last executing test programs:

12m12.359484152s ago: executing program 0 (id=11):
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b5b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x6, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12m12.136849401s ago: executing program 0 (id=13):
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10)
write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000000c0)={0x14}, 0x14)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

12m11.779177313s ago: executing program 0 (id=18):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7})
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12m11.540718434s ago: executing program 0 (id=20):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,nocheckpoint_merge,nodiscard,fsync_mode=posix,background_gc=sync,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=000000000003444,\x00\x00\x00\x00\x00\x00'], 0x1, 0x5514, &(0x7f0000005880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x201488, 0x0, 0x7, 0x0, &(0x7f0000006380))
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

12m9.361018136s ago: executing program 0 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0xfffffffffffffffe, 0x5, 0x7, 0x3, 0x1, {0x2000400000080001, 0xfd, 0x20ff, 0xdd6, 0xe, 0xd615, 0x9, 0xffff, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)

12m7.84339213s ago: executing program 0 (id=38):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0xc0a742c700a80d57, 0x301}}, 0x20}, 0x1, 0x0, 0x0, 0x8d0}, 0x800)

12m7.231393645s ago: executing program 32 (id=38):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0xc0a742c700a80d57, 0x301}}, 0x20}, 0x1, 0x0, 0x0, 0x8d0}, 0x800)

11m1.928702344s ago: executing program 1 (id=345):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0x0)

11m0.811422783s ago: executing program 1 (id=346):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000040)=[@code={0x1, 0x6f, {"66470f64dfc4a3255f1d040000000266baf80cb8ecdcf388ef66bafc0cb86b420000ef0fc76cf3b30f01f8c4619e5a72f8b9800000c00f3235010000000f30420f01c448b85a000000000000000f23c00f21f835020007000f23f843cd05"}}], 0x6f})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x5, 0x0, 0x7ff, 0x10000, 0xbdb], 0x1, 0x3c4210})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x50003, 0x0, {[0x0, 0x100000000, 0x59, 0x2f, 0x7fffffffffffffff, 0x2, 0x2, 0x80000001]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000000, 0x6, 0xd7, 0x1, 0x1, 0xb, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0x1, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c4646})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m0.271164031s ago: executing program 1 (id=347):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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")

10m57.953694385s ago: executing program 1 (id=348):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x200, 0x0, 0x0, 0x2, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204]})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

10m56.678829598s ago: executing program 1 (id=352):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

10m54.223420345s ago: executing program 1 (id=362):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

10m53.901635164s ago: executing program 33 (id=362):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

10m51.593202808s ago: executing program 2 (id=376):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
unshare(0x2c020400)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040))

10m49.464559235s ago: executing program 2 (id=384):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
shutdown(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

10m49.124508535s ago: executing program 2 (id=386):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, &(0x7f0000000040)=0xbc)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)

10m48.884834277s ago: executing program 2 (id=389):
r0 = socket(0x10, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
creat(&(0x7f0000002640)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

10m47.749820377s ago: executing program 2 (id=396):
r0 = fanotify_init(0x0, 0x0)
dup(r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240000c1)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x28002f4})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

10m47.155351659s ago: executing program 2 (id=401):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
fchdir(r1)
r2 = fanotify_init(0x40, 0x80000)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r3, 0x0, 0x0)

10m46.816508679s ago: executing program 34 (id=401):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
fchdir(r1)
r2 = fanotify_init(0x40, 0x80000)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r3, 0x0, 0x0)

10m36.654829667s ago: executing program 4 (id=428):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}}, 0x20}}, 0x0)

10m35.567526603s ago: executing program 4 (id=431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

10m34.753627995s ago: executing program 4 (id=434):
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@umask={'umask', 0x3d, 0x8}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x1ff}}, {@umask={'umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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")
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0)
socket(0x10, 0x3, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
pwrite64(r1, &(0x7f0000000040)="ab", 0x1, 0x2)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

10m33.084761953s ago: executing program 4 (id=437):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

10m32.565552839s ago: executing program 4 (id=438):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}}], 0x1, 0x880)
pipe2$9p(&(0x7f0000000180), 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)

10m31.431440859s ago: executing program 4 (id=440):
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

10m30.572140074s ago: executing program 35 (id=440):
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

17.663453188s ago: executing program 3 (id=2353):
r0 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a"], 0x33fe0}}, 0x0)

14.524400834s ago: executing program 6 (id=2361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20)

14.410906644s ago: executing program 7 (id=2362):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0)
sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0)
recvmsg(r1, 0x0, 0x141)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)=ANY=[@ANYBLOB="6142dd6e6963622c756e686964652c616e63686f723d3030303030303030303030303030303033a8f9ff2e6038eec51c39980255d78ebf3737372c6c617374626c6f636b3d30303030303030303030303030303030303030322c6769643d69676e6f72652c756e64656c6574652c766f6c756d653d2a303030303030303030303030303030303030372cfb416535a0d62e3865742c6c617374626c6f636b3d3030f835edeaae9ef096d55c2ef9855d3030323030303030303030303030303030322c00"], 0xde, 0xc2e, &(0x7f0000000f40)="$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")

14.198249533s ago: executing program 5 (id=2363):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x10000, 0x3, 0x0, 0x1, 0x0, 0x1, {0x3}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

14.196917943s ago: executing program 3 (id=2364):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, 0x0, 0x0)
listen(r3, 0x5)
close_range(r3, 0xffffffffffffffff, 0x0)

13.420668401s ago: executing program 6 (id=2365):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40c1})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)

12.339350946s ago: executing program 6 (id=2366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
r4 = syz_pidfd_open(r3, 0x0)
process_mrelease(r4, 0x700000000000000)

