last executing test programs:

4m36.368030458s ago: executing program 2 (id=436):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0xfffffffffffffffc, 0x0)

4m31.095678568s ago: executing program 2 (id=465):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
epoll_create1(0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

4m24.60392912s ago: executing program 2 (id=486):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x2adcf445d702460b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)

4m22.929257206s ago: executing program 2 (id=490):
r0 = getpid()
syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0xfd, 0x14e, &(0x7f0000000400)="$eJzskD9LamEcxz/PPeqV65XrhXvBgiJoSAzzeMS2Bo0kITsQuLTmiQJN0cUxmxt6AQ5F0HRw6gWUTZZCGL2HFregsXjOo0PQ0At4PtPv++d8D+dsrA1jRMBAsV6r1htOs+mUF3bsYt4/sfkJBL2rWm/Icln5N1k4AH4A47ay78JSVZyVvVpF6nEWYkAuBPuHfkw51YZf0vv3LBBqSz4fW4Tef9mrONYXXnrizfog90d5JvB+AUty76/yUsAr0OpMPyERv5ozshDwVKsTwr3fHvQLifi8c2rlZy5/Rw1KjoyFzJ+S/cRjsuuOhoPill20h2nLWk2bKdPMjOyHQSFzfIZv8wXY9frLXddQewG5UYITAR0BrpePb0WY6esVRxEQMvFU7/zNrspfcR0ElRhE/WLaVkfgk9JoNBqNRqPRaDQajeZbfAQAAP//hTdUVg==")
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0)
setns(r1, 0x24020000)
r3 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x4000000)

4m22.292085886s ago: executing program 2 (id=492):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
read(r1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0)

4m16.634962848s ago: executing program 2 (id=515):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socket$alg(0x26, 0x5, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0)

4m14.964553414s ago: executing program 32 (id=515):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
socket$alg(0x26, 0x5, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0)

2m36.930831009s ago: executing program 4 (id=784):
r0 = syz_create_resource$binfmt(0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f00000003c0)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x88)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r2, r2, 0x0, 0xe3aa6ea)
sendfile(r1, r1, 0x0, 0x80000001)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(r3, 0x0, 0x0, 0x0)
ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

2m34.543886817s ago: executing program 4 (id=794):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267db", 0xc7}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m33.424701989s ago: executing program 1 (id=796):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
r4 = epoll_create1(0x0)
epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m32.42307237s ago: executing program 1 (id=798):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)

2m30.187040165s ago: executing program 4 (id=802):
mknod$loop(0x0, 0xfff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x23b)
execve(0x0, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r2)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26)
ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000040))
lstat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)

2m28.699787568s ago: executing program 4 (id=806):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x30160f8, 0x0, 0x81, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x7fffefff)

2m26.765317946s ago: executing program 1 (id=807):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80800)
syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x28400210}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48050)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c00028008"], 0x122}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2m25.701504041s ago: executing program 4 (id=811):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
sched_setaffinity(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000000201010100000000000000000a00000606001240000400000c0019"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0)

2m23.273547953s ago: executing program 4 (id=813):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267db", 0xc7}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m23.074250268s ago: executing program 1 (id=814):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267db", 0xc7}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0", 0x9}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m22.89285911s ago: executing program 1 (id=815):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
io_uring_setup(0x79fe, &(0x7f0000000240)={0x0, 0xc89f, 0x1000, 0x3, 0x20002f9})

2m21.475002832s ago: executing program 1 (id=818):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

2m7.806589539s ago: executing program 33 (id=813):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267db", 0xc7}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m6.311120272s ago: executing program 34 (id=818):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

14.452025832s ago: executing program 5 (id=978):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'})
gettid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000000100)='cpuacct.usage\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0)

12.077584388s ago: executing program 0 (id=979):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0x3172, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
bind$unix(r6, &(0x7f0000000240)=@file={0x1}, 0x6e)
listen(r6, 0x0)
connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e)

11.876315179s ago: executing program 5 (id=980):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r5)
syz_genetlink_get_family_id$ethtool(0x0, r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r7, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0)

10.600663918s ago: executing program 5 (id=982):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x80000)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f00000001c0)={0x11, 0x17, r7, 0x1, 0x7, 0x6, @local}, 0x14)
getsockname$packet(r6, &(0x7f00000018c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0)

10.540266952s ago: executing program 0 (id=983):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
r1 = syz_clone(0x21800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x20}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406810100000002000000b8c70000090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40002, 0x0)
write$RDMA_USER_CM_CMD_BIND(r3, 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x15ff21b3, &(0x7f00000043c0)={0x8, 0x4000000, 0x6})
syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000000))
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x400060}, 0x80, 0x0}}], 0x2, 0x4048055)

8.40341535s ago: executing program 3 (id=984):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20)

8.402794887s ago: executing program 3 (id=985):
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file7\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r4 = accept(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

8.375593566s ago: executing program 5 (id=986):
open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
syz_open_dev$sndctrl(0x0, 0x0, 0x400)
unshare(0x28000600)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
flock(r2, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r4, 0x1)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)

8.324276209s ago: executing program 0 (id=987):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5.694534147s ago: executing program 3 (id=988):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2040400)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', <r5=>0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', r5, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})

5.498500972s ago: executing program 0 (id=989):
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x8008af26, &(0x7f0000000040)={0x1})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4.97190329s ago: executing program 5 (id=990):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000001800000035000000e7ff0000070000000700000095000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000"], 0x0, 0x58}, 0x28)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4055}, 0x4000014)

3.666289283s ago: executing program 3 (id=991):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r3, 0xe6905000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@var, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {0x9}, {}, {}, {}]}, @func, @volatile, @volatile={0x80000}]}}, 0x0, 0x82, 0x0, 0x0, 0x7ff}, 0x28)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000a40)=[{0x88, 0x10c, 0x6, "67652661c0e66f6cfc0246fbf015abf9c9c764fee115f23ac05e51dfeebe354454ce08764dd023893fb86f10986dc6415f84d9fd8ad8cecab65007e2ad74a672536d250724d46b687b9392105428488fa05a44ae1106b2512ac8b40fb81b00949066055fd11fde6265375d1d482e484c7bf58e1b25"}, {0x80, 0x109, 0x8, "7872643c4dc54b6000817cc3500132571ba0938eeddf28dc7e634ce3a8c384549013583ceeccdbd38a40b54131079ee6a5f7b9800707c9fc4ed92d3f283fa6d580a79611bbf3cfbb685732037f7a7b4b3da8399e7e52810fcbe064884cfd2e572fc7e86e8f422a76f3"}, {0x10, 0x109, 0x7}, {0x10, 0x103, 0x6}, {0x10, 0x14, 0x3}, {0x90, 0x1, 0x772f, "f77ed3abf04218389c4b19cd6262039200e357d66602b456d70f766014acb6f8feb85d9d13cce5ddefc90776ae7cea52747d1df27e2a763277df64f06bab4625c6a09387a5d15554b8c9c691cefa4e1931700a4dbf6ba89198347fbe78284b578f5e88e856550c29f034a42db4f5c9273faa4ce844afd01b8e"}], 0x1c8}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0)
socket$inet6(0xa, 0xac733bfd5b65bec1, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x80)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000484)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0)

2.884831498s ago: executing program 5 (id=992):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181c01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'dvmrp1\x00', 0x1})
ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0xf00, 0x0)
fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
close_range(r3, r3, 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x3, 0x3c)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100"], 0x18)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast1, 0x5}, 0x1c)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000084)
renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, 0x0, 0x2)

2.833304822s ago: executing program 0 (id=993):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="7cd1e89831ce6aab8f22ae2de8da", 0xe, 0x4000080, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.533686524s ago: executing program 0 (id=994):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
dup(r5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'wg0\x00', @remote})
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x30, r0, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0xfffffffc, 0x0, 0xfffffff7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c018}, 0x0)

1.204087194s ago: executing program 3 (id=995):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
fcntl$setlease(r1, 0x400, 0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
r4 = socket$kcm(0x21, 0x2, 0x2)
syz_emit_ethernet(0xa7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000180c200000e88a82c00810038000011aa54dc1e7ea42188be58427ee0a5d1fe87dfc884fcba8678af9f6b71e257122659514f9a53f737ff1c0ec7361d8758b3e07fd3a4c9eb4b143912308d1d2c4b94a64bdb9f4a3bda6c18f0f09dd87ce0e2ab339925ff8d80474aed5ef5ccc2ce2d490ca0ce0507fb587d3e78149220c6e8f64c8a99b92092224c7a32ac2194068c3a92"], 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0)

0s ago: executing program 3 (id=996):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x88)
bind$inet6(r3, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff0200"/50], 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rename(&(0x7f00000006c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x113600, 0x0)
unshare(0x20000400)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x64000600)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYBLOB='shortname=mixed,iocharset=cp775,shortname=win95,shortname=win95,codepage=936,utf8=0,shortname=loweixed,utf8=1,iocharset=koi8-ru,utf8=0,shortname=mixed,uni_xlate=0,iocharset=cp862,\x00'], 0x26, 0x35a, &(0x7f00000007c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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")

