433][  T186] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  974.946777][  T186] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.819364][  T186] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  976.218115][  T186] bond0 (unregistering): Released all slaves
[  976.227322][  T186] bond1 (unregistering): Released all slaves
[  976.243289][  T186] bond2 (unregistering): Released all slaves
[  976.394533][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9
[  977.021919][  T186] hsr_slave_0: left promiscuous mode
[  977.028564][  T186] hsr_slave_1: left promiscuous mode
[  977.044034][  T186] veth1_macvtap: left promiscuous mode
[  977.049679][  T186] veth0_macvtap: left promiscuous mode
[  977.055529][  T186] veth1_vlan: left promiscuous mode
[  977.060932][  T186] veth0_vlan: left promiscuous mode
[  977.573022][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10
[  978.177759][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11
[  978.716811][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12