12.338207256s ago: executing program 5 (id=2367):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48)
r2 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x3, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
wait4(r2, 0x0, 0x8, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

12.252073164s ago: executing program 7 (id=2368):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mknod$loop(0x0, 0x6000, 0x0)
creat(0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0xffffff51}, 0x1, 0x0, 0x0, 0x2000c014}, 0x80)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080)
sendto$packet(r1, &(0x7f0000000280)="3562547ac6b644a1775d0e6cbf8eeccaa8afd8b5be55606900bc4d904906da590cd409", 0x23, 0x4c800, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @local}, 0x14)

10.191357835s ago: executing program 6 (id=2369):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0x0, 0x208, 0xffffffff, 0x2f8, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)

10.010765201s ago: executing program 3 (id=2370):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@mangle={'mangle\x00', 0x8, 0x6, 0x960, 0x770, 0x268, 0xf8, 0xf8, 0x470, 0x890, 0x890, 0x890, 0x890, 0x890, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9c0)

9.757567643s ago: executing program 7 (id=2371):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000d40)={0xe5a44100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58)

8.88419557s ago: executing program 5 (id=2372):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000240)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x3}})
io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0)

6.655968926s ago: executing program 6 (id=2373):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
clock_adjtime(0x0, &(0x7f0000000000)={0x66b6, 0x4100000000000000, 0x0, 0x7, 0x100000000, 0xfffffffffffffffd, 0x80000000077, 0x0, 0x0, 0x0, 0x83, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000000, 0x6, 0x5, 0x2000000, 0xf439})
sched_setscheduler(0x0, 0x2, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

6.655028766s ago: executing program 3 (id=2374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1200000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1)
unshare(0x20000400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, 0x0, 0x0, 0x4}, 0x20)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'gretap0\x00', 0x0})
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'rr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

5.575377591s ago: executing program 5 (id=2375):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@data_err_abort}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==")
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x0, 0x2, 0x6, 0xfefa}, 0x203d, [0x8000, 0x1, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x17f, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xfffffffb, 0x0, 0x5, 0x4, 0xc, 0x800, 0x2003c5a, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x8bd, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x42bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x6, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x400, 0x6, 0x1, 0xffffffff, 0x5, 0x1000005, 0x0, 0xa, 0x6e4, 0x1, 0x4, 0xb, 0x4, 0x7, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x200003, 0x8005, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x2, 0x3], [0x7, 0x408, 0x80004, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x2000b, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x84, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0x800bb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x1, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x0, 0x0, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x1, 0x3, 0x0)
close(0xffffffffffffffff)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4.341456089s ago: executing program 6 (id=2376):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x10000, 0x3, 0x0, 0x1, 0x0, 0x1, {0x3}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.341240709s ago: executing program 3 (id=2377):
r0 = socket$unix(0x1, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r0)

4.32650621s ago: executing program 7 (id=2384):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

4.32613081s ago: executing program 5 (id=2378):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0xfffffffb, r4}, 0x38)

1.428246845s ago: executing program 7 (id=2379):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0)
syz_emit_ethernet(0xb3, &(0x7f0000000300)=ANY=[], 0x0)
r3 = openat2(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0xc00, 0x112, 0x1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

1.427906595s ago: executing program 5 (id=2380):
syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x6d2442)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
pipe(0x0)
readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
unshare(0x20000400)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', 0x0})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
r0 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.421210125s ago: executing program 3 (id=2381):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
shmget$private(0x0, 0x3000, 0x78000000, &(0x7f000000b000/0x3000)=nil)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 7 (id=2382):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc, 0x1}, &(0x7f00000007c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x6000, @fd_index, 0x7, 0x0, 0x0, 0x1e, 0x1})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