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts.
[   79.042106][ T5812] cgroup: Unknown subsys name 'net'
[   79.284242][ T5812] cgroup: Unknown subsys name 'cpuset'
[   79.339811][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.057805][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.415416][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.429595][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.431762][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.437341][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.437979][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.525889][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.545708][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.546711][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.548556][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.552137][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.686379][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.705311][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.706917][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.732887][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.734999][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.750589][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.773312][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.818788][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.825362][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.852990][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.855529][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.857816][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.879528][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.886830][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.897407][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.631538][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   84.841459][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   84.912446][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   84.957226][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   84.992796][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   85.061361][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.062059][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.062241][ T5828] bridge_slave_0: entered allmulticast mode
[   85.064452][ T5828] bridge_slave_0: entered promiscuous mode
[   85.143010][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.143193][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.143361][ T5828] bridge_slave_1: entered allmulticast mode
[   85.145375][ T5828] bridge_slave_1: entered promiscuous mode
[   85.316353][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.348274][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.348506][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.348664][ T5833] bridge_slave_0: entered allmulticast mode
[   85.354611][ T5833] bridge_slave_0: entered promiscuous mode
[   85.386170][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.424345][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.424610][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.425004][ T5833] bridge_slave_1: entered allmulticast mode
[   85.427004][ T5833] bridge_slave_1: entered promiscuous mode
[   85.492214][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.492439][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.492594][ T5839] bridge_slave_0: entered allmulticast mode
[   85.494625][ T5839] bridge_slave_0: entered promiscuous mode
[   85.521363][ T5144] Bluetooth: hci0: command tx timeout
[   85.570062][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.570327][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.570550][ T5836] bridge_slave_0: entered allmulticast mode
[   85.573012][ T5836] bridge_slave_0: entered promiscuous mode
[   85.587147][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.588072][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.588690][ T5839] bridge_slave_1: entered allmulticast mode
[   85.596549][ T5839] bridge_slave_1: entered promiscuous mode
[   85.674202][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.674475][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.674693][ T5835] bridge_slave_0: entered allmulticast mode
[   85.676650][ T5835] bridge_slave_0: entered promiscuous mode
[   85.679731][ T5144] Bluetooth: hci1: command tx timeout
[   85.702558][ T5828] team0: Port device team_slave_0 added
[   85.703362][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.706382][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.713777][ T5836] bridge_slave_1: entered allmulticast mode
[   85.722470][ T5836] bridge_slave_1: entered promiscuous mode
[   85.758965][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.760081][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.760736][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.763345][ T5835] bridge_slave_1: entered allmulticast mode
[   85.775830][ T5835] bridge_slave_1: entered promiscuous mode
[   85.793121][ T5828] team0: Port device team_slave_1 added
[   85.841869][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.903025][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.909694][ T5144] Bluetooth: hci2: command tx timeout
[   85.962937][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.966462][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.989424][   T61] Bluetooth: hci4: command tx timeout
[   85.989579][ T5144] Bluetooth: hci3: command tx timeout
[   86.018114][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.022571][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.022653][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.022718][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.058166][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.094754][ T5833] team0: Port device team_slave_0 added
[   86.098309][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.101915][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.101949][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.102012][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.175986][ T5833] team0: Port device team_slave_1 added
[   86.219657][ T5839] team0: Port device team_slave_0 added
[   86.263175][ T5836] team0: Port device team_slave_0 added
[   86.266032][ T5839] team0: Port device team_slave_1 added
[   86.291213][ T5835] team0: Port device team_slave_0 added
[   86.295078][ T5836] team0: Port device team_slave_1 added
[   86.319547][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.319560][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.319586][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.323289][ T5835] team0: Port device team_slave_1 added
[   86.404959][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.404968][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.404984][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.501237][   T10] cfg80211: failed to load regulatory.db
[   86.506788][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.506796][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.506813][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.611348][ T5828] hsr_slave_0: entered promiscuous mode
[   86.613303][ T5828] hsr_slave_1: entered promiscuous mode
[   86.632612][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.632625][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.632649][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.639945][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.639987][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.640062][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.730851][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.730866][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.730893][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.738262][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.738276][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.738304][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.195918][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.195928][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.195944][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.326826][ T5833] hsr_slave_0: entered promiscuous mode
[   87.328452][ T5833] hsr_slave_1: entered promiscuous mode
[   87.333706][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   87.333971][ T5833] Cannot create hsr debugfs directory
[   87.433456][ T5839] hsr_slave_0: entered promiscuous mode
[   87.434801][ T5839] hsr_slave_1: entered promiscuous mode
[   87.435899][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   87.435918][ T5839] Cannot create hsr debugfs directory
[   87.485035][ T5836] hsr_slave_0: entered promiscuous mode
[   87.486327][ T5836] hsr_slave_1: entered promiscuous mode
[   87.487889][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   87.487910][ T5836] Cannot create hsr debugfs directory
[   87.529152][ T5835] hsr_slave_0: entered promiscuous mode
[   87.534255][ T5835] hsr_slave_1: entered promiscuous mode
[   87.538107][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   87.538160][ T5835] Cannot create hsr debugfs directory
[   87.589745][ T5144] Bluetooth: hci0: command tx timeout
[   87.749417][ T5144] Bluetooth: hci1: command tx timeout
[   87.989381][ T5144] Bluetooth: hci2: command tx timeout
[   88.069712][   T61] Bluetooth: hci4: command tx timeout
[   88.069787][ T5144] Bluetooth: hci3: command tx timeout
[   88.445340][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.476983][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.487020][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.513732][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.514860][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.538209][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.563306][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.594128][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.683682][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.722962][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.730709][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.764624][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.766618][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.803562][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.827395][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.854313][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.004327][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.042736][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.046996][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.083894][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.096374][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.125739][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.155890][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.184668][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.331491][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.365479][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.381058][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.412369][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.436933][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.462679][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.483913][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.527524][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.626996][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.652513][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.669444][ T5144] Bluetooth: hci0: command tx timeout
[   89.689978][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.707083][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.742695][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.764231][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.805022][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.817040][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.829537][ T5144] Bluetooth: hci1: command tx timeout
[   89.847155][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.918291][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   89.974029][ T1543] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.976461][ T1543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.004717][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.045606][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.045742][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.070459][ T5144] Bluetooth: hci2: command tx timeout
[   90.150156][   T61] Bluetooth: hci4: command tx timeout
[   90.150229][ T5144] Bluetooth: hci3: command tx timeout
[   90.154674][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   90.215655][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.227970][ T1527] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.228124][ T1527] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.285682][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.285793][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.372225][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   90.434997][  T165] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.435135][  T165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.466016][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.514073][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.514264][ T4517] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.635060][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   90.667263][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.726308][  T165] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.726445][  T165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.777676][  T165] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.777879][  T165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.846606][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   90.904073][ T1543] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.904232][ T1543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.988823][ T1543] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.992212][ T1543] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.021339][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.287328][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.430380][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.454216][ T5828] veth0_vlan: entered promiscuous mode
[   91.570541][ T5828] veth1_vlan: entered promiscuous mode
[   91.671169][ T5839] veth0_vlan: entered promiscuous mode
[   91.703365][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.743233][ T5839] veth1_vlan: entered promiscuous mode
[   91.749364][ T5144] Bluetooth: hci0: command tx timeout
[   91.794451][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.828467][ T5836] veth0_vlan: entered promiscuous mode
[   91.839677][ T5828] veth0_macvtap: entered promiscuous mode
[   91.893555][ T5828] veth1_macvtap: entered promiscuous mode
[   91.909375][ T5144] Bluetooth: hci1: command tx timeout
[   91.910453][ T5836] veth1_vlan: entered promiscuous mode
[   92.033146][ T5839] veth0_macvtap: entered promiscuous mode
[   92.049887][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.097118][ T5839] veth1_macvtap: entered promiscuous mode
[   92.120789][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.123293][ T5833] veth0_vlan: entered promiscuous mode
[   92.149405][ T5144] Bluetooth: hci2: command tx timeout
[   92.194414][ T1466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.212902][ T5836] veth0_macvtap: entered promiscuous mode
[   92.216224][ T1466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.232389][   T61] Bluetooth: hci4: command tx timeout
[   92.232487][ T5144] Bluetooth: hci3: command tx timeout
[   92.258813][ T1466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.277191][ T5833] veth1_vlan: entered promiscuous mode
[   92.297262][ T1466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.315320][ T5836] veth1_macvtap: entered promiscuous mode
[   92.378961][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.471640][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.629475][  T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.646512][  T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.684421][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.687626][ T1466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.711504][ T1466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.761908][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.872989][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.873005][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.876647][ T5833] veth0_macvtap: entered promiscuous mode
[   92.941007][ T1527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.957225][ T1527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.007209][ T5835] veth0_vlan: entered promiscuous mode