leftover after parsing attributes in process `syz.3.465'.
[  203.611823][ T7700] bridge3: entered allmulticast mode
[  203.636943][ T7700] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  203.762044][ T5082] Bluetooth: hci1: command tx timeout
[  203.933869][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.953151][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.976116][ T7629] bridge_slave_0: entered allmulticast mode
[  204.017513][ T7629] bridge_slave_0: entered promiscuous mode
[  204.047338][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.067923][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.095614][ T7629] bridge_slave_1: entered allmulticast mode
[  204.113007][ T7629] bridge_slave_1: entered promiscuous mode
[  204.282129][ T7629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.323171][ T7629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.460918][ T7629] team0: Port device team_slave_0 added
[  204.485817][ T7629] team0: Port device team_slave_1 added
[  204.557816][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.575709][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.621748][ T7629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.666073][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.677789][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.718095][ T7629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.936322][ T7629] hsr_slave_0: entered promiscuous mode
[  204.963491][ T7629] hsr_slave_1: entered promiscuous mode
[  205.946294][ T5082] Bluetooth: hci1: command tx timeout
[  207.877948][ T7741] loop6: detected capacity change from 0 to 1024
[  207.885223][ T7741] EXT4-fs: Ignoring removed orlov option
[  207.891225][ T7741] EXT4-fs: inline encryption not supported
[  207.897313][ T7741] ext3: Unknown parameter 'hash'
[  207.957194][ T5783] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  208.866672][ T7629] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  208.906601][ T7629] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  208.930306][ T7629] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  208.977063][ T7629] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  209.152291][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'.
[  209.377003][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.474'.
[  209.527899][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.581630][ T7629] 8021q: adding VLAN 0 to HW filter on device team0
[  209.628877][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.636140][ T7536] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.685869][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.693050][ T7541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.743238][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.476'.
[  210.678367][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.093060][ T7629] veth0_vlan: entered promiscuous mode
[  212.214856][ T7629] veth1_vlan: entered promiscuous mode
[  212.366744][ T7629] veth0_macvtap: entered promiscuous mode
[  212.388900][ T7629] veth1_macvtap: entered promiscuous mode
[  212.460386][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.492123][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.504665][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.519850][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.530177][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.556086][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.599108][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.633298][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.680519][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.751401][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.768456][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.825574][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.882428][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.916522][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.947321][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.967698][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.999159][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.042095][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.090307][ T7629] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.145421][ T7629] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.154204][ T7629] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.181521][ T7629] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.437914][ T7548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.475588][ T7548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.564085][ T7548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.594405][ T7548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.824069][ T7854] sctp: [Deprecated]: syz.6.489 (pid 7854) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.824069][ T7854] Use struct sctp_sack_info instead
[  215.397106][   T28] audit: type=1326 audit(1771945027.524:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.488922][   T28] audit: type=1326 audit(1771945027.524:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.537300][   T28] audit: type=1326 audit(1771945027.574:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.595987][   T28] audit: type=1326 audit(1771945027.574:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.650210][   T28] audit: type=1326 audit(1771945027.574:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.708708][   T28] audit: type=1326 audit(1771945027.574:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.762423][   T28] audit: type=1326 audit(1771945027.574:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.827368][   T28] audit: type=1326 audit(1771945027.584:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.892624][   T28] audit: type=1326 audit(1771945027.584:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  215.933446][ T7879] bond3: entered promiscuous mode
[  215.993712][   T28] audit: type=1326 audit(1771945027.584:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x7ffc0000
[  217.255233][ T7911] syz.5.505 uses obsolete (PF_INET,SOCK_PACKET)
[  217.351734][ T7916] bridge1: entered promiscuous mode
[  217.377753][ T7916] bridge1: entered allmulticast mode
[  219.273850][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.299217][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.714935][ T7961] netlink: 'syz.7.521': attribute type 16 has an invalid length.
[  219.775460][ T7961] netlink: 'syz.7.521': attribute type 17 has an invalid length.
[  220.077166][ T7961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.438018][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'.
[  220.463199][ T7980] bridge_slave_1: left allmulticast mode
[  220.473280][ T7980] bridge_slave_1: left promiscuous mode
[  220.485772][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.528411][ T7980] bridge_slave_0: left allmulticast mode
[  220.534139][ T7980] bridge_slave_0: left promiscuous mode
[  220.550590][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.641869][ T7990] netlink: 'syz.7.530': attribute type 12 has an invalid length.
[  222.897899][ T8000] loop6: detected capacity change from 0 to 256
[  223.361000][ T8000] FAT-fs (loop6): Directory bread(block 64) failed
[  223.368514][ T8000] FAT-fs (loop6): Directory bread(block 65) failed
[  223.375699][ T8000] FAT-fs (loop6): Directory bread(block 66) failed
[  223.382436][ T8000] FAT-fs (loop6): Directory bread(block 67) failed
[  223.389513][ T8000] FAT-fs (loop6): Directory bread(block 68) failed
[  223.396501][ T8000] FAT-fs (loop6): Directory bread(block 69) failed
[  223.403476][ T8000] FAT-fs (loop6): Directory bread(block 70) failed
[  223.410286][ T8000] FAT-fs (loop6): Directory bread(block 71) failed
[  223.417355][ T8000] FAT-fs (loop6): Directory bread(block 72) failed
[  223.425564][ T8000] FAT-fs (loop6): Directory bread(block 73) failed
[  223.577970][ T7998] netlink: 156 bytes leftover after parsing attributes in process `syz.3.532'.
[  223.763507][ T8001] netlink: 156 bytes leftover after parsing attributes in process `syz.3.532'.
[  224.080169][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'.
[  224.862014][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.541'.
[  224.939072][ T8032] overlay: filesystem on ./file0 not supported as upperdir
[  225.139630][ T8044] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  226.069592][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'.
[  227.833112][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'.
[  228.198364][ T5772] libceph: connect (1)[c::]:6789 error -101
[  228.216969][ T5772] libceph: mon0 (1)[c::]:6789 connect error
[  228.316174][ T8099] ceph: No mds server is up or the cluster is laggy
[  228.479260][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.558'.
[  228.814612][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.5.562'.
[  229.037730][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'.
[  229.552949][ T7550] bond0: (slave bond_slave_0): interface is now down
[  229.575426][ T7550] bond0: (slave bond_slave_1): interface is now down
[  230.925036][ T8174] loop5: detected capacity change from 0 to 256
[  231.119771][ T8174] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  231.509253][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  231.509272][   T28] audit: type=1800 audit(1771945043.644:87): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.574" name="file1" dev="loop5" ino=1048606 res=0 errno=0
[  235.401367][ T7551] bond0: (slave bond_slave_0): interface is now down
[  235.430004][ T7551] bond0: (slave bond_slave_1): interface is now down
[  239.536225][ T8342] binder: 8341:8342 ioctl c0306201 2000000003c0 returned -14
[  245.186267][ T8415] tipc: Started in network mode
[  245.191222][ T8415] tipc: Node identity a2c7d25713e9, cluster identity 4711
[  245.237517][ T8415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.517969][ T8417] syzkaller0: entered promiscuous mode
[  245.523896][ T8417] syzkaller0: entered allmulticast mode
[  245.536084][ T8417] tipc: Resetting bearer <eth:syzkaller0>
[  246.266950][ T5819] tipc: Node number set to 2972635735
[  246.544096][ T8411] tipc: Resetting bearer <eth:syzkaller0>
[  252.601745][ T8411] tipc: Disabling bearer <eth:syzkaller0>
[  253.091200][ T8500] loop7: detected capacity change from 0 to 164
[  253.177712][ T8500] rock: directory entry would overflow storage
[  253.206395][ T8500] rock: sig=0x5053, size=7, remaining=4
[  253.212107][ T8500] isofs_fill_super: root inode is not a directory. Corrupted media?
[  254.508412][ T8517] loop5: detected capacity change from 0 to 128
[  254.597218][ T8517] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  254.641488][ T8517] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  254.744010][ T8517] EXT4-fs (loop5): shut down requested (2)
[  254.764897][ T8517] fscrypt (loop5, inode 12): Error -5 getting encryption context
[  254.922237][ T7232] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.145084][ T8534] loop5: detected capacity change from 0 to 512
[  255.163746][ T8534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  255.208755][ T8534] EXT4-fs (loop5): 1 truncate cleaned up
[  255.236323][ T8534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.335107][   T28] audit: type=1800 audit(1771945067.474:88): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.654" name="file1" dev="loop5" ino=15 res=0 errno=0
[  255.456776][   T28] audit: type=1800 audit(1771945067.524:89): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.654" name="file1" dev="loop5" ino=15 res=0 errno=0
[  256.073899][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.661'.
[  256.102305][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  256.109100][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.687678][ T8568] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.725204][ T7232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.901575][ T8571] macvlan2: entered promiscuous mode
[  256.945554][ T8571] macvlan2: entered allmulticast mode
[  256.993618][ T8571] bond2: entered allmulticast mode
[  257.014166][ T8571] bond2: entered promiscuous mode
[  257.031131][ T8581] loop5: detected capacity change from 0 to 16
[  257.070121][ T8581] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fff8, please upgrade kernel
[  257.073445][ T8571] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  257.128909][ T8571] team0: Port device macvlan2 added
[  257.434422][   T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.478637][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[  257.505594][ T8576] bridge_slave_1: left allmulticast mode
[  257.540794][ T8576] bridge_slave_1: left promiscuous mode
[  257.561273][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.588231][ T8576] bridge_slave_0: left allmulticast mode
[  257.593978][ T8576] bridge_slave_0: left promiscuous mode
[  257.751462][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.257543][ T8592] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  259.398072][   T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.487136][ T8601] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.666'.
[  259.717765][   T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.933662][   T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.782046][ T8631] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.673'.
[  260.886245][   T42] tipc: Left network mode
[  261.091657][ T8645] loop6: detected capacity change from 0 to 8
[  261.162003][ T8645] SQUASHFS error: Unable to read directory block [629:26]
[  261.174507][ T8647] loop7: detected capacity change from 0 to 256
[  261.178728][ T8645] SQUASHFS error: Unable to read directory block [629:46]
[  261.285560][ T6774] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  261.381570][   T42] bond1: (slave ip6gretap1): Releasing active interface
[  261.409140][   T42] ip6gretap1 (unregistering): left promiscuous mode
[  261.436307][   T42] ip6gretap1 (unregistering): left allmulticast mode
[  261.490115][ T6774] usb 6-1: Using ep0 maxpacket: 32
[  261.527752][ T6774] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  261.599277][ T6774] usb 6-1: config 0 has no interface number 0
[  261.704214][ T6774] usb 6-1: config 0 interface 12 has no altsetting 0
[  261.844320][ T6774] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  261.943303][ T6774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.041222][ T6774] usb 6-1: Product: syz
[  262.109521][ T6774] usb 6-1: Manufacturer: syz
[  262.167413][ T6774] usb 6-1: SerialNumber: syz
[  262.316042][ T6774] usb 6-1: config 0 descriptor??
[  265.955591][ T8660] netlink: 'syz.7.680': attribute type 1 has an invalid length.
[  266.191323][ T8663] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  266.201680][ T8663] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  266.226652][ T8663] bond1: (slave vxcan3): making interface the new active one
[  266.235247][ T8663] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[  266.243971][ T6774] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  266.270911][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.680'.
[  266.305655][ T6774] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  266.313058][ T6774] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  266.378378][ T6774] f81534: probe of 6-1:0.12 failed with error -71
[  266.416478][ T8667] bond1 (unregistering): (slave vxcan3): Releasing backup interface
[  266.438389][ T6774] usb 6-1: USB disconnect, device number 4
[  266.579034][ T8667] bond1 (unregistering): Released all slaves
[  266.720550][ T8677] lo speed is unknown, defaulting to 1000
[  266.733231][ T8677] lo speed is unknown, defaulting to 1000
[  266.776494][ T8677] lo speed is unknown, defaulting to 1000
[  266.852140][ T8677] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  266.925691][ T6774] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  266.964158][ T8677] lo speed is unknown, defaulting to 1000
[  267.032106][ T8677] lo speed is unknown, defaulting to 1000
[  267.103200][ T8677] lo speed is unknown, defaulting to 1000
[  267.121245][ T8677] lo speed is unknown, defaulting to 1000
[  267.131876][ T6774] usb 6-1: Using ep0 maxpacket: 16
[  267.151592][ T6774] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.171611][ T8698] loop7: detected capacity change from 0 to 2048
[  267.195789][ T6774] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  267.226379][ T6774] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  267.240941][ T8698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  267.269538][ T6774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.295964][ T6774] usb 6-1: Product: syz
[  267.301274][ T8677] lo speed is unknown, defaulting to 1000
[  267.305513][ T6774] usb 6-1: Manufacturer: syz
[  267.334163][ T6774] usb 6-1: SerialNumber: syz
[  267.591738][ T6774] usb 6-1: 0:2 : does not exist
[  267.639242][ T6774] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  267.773941][   T42] hsr_slave_0: left promiscuous mode
[  267.784259][ T6774] usb 6-1: USB disconnect, device number 5