[   93.008421][ T1527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.034601][ T5833] veth1_macvtap: entered promiscuous mode
[   93.040153][ T1527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.228741][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.228757][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.258286][ T5835] veth1_vlan: entered promiscuous mode
[   93.441355][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.539992][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.540007][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.599366][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.688358][ T1466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.688565][ T1466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.688743][ T1466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.718957][ T1466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.878093][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.968078][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.968093][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.074337][ T5835] veth0_macvtap: entered promiscuous mode
[   94.163307][ T5835] veth1_macvtap: entered promiscuous mode
[   94.182864][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.182877][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.409274][ T4517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.409288][ T4517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.594158][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.788142][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.788392][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.788407][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.910158][ T4517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.912846][ T4517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.939933][ T4517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.940898][ T4517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.277369][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.277389][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.810565][ T5952] loop0: detected capacity change from 0 to 128
[   96.246825][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.246842][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.494903][ T5952] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.532035][ T5952] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   96.633645][ T5960] loop2: detected capacity change from 0 to 512
[   96.660804][ T5960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.660819][ T5960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   96.827152][ T5960] EXT4-fs (loop2): 1 truncate cleaned up
[   96.868792][ T5960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.973086][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.973102][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.765218][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.806632][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.704590][ T5975] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   98.799958][ T5892] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.906108][ T5975] usb 5-1: Using ep0 maxpacket: 16
[   98.992652][ T5892] usb 1-1: Using ep0 maxpacket: 32
[   99.016855][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   99.047774][ T5975] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   99.047797][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.047815][ T5975] usb 5-1: Product: syz
[   99.047828][ T5975] usb 5-1: Manufacturer: syz
[   99.047841][ T5975] usb 5-1: SerialNumber: syz
[   99.221330][ T5892] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[   99.221353][ T5892] usb 1-1: config 0 has no interface number 0
[   99.221396][ T5892] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[   99.262393][ T5892] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[   99.262419][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.262437][ T5892] usb 1-1: Product: syz
[   99.262450][ T5892] usb 1-1: Manufacturer: syz
[   99.262462][ T5892] usb 1-1: SerialNumber: syz
[   99.508472][ T5965] loop1: detected capacity change from 0 to 40427
[   99.685569][ T5892] usb 1-1: config 0 descriptor??
[   99.707034][ T5975] usb 5-1: config 0 descriptor??
[   99.756871][ T5973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  100.077158][ T5975] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  100.077192][ T5975] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  100.207482][ T5973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  100.530141][ T5975] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  100.548170][ T5965] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.838044][ T5975] em28xx 5-1:0.0: board has no eeprom
[  102.093997][ T5892] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  102.094025][ T5892] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  102.116493][ T5892] asix 1-1:0.188: probe with driver asix failed with error -71
[  102.189380][ T5975] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  102.189407][ T5975] em28xx 5-1:0.0: dvb set to bulk mode.
[  102.200612][ T5814] em28xx 5-1:0.0: Binding DVB extension
[  102.626175][ T5892] usb 1-1: USB disconnect, device number 2
[  102.642512][ T5975] usb 5-1: USB disconnect, device number 2
[  102.745180][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  102.945242][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  102.962565][ T5975] em28xx 5-1:0.0: Disconnecting em28xx
[  103.141444][ T5814] em28xx 5-1:0.0: Registering input extension
[  103.215638][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short
[  103.216583][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71
[  103.216616][ T5913] usb 4-1: can't read configurations, error -71
[  103.247897][ T5975] em28xx 5-1:0.0: Closing input extension
[  103.572113][ T6027] loop1: detected capacity change from 0 to 32768
[  103.574042][ T6027] =======================================================
[  103.574042][ T6027] WARNING: The mand mount option has been deprecated and
[  103.574042][ T6027]          and is ignored by this kernel. Remove the mand
[  103.574042][ T6027]          option from the mount to silence this warning.
[  103.574042][ T6027] =======================================================
[  103.735042][ T6027] JBD2: Ignoring recovery information on journal
[  103.802351][ T6027] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  104.300444][ T6028] loop2: detected capacity change from 0 to 4096
[  104.398103][ T6028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  104.398119][ T6028] EXT4-fs (loop2): Test dummy encryption mode enabled
[  104.429456][ T6035] fuse: Bad value for 'fd'
[  105.022422][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.133016][ T5975] em28xx 5-1:0.0: Freeing device
[  105.136260][ T5839] ocfs2: Unmounting device (7,1) on (node local)
[  105.465048][ T6028] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  105.698378][ T5971] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.725676][ T6028] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  105.859279][ T5971] usb 1-1: Using ep0 maxpacket: 16
[  105.866597][ T5971] usb 1-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config
[  105.866738][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  105.866768][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  105.866789][ T5971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  105.866813][ T5971] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.868039][ T5971] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  105.868061][ T5971] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  105.868078][ T5971] usb 1-1: Manufacturer: syz
[  105.999510][ T5971] usb 1-1: config 0 descriptor??
[  106.117518][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.439677][ T5971] rc_core: IR keymap rc-hauppauge not found
[  106.439695][ T5971] Registered IR keymap rc-empty
[  106.440095][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.465975][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.575087][ T5971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  106.618930][ T5971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[  106.665215][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.670211][    C0] mceusb 1-1:0.0: long-range (0xbc) receiver active
[  106.684987][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.699511][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.719742][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.742420][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.777273][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.789862][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.809392][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.829411][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.873586][ T5971] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  106.946259][ T5971] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  106.946280][ T5971] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xbc active)
[  106.969855][ T5971] usb 1-1: USB disconnect, device number 3
[  107.063433][ T6074] loop3: detected capacity change from 0 to 16
[  107.411833][ T6074] erofs (device loop3): mounted with root inode @ nid 36.
[  107.808977][ T6078] loop0: detected capacity change from 0 to 4096
[  107.816889][ T6078] EXT4-fs: Ignoring removed bh option
[  107.883604][ T6078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.250533][ T5971] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  108.419379][ T5971] usb 2-1: Using ep0 maxpacket: 16
[  108.426032][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.426061][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  108.426099][ T5971] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  108.426119][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.505479][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.549144][ T5971] usb 2-1: config 0 descriptor??
[  109.163928][ T5971] kye 0003:0458:5019.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  109.192112][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x2
[  109.192144][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192167][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192189][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192211][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192233][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192345][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192368][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192389][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.192412][ T5971] kye 0003:0458:5019.0001: unknown main item tag 0x0
[  109.592591][ T6106] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  109.592613][ T6106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  109.634475][ T5971] kye 0003:0458:5019.0001: hidraw0: USB HID vff.fc Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0
[  109.634503][ T5971] kye 0003:0458:5019.0001: tablet-enabling feature report not found
[  109.634516][ T5971] kye 0003:0458:5019.0001: tablet enabling failed
[  109.785356][ T6106] vhci_hcd vhci_hcd.0: Device attached
[  110.654430][ T6108] vhci_hcd: connection closed
[  111.057799][   T44] vhci_hcd vhci_hcd.0: stop threads
[  111.058715][   T44] vhci_hcd vhci_hcd.0: release socket
[  111.170673][   T44] vhci_hcd vhci_hcd.0: disconnect device
[  111.288435][ T5971] usb 2-1: USB disconnect, device number 2
[  112.213322][ T6138] batman_adv: batadv0: Adding interface: dummy0
[  112.213338][ T6138] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.213367][ T6138] batman_adv: batadv0: Interface activated: dummy0
[  112.301393][ T6140] loop2: detected capacity change from 0 to 128
[  112.336247][ T6138] batadv0: mtu less than device minimum
[  112.362509][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.386844][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.403349][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.421888][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.447187][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.468004][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.487972][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.510616][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.516591][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.626768][ T6140] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2
[  112.886063][ T6145] binder: BINDER_SET_CONTEXT_MGR already set
[  112.886074][ T6145] binder: 6144:6145 ioctl 4018620d 200000000040 returned -16
[  112.886357][ T6145] binder: 6144:6145 ioctl c0306201 2000000003c0 returned -14
[  114.192414][ T6165] loop1: detected capacity change from 0 to 4096
[  114.467363][ T6165] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  114.627176][ T6184] loop4: detected capacity change from 0 to 4096
[  114.631872][ T6165] ntfs3(loop1): Failed to load $Bitmap (-2).
[  114.662121][ T6184] EXT4-fs: inline encryption not supported
[  114.681242][ T6184] EXT4-fs (loop4): Test dummy encryption mode enabled
[  114.728916][ T6184] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0003]
[  114.729037][ T6184] System zones: 0-5
[  114.848682][ T6184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.714673][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.267557][ T6212] loop3: detected capacity change from 0 to 128
[  116.377681][ T6212] EXT4-fs (loop3): Test dummy encryption mode enabled
[  116.516891][ T6212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  116.516974][ T6212] System zones: 1-3, 19-19, 35-36
[  116.521699][ T6212] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  116.523970][ T6212] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.655459][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'.
[  116.655534][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'.
[  116.767666][ T6218] loop4: detected capacity change from 0 to 512
[  116.838675][ T6218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002]
[  116.838798][ T6218] System zones: 1-12
[  117.142758][ T6223] process 'syz.1.78' launched './file0' with NULL argv: empty string added
[  117.209746][ T6218] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.77: missing EA_INODE flag
[  117.209930][ T6218] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  117.221164][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  117.221178][    C0] EXT4-fs (loop4): initial error at time 1776402650: ext4_xattr_inode_iget:441: inode 12
[  117.221197][    C0] EXT4-fs (loop4): last error at time 1776402650: ext4_xattr_inode_iget:441: inode 12
[  117.742521][ T6218] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.77: error while reading EA inode 12 err=-117
[  117.742676][ T6218] loop4: lost filesystem error report for type 5 error -117
[  117.762959][ T6218] EXT4-fs (loop4): 1 orphan inode deleted
[  117.807199][ T6218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.325814][ T6233] loop0: detected capacity change from 0 to 128
[  118.455903][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.653018][ T6236] loop1: detected capacity change from 0 to 32768
[  118.653996][ T6236] btrfs: Deprecated parameter 'usebackuproot'
[  118.654110][ T6236] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  118.661995][ T6236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.80 (6236)
[  118.740505][ T6236] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.740548][ T6236] BTRFS info (device loop1): using crc32c checksum algorithm
[  118.924466][ T1543] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  118.924639][ T6236] BTRFS error (device loop1): failed to load root extent
[  118.924685][ T6236] BTRFS warning (device loop1): try to load backup roots slot 1
[  118.924950][ T1543] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  118.925030][ T6236] BTRFS warning (device loop1): couldn't read tree root
[  118.925048][ T6236] BTRFS warning (device loop1): try to load backup roots slot 2
[  118.927624][ T1543] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  118.927743][ T6236] BTRFS warning (device loop1): couldn't read tree root
[  118.927761][ T6236] BTRFS warning (device loop1): try to load backup roots slot 3
[  119.032436][ T6236] BTRFS info (device loop1): rebuilding free space tree
[  119.351327][ T6236] BTRFS info (device loop1): checking UUID tree
[  119.371505][ T6236] BTRFS info (device loop1): enabling ssd optimizations
[  119.371528][ T6236] BTRFS info (device loop1): turning on async discard
[  119.371543][ T6236] BTRFS info (device loop1): enabling free space tree
[  119.371562][ T6236] BTRFS info (device loop1): force clearing of disk cache
[  119.371578][ T6236] BTRFS info (device loop1): trying to use backup root at mount time
[  119.371605][ T6236] BTRFS info (device loop1): force zlib compression, level 3
[  119.585631][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.338688][ T6282] 0