[  267.803987][   T42] hsr_slave_1: left promiscuous mode
[  267.868239][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.888533][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.925867][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.978114][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.986391][   T42] bridge_slave_1: left allmulticast mode
[  267.992101][   T42] bridge_slave_1: left promiscuous mode
[  268.013558][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  268.029853][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.044070][   T42] bridge_slave_0: left allmulticast mode
[  268.050471][   T42] bridge_slave_0: left promiscuous mode
[  268.421759][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.835980][   T42] veth1_macvtap: left promiscuous mode
[  268.841609][   T42] veth0_macvtap: left promiscuous mode
[  269.452560][   T42] bond1 (unregistering): Released all slaves
[  270.280126][   T42] team0 (unregistering): Port device team_slave_1 removed
[  270.351465][   T42] team0 (unregistering): Port device team_slave_0 removed
[  270.428797][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.501331][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.300552][   T42] bond0 (unregistering): Released all slaves
[  271.789455][ T8727] lo speed is unknown, defaulting to 1000
[  272.484899][   T42] IPVS: stop unused estimator thread 0...
[  273.602886][ T8788] lo speed is unknown, defaulting to 1000
[  275.596283][ T8825] loop6: detected capacity change from 0 to 256
[  275.686419][ T8825] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  276.842995][ T8777] Set syz1 is full, maxelem 65536 reached
[  277.275538][ T5819] IPVS: starting estimator thread 0...
[  277.385449][ T8844] IPVS: using max 19 ests per chain, 45600 per kthread
[  278.591833][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.732'.
[  278.664639][ T8872] team1: entered promiscuous mode
[  278.683711][ T8872] team1: entered allmulticast mode
[  278.863594][ T8878] Illegal XDP return value 4294967262 on prog  (id 83) dev syz_tun, expect packet loss!
[  279.178950][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'.
[  279.302518][ T8885] syzkaller0: entered promiscuous mode
[  279.362449][ T8885] syzkaller0: entered allmulticast mode
[  279.401204][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'.
[  284.153189][ T8919] netlink: 24 bytes leftover after parsing attributes in process `syz.7.745'.
[  284.209073][ T8901] lo speed is unknown, defaulting to 1000
[  284.893803][ T8963] syzkaller0: entered promiscuous mode
[  284.901624][ T8963] syzkaller0: entered allmulticast mode
[  286.097520][ T9001] netlink: 'syz.5.768': attribute type 39 has an invalid length.
[  286.979602][ T9008] loop7: detected capacity change from 0 to 1024
[  287.020190][ T9008] EXT4-fs: Ignoring removed nomblk_io_submit option
[  287.085418][ T9008] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  287.140886][ T9008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  287.207828][ T9008] System zones: 0-1, 3-36
[  287.240634][ T9014] IPVS: Scheduler module ip_vs_ not found
[  287.277076][ T9008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.494001][ T7629] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.861808][ T9046] af_packet: tpacket_rcv: packet too big, clamped from 202 to 4294967272. macoff=96
[  288.421961][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.429775][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.878721][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.899166][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.150204][ T9051] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.159231][ T9051] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.168680][ T9051] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.178366][ T9051] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.328972][ T9051] bond2: left allmulticast mode
[  289.333886][ T9051] bond2: left promiscuous mode
[  289.411389][ T9069] netlink: 'syz.5.785': attribute type 39 has an invalid length.
[  289.500764][ T9078] netlink: 'syz.3.787': attribute type 1 has an invalid length.
[  289.534011][ T9078] bond4: entered promiscuous mode
[  289.539258][ T9078] bond4: entered allmulticast mode
[  289.545764][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'.
[  289.562492][ T9079] bridge4: the hash_elasticity option has been deprecated and is always 16
[  289.576017][ T9079] bond4: (slave bridge4): making interface the new active one
[  289.583742][ T9079] bridge4: entered promiscuous mode
[  289.589613][ T9079] bridge4: entered allmulticast mode
[  289.599100][ T9079] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  289.704952][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'.
[  289.715860][ T9083] bond4: left promiscuous mode
[  289.720696][ T9083] bridge4: left promiscuous mode
[  289.739744][ T9083] bond4: left allmulticast mode
[  289.744751][ T9083] bridge4: left allmulticast mode
[  289.760125][ T9083] 8021q: adding VLAN 0 to HW filter on device bond4
[  290.090894][ T9093] netlink: 'syz.7.791': attribute type 1 has an invalid length.
[  290.342870][ T9093] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  290.370372][ T9093] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  290.393149][ T9093] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  290.411503][ T9093] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  290.448494][ T9093] bond1: (slave geneve2): making interface the new active one
[  290.485409][ T9093] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  290.610962][ T9093] syz.7.791 (9093) used greatest stack depth: 20048 bytes left
[  290.837331][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.797'.
[  291.392634][ T9134] loop6: detected capacity change from 0 to 512
[  291.850075][ T9134] EXT4-fs (loop6): 1 truncate cleaned up
[  292.042839][ T9134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.499583][ T7344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.189209][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.411300][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.479570][ T9205] loop5: detected capacity change from 0 to 512
[  295.501329][ T9205] ext4: Unknown parameter '"'
[  295.593680][ T6668] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  297.492554][ T9238] batman_adv: batadv0: Adding interface: dummy0
[  297.525465][ T9238] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.596582][ T9238] batman_adv: batadv0: Interface activated: dummy0
[  298.166158][ T9238] batadv0: mtu less than device minimum
[  298.547581][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.560977][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.573613][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.586259][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.598904][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.611546][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.624183][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.636993][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  298.649591][ T9238] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  299.049139][ T9250] lo speed is unknown, defaulting to 1000
[  299.118813][ T5082] Bluetooth: hci0: command 0x0406 tx timeout
[  299.740257][ T9272] loop6: detected capacity change from 0 to 4096
[  299.774028][ T9272] ext4: Unknown parameter 'uid>00000000000000000000'
[  299.821049][ T9278] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  300.208383][   T28] audit: type=1326 audit(2000000024.890:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.7.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x0
[  301.466334][ T9315] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  301.547781][ T9315] bond5: (slave lo): Enslaving as an active interface with an up link
[  301.655682][ T5771] lo speed is unknown, defaulting to 1000
[  301.663486][ T9076] lo speed is unknown, defaulting to 1000
[  301.669707][  T788] lo speed is unknown, defaulting to 1000
[  304.262181][ T5776] Bluetooth: hci3: command 0x0406 tx timeout
[  305.035034][ T9368] ip_vti0: Master is either lo or non-ether device
[  305.374342][ T9371] lo speed is unknown, defaulting to 1000
[  306.510847][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.858'.
[  306.797772][   T28] audit: type=1326 audit(2000000031.470:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.6.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x0
[  312.784126][ T9470] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  312.810546][ T9470] CIFS mount error: No usable UNC path provided in device string!
[  312.810546][ T9470] 
[  312.821227][ T9470] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  313.733847][   T28] audit: type=1326 audit(2000000038.410:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7fc00000
[  313.780496][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'.
[  313.835427][   T28] audit: type=1326 audit(2000000038.510:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ffd39c629 code=0x7fc00000
[  313.906299][ T9479] bond0: option arp_all_targets: invalid value (172)
[  313.928806][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.875'.
[  314.909611][ T9502] netlink: 'syz.5.880': attribute type 1 has an invalid length.
[  315.081619][ T9502] 8021q: adding VLAN 0 to HW filter on device bond2
[  315.102115][ T9510] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  315.204136][ T9510] bond2: entered allmulticast mode
[  315.277974][ T5082] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1
[  315.512096][ T9502] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  315.971410][ T9537] netlink: 'syz.7.888': attribute type 4 has an invalid length.
[  316.019041][ T9537] netlink: 152 bytes leftover after parsing attributes in process `syz.7.888'.
[  316.108296][ T9537] .`: renamed from bond0 (while UP)
[  317.523705][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.530671][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  319.025648][ T9589] netlink: 'syz.3.900': attribute type 13 has an invalid length.
[  319.391429][ T5082] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  319.403388][ T5082] Bluetooth: hci1: Injecting HCI hardware error event
[  319.413162][ T5776] Bluetooth: hci1: hardware error 0x00
[  320.168756][ T9605] loop5: detected capacity change from 0 to 512
[  320.181854][ T9605] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[  320.193518][ T9605] EXT4-fs (loop5): group descriptors corrupted!
[  320.742626][ T7554] bond1: (slave bridge2): link status up again after 0 ms
[  320.785023][ T7554] net_ratelimit: 11 callbacks suppressed
[  320.785059][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  320.937691][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  321.076449][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  321.187394][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  321.336263][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  321.462898][ T9636] lo speed is unknown, defaulting to 1000
[  321.477059][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  321.746910][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  321.887383][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  321.996834][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  322.141121][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  322.327650][ T5776] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  323.258751][ T9659] o2cb: This node has not been configured.
[  323.299908][ T9659] o2cb: Cluster check failed. Fix errors before retrying.
[  323.312457][ T9659] (syz.3.912,9659,1):user_dlm_register:674 ERROR: status = -22
[  323.329080][ T9659] (syz.3.912,9659,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  325.312175][ T9702] o2cb: This node has not been configured.
[  325.329535][ T9702] o2cb: Cluster check failed. Fix errors before retrying.
[  325.373793][ T9702] (syz.5.924,9702,0):user_dlm_register:674 ERROR: status = -22
[  325.383734][ T9702] (syz.5.924,9702,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  326.548524][   T42] net_ratelimit: 21 callbacks suppressed
[  326.548542][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  326.717547][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  326.893594][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  327.073900][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  327.212415][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  327.347769][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  327.475709][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  327.608408][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  327.765466][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  327.907468][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  329.940618][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'.
[  329.949827][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.938'.
[  330.395530][ T9797] xt_TCPMSS: Only works on TCP SYN packets
[  330.824312][ T9806] overlayfs: failed to clone upperpath
[  330.858338][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.948'.
[  330.921658][ T9808] lo speed is unknown, defaulting to 1000
[  330.986944][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.948'.
[  332.171728][ T7551] net_ratelimit: 26 callbacks suppressed
[  332.171749][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  332.375388][ T7544] bond1: (slave bridge2): failed to get link speed/duplex
[  332.509442][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  332.660546][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  332.796701][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  332.933499][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  333.086968][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  333.333247][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  333.478524][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  333.788704][ T9859] loop5: detected capacity change from 0 to 128
[  333.795937][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  333.868033][ T9859] FAT-fs (loop5): bogus sectors per cluster 0
[  333.900619][ T9859] FAT-fs (loop5): Can't find a valid FAT filesystem
[  334.566924][   T28] audit: type=1326 audit(2000000059.240:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.5.957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f252ef9c629 code=0x0
[  335.961524][ T9893] lo speed is unknown, defaulting to 1000
[  337.152997][ T9905] netlink: 'syz.7.965': attribute type 1 has an invalid length.
[  337.197082][ T9905] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.241924][ T7544] net_ratelimit: 18 callbacks suppressed
[  337.241942][ T7544] bond1: (slave bridge2): failed to get link speed/duplex
[  337.328962][ T9908] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  337.456518][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  337.586593][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  337.725608][ T7544] bond1: (slave bridge2): failed to get link speed/duplex
[  337.875351][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  338.025364][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  338.162969][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  338.301242][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  338.450966][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  338.587306][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  338.796789][ T9939] xt_TCPMSS: Only works on TCP SYN packets
[  339.593175][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.972'.
[  339.720052][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.971'.
[  339.774414][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.971'.
[  340.092184][ T9436] udevd[9436]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  340.522855][ T9985] binder_alloc: 9983: binder_alloc_buf size 1024 failed, no address space
[  340.532210][ T9985] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8)
[  341.978006][T10015] netlink: 32 bytes leftover after parsing attributes in process `syz.5.984'.
[  342.070281][T10015] netlink: 32 bytes leftover after parsing attributes in process `syz.5.984'.
[  342.278845][ T7551] net_ratelimit: 31 callbacks suppressed
[  342.278865][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  342.424409][T10029] Invalid ELF header magic: != ELF
[  342.445048][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  342.616205][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  342.781899][ T7544] bond1: (slave bridge2): failed to get link speed/duplex
[  342.940694][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  343.085548][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  343.240797][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  343.395939][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  343.546523][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  343.686260][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  345.864705][T10104] loop5: detected capacity change from 0 to 2048