[  121.495325][ T6293] binder: 6291:6293 ioctl c0306201 2000000003c0 returned -14
[  121.971040][ T5839] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.011963][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'.
[  123.525668][ T6301] loop2: detected capacity change from 0 to 32768
[  124.036426][ T6303] team0: Port device team_slave_0 removed
[  124.055728][ T6301] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.287334][ T6330] loop1: detected capacity change from 0 to 2048
[  124.327878][ T6330] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  124.355965][ T6301] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  124.453450][ T6301] XFS (loop2): Starting recovery (logdev: internal)
[  124.722351][ T6301] XFS (loop2): Ending recovery (logdev: internal)
[  125.183616][   T38] audit: type=1800 audit(1776402658.278:2): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.98" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  125.253245][ T6347] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.386746][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'.
[  125.783604][ T5833] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  126.020369][ T5144] Bluetooth: hci0: Unknown advertising packet type: 0x14
[  126.255451][   T38] audit: type=1800 audit(1776402659.378:3): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.114" name="file0" dev="overlay" ino=151 res=0 errno=0
[  127.010023][ T6378] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  127.240071][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.415002][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  127.415028][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.415046][    T9] usb 5-1: Product: syz
[  127.415059][    T9] usb 5-1: Manufacturer: syz
[  127.415071][    T9] usb 5-1: SerialNumber: syz
[  128.016061][    T9] net_ratelimit: 10 callbacks suppressed
[  128.016081][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  128.016122][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  128.899654][ T6017] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  129.069546][ T6017] usb 4-1: Using ep0 maxpacket: 16
[  129.072110][ T6017] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  129.072133][ T6017] usb 4-1: config 0 has no interface number 0
[  129.072173][ T6017] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  129.072197][ T6017] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  129.076808][ T6017] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  129.076833][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.076851][ T6017] usb 4-1: Product: syz
[  129.076865][ T6017] usb 4-1: Manufacturer: syz
[  129.076878][ T6017] usb 4-1: SerialNumber: syz
[  129.170342][ T6017] usb 4-1: config 0 descriptor??
[  129.174345][ T6413] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  129.179893][ T6413] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  129.283492][ T6418] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  129.318024][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  129.318090][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  129.414298][ T6413] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  129.414410][ T6413] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  129.509051][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  129.538858][ T6423] loop0: detected capacity change from 0 to 512
[  129.555793][ T6423] EXT4-fs: quotafile must be on filesystem root
[  129.570110][    T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  129.633252][ T6017] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  129.690925][    T9] usb 5-1: USB disconnect, device number 3
[  130.883845][ T6017] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  130.883876][ T6017] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  130.884156][ T6017] asix 4-1:0.34: probe with driver asix failed with error -71
[  130.889574][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.959452][ T6017] usb 4-1: USB disconnect, device number 4
[  131.113122][ T6452] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  131.210183][ T1369] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  131.359998][ T1369] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  131.820591][ T6460] loop1: detected capacity change from 0 to 4096
[  131.829670][ T6460] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  131.833133][ T6460] ntfs3(loop1): ino=3, mi_enum_attr
[  131.964027][ T6460] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  131.964066][ T6460] ntfs3(loop1): Failed to load $AttrDef (-22)
[  132.020451][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb8fc00: rx timeout, send abort
[  132.148758][ T6460] loop1: detected capacity change from 0 to 4096
[  132.165078][ T6460] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  132.296386][ T6460] ntfs3(loop1): ino=1a, mi_enum_attr
[  132.296409][ T6460] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  132.357198][ T6460] ntfs3(loop1): ino=1a, mi_enum_attr
[  132.357217][ T6460] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  132.519231][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033b8c800: rx timeout, send abort
[  132.521333][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb8fc00: abort rx timeout. Force session deactivation
[  132.585402][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  132.585522][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  132.844338][ T6475] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  133.019398][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033b8c800: abort rx timeout. Force session deactivation
[  133.093743][   T38] audit: type=1804 audit(1776402666.148:4): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.151" name="/newroot/31/file0" dev="tmpfs" ino=181 res=1 errno=0
[  133.652237][ T6491] binder: 6489:6491 unknown command 0
[  133.652254][ T6491] binder: 6489:6491 ioctl c0306201 200000000080 returned -22
[  133.716113][ T6487] loop1: detected capacity change from 0 to 512
[  133.751073][ T6487] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4681: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  133.751096][ T6487] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  133.855255][ T5838] udevd[5838]: incorrect ext4 checksum on /dev/loop1
[  134.845548][ T6506] netlink: 'syz.4.163': attribute type 1 has an invalid length.
[  135.165457][ T6511] netlink: 14 bytes leftover after parsing attributes in process `syz.4.163'.
[  135.366853][ T6508] bond1: (slave veth3): Enslaving as an active interface with a down link
[  135.547068][ T6506] bond1: (slave dummy0): making interface the new active one
[  135.562028][ T6506] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  135.669106][ T6529] fuse: fd is not a fuse device
[  135.714094][ T6511] bond1: (slave dummy0): Releasing active interface
[  135.761414][ T6527] loop0: detected capacity change from 0 to 4096
[  135.781316][ T6527] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  135.801889][ T6527] ntfs3(loop0): ino=3, mi_enum_attr
[  135.802210][ T6527] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  135.936814][ T6527] ntfs3(loop0): volume is dirty and "force" flag is not set!
[  136.196610][ T6536] netlink: 'syz.4.173': attribute type 10 has an invalid length.
[  136.345419][ T6538] binder: 6537:6538 ioctl c0306201 2000000003c0 returned -14
[  136.425669][ T6536] team0: Device vxcan1 is of different type
[  136.548795][ T6541] loop3: detected capacity change from 0 to 1024
[  136.583455][ T6541] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  136.604037][ T6541] JBD2: no valid journal superblock found
[  136.664704][ T6541] EXT4-fs (loop3): Could not load journal inode
[  137.409252][ T6563] loop3: detected capacity change from 0 to 128
[  137.430197][ T6563] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  137.487611][   T38] audit: type=1804 audit(1776402670.598:5): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.180" name="/newroot/34/file1/bus" dev="loop3" ino=1048606 res=1 errno=0
[  138.405370][ T6587] fuse: fd is not a fuse device
[  138.451005][   T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  140.719229][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  141.019766][ T6582] syz.4.184 (6582) used greatest stack depth: 18968 bytes left
[  141.653386][ T6613] syz_tun: entered allmulticast mode
[  141.726239][ T6615] fuse: fd is not a fuse device
[  141.996261][ T6610] syz_tun: left allmulticast mode
[  142.434967][ T6619] loop3: detected capacity change from 0 to 2048
[  143.229064][ T6619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.375536][ T5975] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  143.569249][ T5975] usb 5-1: Using ep0 maxpacket: 32
[  143.593672][ T5975] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  143.593697][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.593714][ T5975] usb 5-1: Product: syz
[  143.593727][ T5975] usb 5-1: Manufacturer: syz
[  143.593740][ T5975] usb 5-1: SerialNumber: syz
[  143.662931][ T5975] usb 5-1: config 0 descriptor??
[  143.716359][ T5975] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  144.134127][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.251910][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.513061][ T5975] gspca_ov534_9: reg_w failed -71
[  145.902655][ T5975] gspca_ov534_9: Unknown sensor 0000
[  145.902739][ T5975] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  147.072803][ T5975] usb 5-1: USB disconnect, device number 4
[  147.427715][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.592059][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.800014][ T5842] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  147.959274][ T5842] usb 3-1: Using ep0 maxpacket: 32
[  147.964515][ T5842] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  147.964537][ T5842] usb 3-1: config 0 has no interface number 0
[  147.966717][ T5842] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  147.966741][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.966760][ T5842] usb 3-1: Product: syz
[  147.966773][ T5842] usb 3-1: Manufacturer: syz
[  147.966787][ T5842] usb 3-1: SerialNumber: syz
[  148.077242][ T5842] usb 3-1: config 0 descriptor??
[  148.559502][ T5842] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  148.559540][ T5842] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  149.494582][ T6675] syz.0.215 uses obsolete (PF_INET,SOCK_PACKET)
[  150.005407][ T5842] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[  150.005622][ T5842] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  150.065388][ T5842] usb 3-1: USB disconnect, device number 2
[  151.273933][ T1527] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.338874][ T6686] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.392340][ T6688] bond1: (slave ip6gretap1): making interface the new active one
[  151.411817][ T6688] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  151.749600][ T6710] loop2: detected capacity change from 0 to 1024
[  151.755158][ T6710] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  151.755183][ T6710] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  151.755277][ T6710] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  151.761302][ T6710] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #5: comm syz.2.224: unexpected bad inode w/o EXT4_IGET_BAD
[  151.762855][ T6710] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  151.781994][    C0] EXT4-fs (loop2): initial error at time 1776402684: ext4_get_journal_inode:5896: inode 5
[  151.782086][    C0] EXT4-fs (loop2): last error at time 1776402684: ext4_get_journal_inode:5896: inode 5
[  151.855822][ T6710] EXT4-fs (loop2): no journal found
[  151.855837][ T6710] EXT4-fs (loop2): can't get journal size
[  151.950673][ T6715] Zero length message leads to an empty skb
[  151.952122][ T6710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  152.040174][ T1527] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.321843][ T6718] ip6erspan0: entered allmulticast mode
[  152.322012][ T1527] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.327421][ T1527] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.460169][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.760652][ T6736] loop2: detected capacity change from 0 to 1024
[  152.761641][ T6736] EXT4-fs: Ignoring removed bh option
[  152.849330][ T6015] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  152.872903][ T6736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.873017][ T6736] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.970409][ T6748] netlink: 3 bytes leftover after parsing attributes in process `syz.1.236'.
[  152.970651][ T6748] 0ªX¹¦À: renamed from caif0
[  153.009277][ T6015] usb 5-1: Using ep0 maxpacket: 16
[  153.011197][ T6015] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  153.011217][ T6015] usb 5-1: config 0 has no interface number 0
[  153.011251][ T6015] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  153.011273][ T6015] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  153.013750][ T6015] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  153.013772][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.013788][ T6015] usb 5-1: Product: syz
[  153.013799][ T6015] usb 5-1: Manufacturer: syz
[  153.013829][ T6015] usb 5-1: SerialNumber: syz
[  153.054130][ T6015] usb 5-1: config 0 descriptor??
[  153.059889][ T6733] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  153.060216][ T6733] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  153.276471][ T6748] 0ªX¹¦À: entered allmulticast mode
[  153.276488][ T6748] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  153.278971][ T6733] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  153.279130][ T6733] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  153.335838][ T6752] pimreg3: entered allmulticast mode
[  153.364313][ T6745] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  153.480230][ T6015] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  153.617554][   T38] audit: type=1800 audit(1776402686.698:6): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.230" name="file1" dev="loop2" ino=15 res=0 errno=0
[  154.061501][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  155.092431][ T6769] loop3: detected capacity change from 0 to 32768
[  155.134357][ T6015] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  155.134552][ T6015] asix 5-1:0.34: probe with driver asix failed with error -71
[  155.141519][ T6776] capability: warning: `syz.0.243' uses 32-bit capabilities (legacy support in use)
[  155.249412][ T6015] usb 5-1: USB disconnect, device number 5
[  155.531250][ T6769] JBD2: Ignoring recovery information on journal
[  155.845992][ T6769] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  156.465752][   T38] audit: type=1800 audit(1776402689.588:7): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.242" name="file1" dev="loop3" ino=17060 res=0 errno=0
[  156.531326][ T6769] (syz.3.242,6769,1):ocfs2_dio_end_io:2415 ERROR: Direct IO failed, bytes = -14
[  156.546296][ T6769] syz.3.242 (6769) used greatest stack depth: 18720 bytes left
[  156.779879][ T5836] ocfs2: Unmounting device (7,3) on (node local)
[  160.205567][ T6847] loop3: detected capacity change from 0 to 16
[  160.391478][ T6847] erofs (device loop3): mounted with root inode @ nid 36.
[  160.409301][ T5842] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  160.499128][ T6847] syz.3.265: attempt to access beyond end of device
[  160.499128][ T6847] loop3: rw=0, sector=36, nr_sectors = 1 limit=16
[  160.559383][ T5842] usb 5-1: Using ep0 maxpacket: 32
[  160.562019][ T5842] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  160.562045][ T5842] usb 5-1: config 0 has no interface number 0
[  160.562094][ T5842] usb 5-1: config 0 interface 184 has no altsetting 0
[  160.564789][ T5842] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  160.564816][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.564838][ T5842] usb 5-1: Product: syz
[  160.564854][ T5842] usb 5-1: Manufacturer: syz
[  160.564869][ T5842] usb 5-1: SerialNumber: syz
[  160.641448][ T5842] usb 5-1: config 0 descriptor??
[  161.278300][ T5842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  161.278328][ T5842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  162.828313][ T5842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[  162.828341][ T5842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[  162.828359][ T5842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  162.828379][ T5842] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  162.869639][ T5842] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  162.936528][ T5842] usb 5-1: USB disconnect, device number 6
[  163.231800][ T6880] overlayfs: failed to clone lowerpath
[  163.727364][ T6896] binder: 6895:6896 ioctl c0306201 200000000240 returned -14
[  163.812709][ T6904] tipc: Started in network mode
[  163.812725][ T6904] tipc: Node identity -, cluster identity 4711
[  163.896205][ T6903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2230047908 (2230047908 ns) > initial count (1113224862 ns). Using initial count to start timer.
[  164.217256][ T6911] fuse: fd is not a fuse device
[  166.116288][ T6940] loop4: detected capacity change from 0 to 128
[  166.241506][ T6940] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  166.241898][ T6940] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  166.340279][ T6949] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  167.476309][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.608851][ T5835] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  168.636140][ T6987] fuse: Bad value for 'fd'
[  168.790112][ T6991] netlink: 'syz.1.317': attribute type 1 has an invalid length.
[  169.167904][ T6991] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.185689][ T6996] bond1: up delay (183) is not a multiple of miimon (100), value rounded to 100 ms
[  170.082000][ T6996] bond1: entered allmulticast mode
[  170.189623][ T7003] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  173.001736][ T7052] syz_tun: entered allmulticast mode
[  173.009832][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[  173.334040][ T7061] fuse: Bad value for 'fd'
[  173.579331][ T7052] syz_tun (unregistering): left allmulticast mode
[  173.764333][ T7063] Bluetooth: hci5: Frame reassembly failed (-84)
[  173.895926][ T1466] Bluetooth: hci5: Frame reassembly failed (-90)
[  174.025768][   T38] audit: type=1800 audit(1776402707.148:8): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.346" name="file1" dev="tmpfs" ino=398 res=0 errno=0
[  174.962293][ T7096] loop3: detected capacity change from 0 to 32768
[  175.027160][ T7096] JBD2: Ignoring recovery information on journal
[  175.068979][ T7096] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  175.580160][ T5836] ocfs2: Unmounting device (7,3) on (node local)
[  175.749391][ T5144] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  177.151603][ T7115] Illegal XDP return value 4294967294 on prog  (id 31) dev syz_tun, expect packet loss!
[  180.550428][ T7138] loop4: detected capacity change from 0 to 32768
[  180.686426][ T7138] JBD2: Ignoring recovery information on journal
[  180.902114][ T7138] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  181.091488][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[  181.318032][ T7158] loop3: detected capacity change from 0 to 512
[  181.357533][ T7158] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  181.462043][ T7158] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  181.473551][ T7158] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.372: iget: bad i_size value: 12154757448730
[  181.473657][ T7158] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  181.479480][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  181.479531][    C0] EXT4-fs (loop3): initial error at time 1776402714: ext4_orphan_get:1397: inode 13
[  181.479594][    C0] EXT4-fs (loop3): last error at time 1776402714: ext4_orphan_get:1397: inode 13
[  181.484661][ T7158] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.372: couldn't read orphan inode 13 (err -117)
[  181.484733][ T7158] loop3: lost filesystem error report for type 5 error -117
[  181.543614][ T7158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.696083][ T5835] ocfs2: Unmounting device (7,4) on (node local)
[  181.858929][ T7164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.858943][ T7164] IPv6: NLM_F_CREATE should be set when creating new route
[  181.971928][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.082917][ T7172] loop2: detected capacity change from 0 to 256
[  182.284096][ T7183] fuse: fd is not a fuse device
[  182.698723][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.730809][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.195398][ T7203] overlayfs: failed to clone upperpath
[  183.911827][ T7211] fuse: fd is not a fuse device
[  184.038758][ T7164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.066213][ T7164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.541640][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'.
[  189.733202][ T5144] Bluetooth: hci1: Unable to find connection for big 0x00
[  190.082912][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.327285][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.363602][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.363992][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.653019][ T7282] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  191.774074][ T7286] loop4: detected capacity change from 0 to 512
[  192.093292][ T7286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.093415][ T7286] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  192.819213][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  192.920700][ T7286] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.407: corrupted inode contents
[  192.946029][ T7286] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.407: mark_inode_dirty error
[  193.066703][ T7286] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.407: corrupted inode contents
[  193.081742][ T7286] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.407: mark_inode_dirty error
[  193.271354][ T7306] binder_alloc: 7305: binder_alloc_buf, no vma
[  193.350085][ T7310] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  193.465416][ T7309] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.407: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  193.465416][ T7309] 
[  193.488266][ T7309] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.407: corrupted inode contents
[  193.513177][ T7301] netlink: 104 bytes leftover after parsing attributes in process `syz.4.407'.
[  193.517351][ T7309] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.407: mark_inode_dirty error
[  193.518691][ T7309] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem
[  193.721566][ T7167] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  193.801736][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.872893][ T7167] usb 4-1: Using ep0 maxpacket: 16
[  193.875779][ T7167] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  193.875803][ T7167] usb 4-1: config 0 has no interface number 0
[  193.875843][ T7167] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  193.875867][ T7167] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  193.886581][ T7167] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  193.886606][ T7167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.886624][ T7167] usb 4-1: Product: syz
[  193.886637][ T7167] usb 4-1: Manufacturer: syz
[  193.886650][ T7167] usb 4-1: SerialNumber: syz
[  193.991600][ T7167] usb 4-1: config 0 descriptor??
[  193.995216][ T7314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  193.995335][ T7314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  194.005238][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  194.005481][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  194.215066][ T7314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  194.215183][ T7314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  194.422935][ T7167] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  194.708125][ T7341] mmap: syz.0.424 (7341) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  195.849205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  195.859204][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  195.869203][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  195.879213][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  195.889205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  195.899214][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  195.909211][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  195.919210][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  197.825238][ T7364] binder: 7362:7364 unknown command 0
[  197.825310][ T7364] binder: 7362:7364 ioctl c0306201 200000000080 returned -22
[  197.886647][ T7167] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  197.886673][ T7167] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  197.886913][ T7167] asix 4-1:0.34: probe with driver asix failed with error -71
[  197.951230][ T7167] usb 4-1: USB disconnect, device number 5
[  198.649861][ T7167] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  198.804203][ T7167] usb 3-1: Using ep0 maxpacket: 32
[  198.812952][ T7167] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  198.812968][ T7167] usb 3-1: config 0 has no interface number 0