[  346.008282][T10104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.038579][T10104] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.277610][T10104] kvm: vcpu 0: requested 53248 ns lapic timer period limited to 200000 ns
[  346.288896][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1008'.
[  346.910915][   T28] audit: type=1326 audit(2000000071.590:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  346.986947][   T28] audit: type=1326 audit(2000000071.590:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.026376][T10135] batadv_slave_1: entered promiscuous mode
[  347.032546][   T28] audit: type=1326 audit(2000000071.620:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.072469][ T7232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.083003][   T28] audit: type=1326 audit(2000000071.640:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.127893][   T28] audit: type=1326 audit(2000000071.640:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.225620][   T28] audit: type=1326 audit(2000000071.640:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.251149][T10133] batadv_slave_1: left promiscuous mode
[  347.289036][   T28] audit: type=1326 audit(2000000071.640:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.322028][ T2882] net_ratelimit: 28 callbacks suppressed
[  347.322048][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  347.356048][   T28] audit: type=1326 audit(2000000071.640:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.421265][   T28] audit: type=1326 audit(2000000071.640:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.473679][   T28] audit: type=1326 audit(2000000071.640:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.3.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  347.511858][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  347.640417][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  348.579689][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  348.966052][ T7544] bond1: (slave bridge2): failed to get link speed/duplex
[  349.087354][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  349.275915][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  349.471949][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  349.608439][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  349.937020][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  350.396806][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1021'.
[  350.407135][T10178] tipc: Failed to remove unknown binding: 66,0,0/0:3024655747/3024655749
[  350.425999][T10178] tipc: Failed to remove unknown binding: 66,0,0/0:3024655747/3024655748
[  350.456375][T10178] tipc: Failed to remove unknown binding: 66,0,0/0:3024655747/3024655749
[  350.487407][T10178] tipc: Failed to remove unknown binding: 66,0,0/0:3024655747/3024655748
[  351.989517][   T28] kauditd_printk_skb: 51 callbacks suppressed
[  351.989539][   T28] audit: type=1804 audit(2000000076.660:156): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1030" name="file0" dev="ramfs" ino=21940 res=1 errno=0
[  352.426494][ T2882] net_ratelimit: 15 callbacks suppressed
[  352.426514][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  352.565445][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  352.675331][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  352.796100][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  352.916570][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  353.036404][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  353.285185][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  353.473664][T10247] lo speed is unknown, defaulting to 1000
[  353.729444][ T7554] bond1: (slave bridge2): failed to get link speed/duplex
[  353.889767][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  354.788900][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  355.265615][T10273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'.
[  355.896914][T10288] netlink: 'syz.6.1045': attribute type 1 has an invalid length.
[  356.247223][T10288] bond3: entered promiscuous mode
[  356.252371][T10288] bond3: entered allmulticast mode
[  356.519124][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1045'.
[  357.050007][T10295] bridge1: the hash_elasticity option has been deprecated and is always 16
[  357.109196][T10295] bond3: (slave bridge1): making interface the new active one
[  357.135027][T10295] bridge1: entered promiscuous mode
[  357.187958][T10295] bridge1: entered allmulticast mode
[  357.199908][T10295] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  357.217966][T10305] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1
[  357.355932][T10305] ref_ctr increment failed for inode: 0x2e4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e872f80
[  357.442841][T10296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1045'.
[  357.465058][T10304] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1
[  357.515333][T10304] ref_ctr decrement failed for inode: 0x2e4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e872f80
[  358.085983][T10296] bond3: left promiscuous mode
[  358.091052][T10296] bridge1: left promiscuous mode
[  358.235577][T10296] bond3: left allmulticast mode
[  358.240528][T10296] bridge1: left allmulticast mode
[  358.277350][T10296] 8021q: adding VLAN 0 to HW filter on device bond3
[  358.300148][ T7546] net_ratelimit: 7 callbacks suppressed
[  358.300169][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  358.530313][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  358.711823][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  358.977115][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  359.226968][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  359.344268][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  359.430111][T10325] lo: Caught tx_queue_len zero misconfig
[  359.673036][T10333] loop5: detected capacity change from 0 to 512
[  359.918843][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  362.783052][T10377] loop5: detected capacity change from 0 to 1024
[  362.975292][   T28] audit: type=1800 audit(2000000087.650:157): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1062" name="bus" dev="loop5" ino=26 res=0 errno=0
[  363.044726][ T7544] hfsplus: b-tree write err: -5, ino 4
[  363.218608][ T7548] hfsplus: b-tree write err: -5, ino 4
[  363.260059][T10378] bio_check_eod: 19 callbacks suppressed
[  363.260081][T10378] syz.5.1062: attempt to access beyond end of device
[  363.260081][T10378] loop5: rw=34817, sector=996, nr_sectors = 32 limit=1024
[  363.424812][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.462482][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.535630][ T7541] kworker/u4:15: attempt to access beyond end of device
[  363.535630][ T7541] loop5: rw=1, sector=1028, nr_sectors = 2 limit=1024
[  363.556736][ T7541] buffer_io_error: 1 callbacks suppressed
[  363.556753][ T7541] Buffer I/O error on dev loop5, logical block 514, lost async page write
[  364.197313][T10344] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.207441][T10344] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.217352][T10344] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.230233][T10344] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.402414][T10344] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  364.412108][T10344] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  364.421946][T10344] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  364.432006][T10344] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  364.465758][ T7544] bond1: (slave bridge2): failed to get link speed/duplex
[  364.581733][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  364.741847][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  364.855697][ T7544] bond1: (slave bridge2): failed to get link speed/duplex
[  364.978337][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  365.337543][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  365.446418][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  365.593456][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  366.108866][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  366.364947][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  366.799343][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'.
[  369.198867][T10435] lo speed is unknown, defaulting to 1000
[  369.910671][ T7551] net_ratelimit: 16 callbacks suppressed
[  369.910776][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  370.085395][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  370.255500][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  370.506882][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1090'.