[  198.865581][ T7167] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  198.865605][ T7167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.865623][ T7167] usb 3-1: Product: syz
[  198.865636][ T7167] usb 3-1: Manufacturer: syz
[  198.865649][ T7167] usb 3-1: SerialNumber: syz
[  198.920596][ T7167] usb 3-1: config 0 descriptor??
[  200.177549][ T7390] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  200.201458][ T7167] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  200.201482][ T7167] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  201.882834][ T7167] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  201.883099][ T7167] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  201.944281][ T7167] usb 3-1: USB disconnect, device number 3
[  206.553667][ T7452] Bluetooth: hci4: command 0x0406 tx timeout
[  206.553699][ T7452] Bluetooth: hci1: command 0x0406 tx timeout
[  206.553719][ T7452] Bluetooth: hci3: command 0x0406 tx timeout
[  206.773006][ T7490] Bluetooth: hci2: command 0x0406 tx timeout
[  206.784017][ T5847] Bluetooth: hci0: command 0x0406 tx timeout
[  211.313848][ T7529] binder: BINDER_SET_CONTEXT_MGR already set
[  211.313862][ T7529] binder: 7525:7529 ioctl 4018620d 200000004a80 returned -16
[  211.596690][ T7531] netlink: 'syz.4.487': attribute type 4 has an invalid length.
[  211.596702][ T7531] netlink: 17 bytes leftover after parsing attributes in process `syz.4.487'.
[  212.008088][ T7546] loop2: detected capacity change from 0 to 8
[  212.090342][ T7546] cramfs: empty filesystem
[  212.101411][ T5838] udevd[5838]: incorrect cramfs checksum on /dev/loop2
[  212.266447][ T6094] udevd[6094]: incorrect cramfs checksum on /dev/loop2
[  212.706619][ T7564] fuse: fd is not a fuse device
[  218.380316][ T7619] nvme_fabrics: missing parameter 'transport=%s'
[  218.380332][ T7619] nvme_fabrics: missing parameter 'nqn=%s'
[  221.680809][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.727883][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.736988][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.738497][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.740439][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  223.668998][ T7670] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  223.801819][ T7646] chnl_net:caif_netlink_parms(): no params data found
[  225.018684][ T5846] Bluetooth: hci1: command tx timeout
[  225.064701][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.064914][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.065335][ T7646] bridge_slave_0: entered allmulticast mode
[  225.073637][ T7646] bridge_slave_0: entered promiscuous mode
[  225.081307][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.081657][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.081889][ T7646] bridge_slave_1: entered allmulticast mode
[  225.154321][ T7646] bridge_slave_1: entered promiscuous mode
[  225.293146][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.298954][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.428118][ T7646] team0: Port device team_slave_0 added
[  226.387417][ T7646] team0: Port device team_slave_1 added
[  227.764293][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'.
[  227.796592][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.796605][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.796629][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.800691][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.800704][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.800727][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.801961][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'.
[  228.430106][ T5846] Bluetooth: hci1: command tx timeout
[  228.988701][ T7718] netlink: 'syz.1.538': attribute type 21 has an invalid length.
[  229.204308][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'.
[  229.240113][ T7718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.538'.
[  230.839297][ T5846] Bluetooth: hci1: command tx timeout
[  230.922027][ T7646] hsr_slave_0: entered promiscuous mode
[  230.923977][ T7646] hsr_slave_1: entered promiscuous mode
[  230.925553][ T7646] debugfs: 'hsr0' already exists in 'hsr'
[  230.925575][ T7646] Cannot create hsr debugfs directory
[  231.439101][ T7744] loop4: detected capacity change from 0 to 1024
[  231.504031][ T7744] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  231.504059][ T7744] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  231.504152][ T7744] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  231.506535][ T7744] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #5: comm syz.4.546: unexpected bad inode w/o EXT4_IGET_BAD
[  231.506562][ T7744] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  231.506865][ T7744] EXT4-fs (loop4): no journal found
[  231.506879][ T7744] EXT4-fs (loop4): can't get journal size
[  231.509348][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  231.509364][    C0] EXT4-fs (loop4): initial error at time 1776402764: ext4_get_journal_inode:5896: inode 5
[  231.509391][    C0] EXT4-fs (loop4): last error at time 1776402764: ext4_get_journal_inode:5896: inode 5
[  231.683154][ T7744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  231.944835][ T7755] 8021q: VLANs not supported on ip6tnl0
[  231.945748][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.932111][ T5844] Bluetooth: hci1: command tx timeout
[  233.498608][ T7763] input: syz1 as /devices/virtual/input/input7
[  233.804341][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'.
[  234.232817][ T7646] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  234.347616][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  234.348404][ T7646] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  235.534650][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  235.535835][ T7646] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  235.626888][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  235.627811][ T7646] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  235.714874][ T7646] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  238.071674][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.174197][ T7646] 8021q: adding VLAN 0 to HW filter on device team0
[  238.285261][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.306790][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.349036][ T1527] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.363003][ T1527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.814965][ T7825] netlink: 'syz.1.570': attribute type 1 has an invalid length.
[  241.386718][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.735281][ T7646] veth0_vlan: entered promiscuous mode
[  246.896944][ T7646] veth1_vlan: entered promiscuous mode
[  247.250333][ T7646] veth0_macvtap: entered promiscuous mode
[  247.259008][ T7646] veth1_macvtap: entered promiscuous mode
[  247.747824][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.695705][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.750290][ T4517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.752603][ T4517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.755270][ T4517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.755310][ T4517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.868029][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.868050][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.207152][ T7941] 
: renamed from bond_slave_0 (while UP)
[  251.314718][ T7942] team_slave_0: entered promiscuous mode
[  251.314786][ T7942] team_slave_1: entered promiscuous mode
[  251.319607][ T7942] macvlan2: entered allmulticast mode
[  251.319623][ T7942] team0: entered allmulticast mode
[  251.319635][ T7942] team_slave_0: entered allmulticast mode
[  251.319651][ T7942] team_slave_1: entered allmulticast mode
[  251.358165][ T7942] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  251.383955][ T7942] team0: left allmulticast mode
[  251.383966][ T7942] team_slave_0: left allmulticast mode
[  251.383978][ T7942] team_slave_1: left allmulticast mode
[  251.384082][ T7942] team_slave_0: left promiscuous mode
[  251.384121][ T7942] team_slave_1: left promiscuous mode
[  251.737281][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.741770][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.723941][ T7974] 
: renamed from bond0 (while UP)
[  253.777723][ T7978] loop5: detected capacity change from 0 to 256
[  254.271313][ T7991] netlink: 56 bytes leftover after parsing attributes in process `syz.0.615'.
[  255.590810][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  255.590969][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  257.545215][ T8017] loop4: detected capacity change from 0 to 128
[  257.587706][ T8017] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.671013][ T8017] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  258.215508][ T8032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.784680][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.5.632'.
[  259.942845][ T8054] netlink: 188 bytes leftover after parsing attributes in process `syz.4.635'.
[  260.365232][ T8068] fuse: fd is not a fuse device
[  265.905542][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'.
[  265.929638][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'.
[  265.929668][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'.
[  266.305096][ T8129] loop5: detected capacity change from 0 to 1024
[  266.310311][ T8129] hfsplus: Unknown parameter 'id'
[  277.062064][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'.
[  277.347686][ T8198] fuse: Bad value for 'fd'
[  277.348401][ T8192] vlan2: entered allmulticast mode
[  277.348417][ T8192] bridge1: entered allmulticast mode
[  277.351178][ T8195] bridge1: port 1(erspan0) entered blocking state
[  277.353712][ T8195] bridge1: port 1(erspan0) entered disabled state
[  277.376659][ T8195] erspan0: entered allmulticast mode
[  277.404774][ T8195] erspan0: entered promiscuous mode
[  277.474562][ T8195] bridge1: port 1(erspan0) entered blocking state
[  277.474709][ T8195] bridge1: port 1(erspan0) entered forwarding state
[  283.640124][ T8288] fuse: Bad value for 'fd'
[  283.644732][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'.
[  283.644769][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'.
[  283.645146][ T8288] 8021q: VLANs not supported on gre0
[  284.878984][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'.
[  287.409483][ T8308] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'.
[  287.410041][ T8308] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'.
[  287.495617][ T8306] fuse: fd is not a fuse device
[  288.225544][ T8311] overlayfs: failed to resolve './file0': -2
[  291.050469][   T38] audit: type=1326 audit(1776402824.178:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.052314][   T38] audit: type=1326 audit(1776402824.178:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.054808][   T38] audit: type=1326 audit(1776402824.178:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.055359][   T38] audit: type=1326 audit(1776402824.178:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.055673][   T38] audit: type=1326 audit(1776402824.178:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.056179][   T38] audit: type=1326 audit(1776402824.178:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.057786][   T38] audit: type=1326 audit(1776402824.178:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.058064][   T38] audit: type=1326 audit(1776402824.178:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.058367][   T38] audit: type=1326 audit(1776402824.178:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  291.058795][   T38] audit: type=1326 audit(1776402824.178:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.3.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9522eec819 code=0x7ffc0000
[  294.167407][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.725'.
[  297.391082][   T38] kauditd_printk_skb: 29 callbacks suppressed
[  297.391100][   T38] audit: type=1107 audit(1776402830.188:48): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  301.122486][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  301.206772][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  303.665210][ T8430] fuse: fd is not a fuse device
[  303.868946][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'.
[  305.335627][ T5841] libceph: connect (1)[c::]:6789 error -101
[  305.336444][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[  305.378602][ T5841] libceph: connect (1)[c::]:6789 error -101
[  305.378773][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[  305.443997][ T8444] ceph: No mds server is up or the cluster is laggy
[  305.633275][ T5841] libceph: connect (1)[c::]:6789 error -101
[  305.633441][ T5841] libceph: mon0 (1)[c::]:6789 connect error
[  313.879349][ T8476] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  315.595304][   T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.357734][ T8530] fuse: fd is not a fuse device
[  317.187809][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  317.187908][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  317.457611][   T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.963330][ T8545] loop5: detected capacity change from 0 to 32768
[  318.027042][ T8545] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  318.146801][ T8545] XFS (loop5): Ending clean mount
[  318.180717][ T8545] XFS (loop5): Quotacheck needed: Please wait.
[  319.321216][   T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.464763][ T8545] XFS (loop5): Quotacheck: Done.
[  319.717367][ T8578] fuse: fd is not a fuse device
[  320.854765][ T7646] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  323.762438][   T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.128057][ T8638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.811'.
[  331.322728][ T8636] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size.
[  338.247294][   T58] bridge_slave_1: left allmulticast mode
[  338.247444][   T58] bridge_slave_1: left promiscuous mode
[  338.347921][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.882409][   T58] bridge_slave_0: left allmulticast mode
[  339.882435][   T58] bridge_slave_0: left promiscuous mode
[  339.882674][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.227133][ T8730] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  342.214309][ T8734] loop5: detected capacity change from 0 to 256
[  342.215010][ T8734] exfat: Unknown parameter 'iocha85k'
[  342.788127][   T38] audit: type=1107 audit(1776402875.908:49): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  342.914450][ T8736] loop5: detected capacity change from 0 to 512
[  342.960461][ T8736] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.832: missing EA_INODE flag
[  342.960488][ T8736] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  342.969153][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  342.969171][    C1] EXT4-fs (loop5): initial error at time 1776402876: ext4_xattr_inode_iget:441: inode 12
[  342.969197][    C1] EXT4-fs (loop5): last error at time 1776402876: ext4_xattr_inode_iget:441: inode 12
[  343.015612][ T8736] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.832: error while reading EA inode 12 err=-117
[  343.015638][ T8736] loop5: lost filesystem error report for type 5 error -117
[  343.016693][ T8736] EXT4-fs (loop5): 1 orphan inode deleted
[  343.050887][ T8736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.451944][ T7646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.299974][   T58] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  347.136458][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  347.191848][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  347.193118][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  347.194092][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  347.196117][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  347.310915][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.425110][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.495232][   T58] bond0 (unregistering): Released all slaves
[  348.551412][ T5844] Bluetooth: hci0: unexpected cc 0x0402 length: 61 > 1
[  348.551440][ T5844] Bluetooth: hci0: unexpected event for opcode 0x0402
[  348.930232][   T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  349.466483][   T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  349.493792][   T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  349.644212][   T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  349.645998][   T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  349.881179][   T58] bond1 (unregistering): Released all slaves
[  350.089692][ T5831] Bluetooth: hci5: command tx timeout
[  350.194894][ T8709] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  350.689906][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  351.076238][ T8776] netlink: 'syz.3.842': attribute type 1 has an invalid length.
[  351.342766][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1
[  351.537226][ T8776] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.756495][ T5846] Bluetooth: hci6: command tx timeout
[  351.835857][ T8779] bond1: (slave veth3): Enslaving as an active interface with a down link
[  351.906251][ T8780] vlan2: entered allmulticast mode
[  351.906262][ T8780] veth0_to_bond: entered allmulticast mode
[  351.907261][ T8780] veth0_to_bond: entered promiscuous mode
[  351.908291][ T8780] veth0_to_bond: left promiscuous mode
[  351.918515][ T8780] bond1: (slave vlan2): making interface the new active one
[  351.980191][ T8780] veth0_to_bond: entered promiscuous mode
[  351.982291][ T8780] vlan2: entered promiscuous mode
[  351.987525][ T8780] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  352.153383][ T5846] Bluetooth: hci5: command tx timeout
[  354.491025][ T8799] loop5: detected capacity change from 0 to 131072
[  354.570230][ T8799] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  354.570253][ T8799] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  354.765616][ T5846] Bluetooth: hci6: command tx timeout
[  354.765643][ T5846] Bluetooth: hci5: command tx timeout
[  354.880351][ T8799] F2FS-fs (loop5): invalid crc value
[  355.307829][ T8799] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  355.340489][ T8799] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  355.341874][ T8799] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  356.884377][ T5846] Bluetooth: hci6: command tx timeout
[  356.884449][ T5831] Bluetooth: hci5: command tx timeout
[  359.092100][ T5831] Bluetooth: hci6: command tx timeout
[  367.477937][   T38] audit: type=1800 audit(1776402900.598:50): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.864" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  368.106106][   T58] hsr_slave_0: left promiscuous mode
[  368.142944][   T58] hsr_slave_1: left promiscuous mode
[  368.202291][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.202398][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.250142][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.250164][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.273655][   T58] veth1_macvtap: left promiscuous mode
[  371.273953][   T58] veth0_macvtap: left promiscuous mode
[  371.274259][   T58] veth1_vlan: left promiscuous mode
[  371.274624][   T58] veth0_vlan: left promiscuous mode
[  374.961823][   T58] team0 (unregistering): Port device team_slave_1 removed
[  375.023918][   T58] team0 (unregistering): Port device team_slave_0 removed
[  375.393902][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2
[  377.596158][ T8911] netlink: 96 bytes leftover after parsing attributes in process `syz.0.873'.
[  378.829575][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  378.829667][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  379.332890][ T8929] syz.0.875 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  381.895341][ T8942] netlink: 156 bytes leftover after parsing attributes in process `syz.3.880'.
[  385.321455][ T8948] IPv6: NLM_F_CREATE should be specified when creating new route
[  386.431902][   T46] vlan2: left promiscuous mode
[  386.657503][ T8754] chnl_net:caif_netlink_parms(): no params data found
[  386.719529][ T8761] chnl_net:caif_netlink_parms(): no params data found
[  387.927740][ T1498] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  389.991059][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3
[  391.435988][ T9000] warning: `syz.0.890' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  391.523697][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[  394.860230][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.864395][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.864651][ T8754] bridge_slave_0: entered allmulticast mode
[  395.125107][ T8754] bridge_slave_0: entered promiscuous mode
[  395.158434][ T5831] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  395.169870][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.170136][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.170384][ T8761] bridge_slave_0: entered allmulticast mode
[  395.223787][ T8761] bridge_slave_0: entered promiscuous mode
[  395.239023][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.240828][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.241255][ T8754] bridge_slave_1: entered allmulticast mode
[  395.284659][ T8754] bridge_slave_1: entered promiscuous mode
[  395.295583][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.295821][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.296026][ T8761] bridge_slave_1: entered allmulticast mode
[  395.337394][ T8761] bridge_slave_1: entered promiscuous mode
[  396.692352][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.720286][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.733694][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.751192][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.859545][ T8761] team0: Port device team_slave_0 added
[  396.864479][ T8754] team0: Port device team_slave_0 added
[  396.882348][ T8761] team0: Port device team_slave_1 added
[  396.892858][ T8754] team0: Port device team_slave_1 added
[  397.635938][ T9054] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[  398.306678][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.306693][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.306717][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.099263][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.099279][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.099303][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.102325][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.102338][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.102363][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.104988][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.105007][ T9082] batadv0: mtu less than device minimum
[  401.286105][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.319110][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.348358][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.378222][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.403438][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.422020][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.430528][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.457736][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.484571][ T9082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  401.583161][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.623570][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.811394][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.853834][ T9082] batman_adv: batadv0: Interface deactivated: dummy0
[  401.853855][ T9082] batman_adv: batadv0: Removing interface: dummy0
[  402.032699][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.032712][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.032736][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.090832][ T9095] Bluetooth: MGMT ver 1.23
[  402.131860][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4
[  406.957446][ T9120] loop5: detected capacity change from 0 to 16
[  407.001002][ T9120] erofs (device loop5): mounted with root inode @ nid 36.
[  409.376629][ T9125] erofs (device loop5): readahead error at folio 2 @ nid 89
[  409.376648][ T9125] erofs (device loop5): inconsistent algorithmtype 2 for nid 89
[  409.376659][ T9125] erofs (device loop5): readahead error at folio 1 @ nid 89
[  409.376669][ T9125] erofs (device loop5): inconsistent algorithmtype 2 for nid 89
[  409.376679][ T9125] erofs (device loop5): readahead error at folio 0 @ nid 89
[  409.376706][ T9125] erofs (device loop5): inconsistent algorithmtype 2 for nid 89
[  409.376717][ T9125] erofs (device loop5): read error -117 @ 0 of nid 89
[  409.380725][   T38] audit: type=1800 audit(1776402942.498:51): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.915" name="file3" dev="loop5" ino=89 res=0 errno=0
[  409.554673][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  409.577281][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  409.787465][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  409.797522][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  409.798357][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  409.968567][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'.
[  410.937132][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  411.161974][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  411.190170][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  411.191505][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  411.193363][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  411.909972][ T5846] Bluetooth: hci2: command tx timeout
[  413.774135][ T5846] Bluetooth: hci4: command tx timeout
[  413.989765][ T5831] Bluetooth: hci2: command tx timeout
[  415.636331][ T9174] syz.5.923 (9174) used greatest stack depth: 18328 bytes left
[  415.962285][ T9178] loop5: detected capacity change from 0 to 32768
[  415.967021][ T5831] Bluetooth: hci4: command tx timeout
[  416.000862][ T9178] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.924 (9178)
[  416.046350][ T9178] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  416.046376][ T9178] BTRFS info (device loop5): using sha256 checksum algorithm
[  416.070173][ T5831] Bluetooth: hci2: command tx timeout
[  416.219427][ T9178] BTRFS info (device loop5): enabling ssd optimizations
[  416.219442][ T9178] BTRFS info (device loop5): turning on async discard
[  416.219452][ T9178] BTRFS info (device loop5): enabling free space tree
[  417.989714][ T5831] Bluetooth: hci4: command tx timeout
[  418.165284][ T5831] Bluetooth: hci2: command tx timeout
[  419.548534][ T7646] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  420.181061][ T5831] Bluetooth: hci4: command tx timeout
[  424.053583][ T9237] loop5: detected capacity change from 0 to 512
[  424.753407][ T9237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  424.753535][ T9237] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  427.026542][ T7646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  428.240762][ T9149] chnl_net:caif_netlink_parms(): no params data found
[  428.876780][ T5831] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  429.899850][ T9136] chnl_net:caif_netlink_parms(): no params data found
[  439.758603][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  439.758698][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  443.906701][ T9351] IPVS: Unknown mcast interface: batadv0
[  443.981102][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.981316][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.981591][ T9149] bridge_slave_0: entered allmulticast mode
[  444.006418][ T9149] bridge_slave_0: entered promiscuous mode
[  444.114757][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.114945][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.115118][ T9149] bridge_slave_1: entered allmulticast mode
[  444.117543][ T9149] bridge_slave_1: entered promiscuous mode
[  444.338890][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.339750][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.828279][ T9372] input: syz1 as /devices/virtual/input/input8
[  446.043122][ T9136] bridge_slave_0: entered allmulticast mode
[  446.047831][ T9136] bridge_slave_0: entered promiscuous mode
[  446.254189][ T9376] netlink: 'syz.3.956': attribute type 4 has an invalid length.
[  446.281255][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.281521][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.281769][ T9136] bridge_slave_1: entered allmulticast mode
[  446.325399][ T9136] bridge_slave_1: entered promiscuous mode
[  447.651783][ T9399] futex_wake_op: syz.5.959 tries to shift op by 144; fix this program
[  449.687095][ T9149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.710244][ T9149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.737866][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.954653][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.263492][ T9149] team0: Port device team_slave_0 added
[  458.264528][ T9149] team0: Port device team_slave_1 added
[  458.288810][ T9136] team0: Port device team_slave_0 added
[  460.431759][ T9136] team0: Port device team_slave_1 added
[  462.404492][ T9497] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  462.404531][ T9497] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  462.404559][ T9497] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  462.472137][   T38] audit: type=1800 audit(1776402995.528:52): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.978" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  462.556013][ T9497] syz.5.978 (9497) used greatest stack depth: 17144 bytes left
[  462.675132][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.675145][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.675170][ T9149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.838498][ T9149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.838513][ T9149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.838541][ T9149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.034141][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.034153][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.034177][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.973827][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.973841][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.973865][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.222463][ T9149] hsr_slave_0: entered promiscuous mode
[  466.235496][ T9149] hsr_slave_1: entered promiscuous mode
[  466.245569][ T9149] debugfs: 'hsr0' already exists in 'hsr'
[  466.245591][ T9149] Cannot create hsr debugfs directory
[  466.580869][ T9136] hsr_slave_0: entered promiscuous mode
[  466.582238][ T9136] hsr_slave_1: entered promiscuous mode
[  466.583333][ T9136] debugfs: 'hsr0' already exists in 'hsr'
[  466.583356][ T9136] Cannot create hsr debugfs directory
[  468.927302][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  469.032493][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  469.048979][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  469.116080][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  469.137889][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  471.278786][ T5831] Bluetooth: hci5: command tx timeout
[  472.066846][ T9556] loop5: detected capacity change from 0 to 1024
[  472.116018][   T58] bridge_slave_1: left allmulticast mode
[  472.116041][   T58] bridge_slave_1: left promiscuous mode
[  472.116363][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.942661][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  473.008036][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  473.016357][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  473.044487][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  473.080007][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  473.304023][   T58] bridge_slave_0: left allmulticast mode
[  473.304046][   T58] bridge_slave_0: left promiscuous mode
[  473.311549][ T9556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.347311][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.349146][ T5846] Bluetooth: hci5: command tx timeout
[  473.368015][ T9565] "syz.0.994" (9565) uses obsolete ecb(arc4) skcipher
[  473.436300][   T58] pimreg3: left allmulticast mode
[  473.539382][   T58] bridge_slave_1: left allmulticast mode
[  473.539404][   T58] bridge_slave_1: left promiscuous mode
[  473.540130][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.486925][   T58] bridge_slave_0: left allmulticast mode
[  474.486943][   T58] bridge_slave_0: left promiscuous mode
[  474.487291][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.429465][ [  475.429465][ T5831] Bluetooth: hci5: command tx timeout
[  475.631067][ T5831] Bluetooth: hci6: command tx timeout
[  475.632041][ T1453] ------------[ cut here ]------------
[  475.632049][ T1453] time_after(jiffies, timeout)
[  475.632062][ T1453] WARNING: io_uring/io_uring.c:2352 at io_ring_exit_work+0x4b9/0x970, CPU#1: kworker/u8:11/1453
[  475.632101][ T1453] Modules linked in:
[  475.632131][ T1453] CPU: 1 UID: 0 PID: 1453 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  475.632154][ T1453] Tainted: [L]=SOFTLOCKUP
[  475.632160][ T1453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  475.632170][ T1453] Workqueue: iou_exit io_ring_exit_work
[  475.632194][ T1453] RIP: 0010:io_ring_exit_work+0x4b9/0x970
[  475.632214][ T1453] Code: c6 05 f9 63 4c 0e 01 48 c7 c7 60 f1 a6 8b be 25 00 00 00 48 c7 c2 80 ec a6 8b e8 82 f1 75 00 e9 7e fe ff ff e8 78 de 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00
[  475.632228][ T1453] RSP: 0000:ffffc90006baf9a0 EFLAGS: 00010293
[  475.632253][ T1453] RAX: ffffffff812abfc8 RBX: 0000000100004404 RCX: ffff88802a933d80
[  475.632266][ T1453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  475.632276][ T1453] RBP: ffffc90006bafb30 R08: 0000000000000000 R09: 0000000000000000
[  475.632287][ T1453] R10: dffffc0000000000 R11: fffffbfff1f1a6ff R12: dffffc0000000000
[  475.632299][ T1453] R13: 0000000100004401 R14: 0000000000002000 R15: ffff888034736000
[  475.632310][ T1453] FS:  0000000000000000(0000) GS:ffff888125fba000(0000) knlGS:0000000000000000
[  475.632324][ T1453] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  475.632335][ T1453] CR2: 0000001b31405ff8 CR3: 0000000032a8a000 CR4: 00000000003526f0
[  475.632349][ T1453] Call Trace:
[  475.632359][ T1453]  <TASK>
[  475.632378][ T1453]  ? __pfx_io_ring_exit_work+0x10/0x10
[  475.632431][ T1453]  ? process_one_work+0x8b7/0x1710
[  475.632448][ T1453]  process_one_work+0x9a3/0x1710
[  475.632483][ T1453]  ? __pfx_process_one_work+0x10/0x10
[  475.632503][ T1453]  ? do_raw_spin_lock+0x12b/0x2f0
[  475.632535][ T1453]  worker_thread+0xba8/0x11e0
[  475.632574][ T1453]  kthread+0x388/0x470
[  475.632595][ T1453]  ? __pfx_worker_thread+0x10/0x10
[  475.632611][ T1453]  ? __pfx_kthread+0x10/0x10
[  475.632633][ T1453]  ret_from_fork+0x514/0xb70
[  475.632653][ T1453]  ? __pfx_ret_from_fork+0x10/0x10
[  475.632671][ T1453]  ? __switch_to+0xc79/0x1410
[  475.632698][ T1453]  ? __pfx_kthread+0x10/0x10
[  475.632720][ T1453]  ret_from_fork_asm+0x1a/0x30
[  475.632754][ T1453]  </TASK>
[  475.632772][ T1453] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  475.632790][ T1453] CPU: 1 UID: 0 PID: 1453 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  475.632813][ T1453] Tainted: [L]=SOFTLOCKUP
[  475.632819][ T1453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  475.632829][ T1453] Workqueue: iou_exit io_ring_exit_work
[  475.632849][ T1453] Call Trace:
[  475.632855][ T1453]  <TASK>
[  475.632862][ T1453]  vpanic+0x56c/0xa60
[  475.632881][ T1453]  ? __pfx__printk+0x10/0x10
[  475.632903][ T1453]  ? __pfx_vpanic+0x10/0x10
[  475.632920][ T1453]  ? is_bpf_text_address+0x292/0x2b0
[  475.632942][ T1453]  ? is_bpf_text_address+0x26/0x2b0
[  475.632970][ T1453]  panic+0xc5/0xd0
[  475.632988][ T1453]  ? __pfx_panic+0x10/0x10
[  475.633017][ T1453]  ? ret_from_fork_asm+0x1a/0x30
[  475.633041][ T1453]  __warn+0x315/0x4c0
[  475.633058][ T1453]  ? io_ring_exit_work+0x4b9/0x970
[  475.633078][ T1453]  ? io_ring_exit_work+0x4b9/0x970
[  475.633098][ T1453]  __report_bug+0x29a/0x540
[  475.633120][ T1453]  ? io_ring_exit_work+0x4b9/0x970
[  475.633139][ T1453]  ? __pfx___report_bug+0x10/0x10
[  475.633161][ T1453]  ? do_raw_spin_lock+0x12b/0x2f0
[  475.633185][ T1453]  ? io_ring_exit_work+0x4b9/0x970
[  475.633204][ T1453]  report_bug+0x16a/0x220
[  475.633220][ T1453]  ? io_ring_exit_work+0x4b9/0x970
[  475.633237][ T1453]  ? io_ring_exit_work+0x4bb/0x970
[  475.633256][ T1453]  handle_bug+0x9c/0x200
[  475.633276][ T1453]  exc_invalid_op+0x1a/0x50
[  475.633296][ T1453]  asm_exc_invalid_op+0x1a/0x20
[  475.633312][ T1453] RIP: 0010:io_ring_exit_work+0x4b9/0x970
[  475.633331][ T1453] Code: c6 05 f9 63 4c 0e 01 48 c7 c7 60 f1 a6 8b be 25 00 00 00 48 c7 c2 80 ec a6 8b e8 82 f1 75 00 e9 7e fe ff ff e8 78 de 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00
[  475.633345][ T1453] RSP: 0000:ffffc90006baf9a0 EFLAGS: 00010293
[  475.633359][ T1453] RAX: ffffffff812abfc8 RBX: 0000000100004404 RCX: ffff88802a933d80
[  475.633372][ T1453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  475.633381][ T1453] RBP: ffffc90006bafb30 R08: 0000000000000000 R09: 0000000000000000
[  475.633392][ T1453] R10: dffffc0000000000 R11: fffffbfff1f1a6ff R12: dffffc0000000000
[  475.633404][ T1453] R13: 0000000100004401 R14: 0000000000002000 R15: ffff888034736000
[  475.633421][ T1453]  ? io_ring_exit_work+0x4b8/0x970
[  475.633456][ T1453]  ? __pfx_io_ring_exit_work+0x10/0x10
[  475.633493][ T1453]  ? process_one_work+0x8b7/0x1710
[  475.633514][ T1453]  process_one_work+0x9a3/0x1710
[  475.633548][ T1453]  ? __pfx_process_one_work+0x10/0x10
[  475.633563][ T1453]  ? do_raw_spin_lock+0x12b/0x2f0
[  475.633595][ T1453]  worker_thread+0xba8/0x11e0
[  475.633633][ T1453]  kthread+0x388/0x470
[  475.633655][ T1453]  ? __pfx_worker_thread+0x10/0x10
[  475.633672][ T1453]  ? __pfx_kthread+0x10/0x10
[  475.633694][ T1453]  ret_from_fork+0x514/0xb70
[  475.633714][ T1453]  ? __pfx_ret_from_fork+0x10/0x10
[  475.633732][ T1453]  ? __switch_to+0xc79/0x1410
[  475.633758][ T1453]  ? __pfx_kthread+0x10/0x10
[  475.633780][ T1453]  ret_from_fork_asm+0x1a/0x30
[  475.633813][ T1453]  </TASK>
[  475.634453][ T1453] Kernel Offset: disabled