[  371.066321][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  371.418171][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  371.635370][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  371.826642][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  371.996856][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  372.189081][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  372.386296][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  374.759037][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1109'.
[  376.332791][ T7546] net_ratelimit: 18 callbacks suppressed
[  376.332812][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  376.486990][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  376.625357][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  376.776289][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  376.885359][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  377.588896][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  377.745826][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  377.875460][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  377.985840][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  378.117536][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  378.347749][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'.
[  379.066425][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  379.105440][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  380.968383][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1136'.
[  381.361250][ T7548] net_ratelimit: 16 callbacks suppressed
[  381.361272][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  381.531841][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  381.688518][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  381.909184][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  382.161956][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  382.301735][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  382.432717][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  382.545868][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  382.655297][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  382.805487][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  383.387251][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1147'.
[  384.457146][T10634] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  384.466749][T10634] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  384.475938][T10634] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  384.484815][T10634] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  385.005696][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'.
[  385.054770][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'.
[  385.113129][T10649] netlink: 'syz.6.1149': attribute type 13 has an invalid length.
[  385.244066][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'.
[  386.085689][T10673] tipc: Failed to remove unknown binding: 66,0,0/0:3055478442/3055478444
[  386.100345][T10673] tipc: Failed to remove unknown binding: 66,0,0/0:3055478442/3055478443
[  386.125066][T10673] tipc: Failed to remove unknown binding: 66,0,0/0:3055478442/3055478444
[  386.134837][T10673] tipc: Failed to remove unknown binding: 66,0,0/0:3055478442/3055478443
[  386.455605][ T2882] net_ratelimit: 15 callbacks suppressed
[  386.455627][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  386.739504][T10689] nfs: Unknown parameter 'fs'
[  387.991376][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  388.141163][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  388.268381][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  388.396173][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  388.525310][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  388.655416][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  388.766528][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  388.911939][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  389.047095][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  390.580572][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1174'.
[  391.535739][ T7548] net_ratelimit: 15 callbacks suppressed
[  391.535795][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  391.925405][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  392.076683][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  392.186986][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  392.305760][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  392.468767][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  392.632713][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  392.756540][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  392.866938][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  392.978935][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  396.645322][T10803] bridge0: entered promiscuous mode
[  396.650615][T10803] bridge0: entered allmulticast mode
[  397.173108][T10803] team0: Port device bridge0 added
[  397.317679][T10802] bridge0: port 1(team0) entered blocking state
[  397.360066][T10802] bridge0: port 1(team0) entered disabled state
[  397.370014][T10802] team0: entered allmulticast mode
[  397.423227][T10802] team_slave_0: entered allmulticast mode
[  397.435398][T10802] team_slave_1: entered allmulticast mode
[  397.471625][T10802] team0: left allmulticast mode
[  397.483700][T10802] team_slave_0: left allmulticast mode
[  397.514256][T10802] team_slave_1: left allmulticast mode
[  397.562754][T10806] geneve2: entered promiscuous mode
[  397.585743][T10806] geneve2: entered allmulticast mode
[  397.696959][ T7551] net_ratelimit: 23 callbacks suppressed
[  397.696982][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  397.828753][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  397.885382][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1201'.
[  397.997169][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  398.111689][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  398.230660][T10822] lo speed is unknown, defaulting to 1000
[  398.306244][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  398.437000][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  398.578299][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  398.790407][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  402.071129][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  402.231929][T10838] batadv_slave_0: entered promiscuous mode
[  402.239560][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1208'.
[  402.286341][T10838] batadv_slave_0 (unregistering): left promiscuous mode
[  402.293933][T10838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.377272][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  402.805133][ T2882] net_ratelimit: 2 callbacks suppressed
[  402.813482][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  402.997386][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  403.295573][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  403.405629][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  403.681782][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  404.456656][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  404.576687][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  404.705310][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  404.855398][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  404.974937][T10869] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1218'.
[  405.026142][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  405.635408][T10879] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  407.897328][ T7546] net_ratelimit: 22 callbacks suppressed
[  407.897344][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  408.035438][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  408.155705][ T2882] bond1: (slave bridge2): failed to get link speed/duplex
[  408.313763][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  408.460658][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  408.616825][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  408.727542][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  408.985358][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  409.773830][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  409.898017][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  410.556911][T10946] overlayfs: failed to clone upperpath
[  410.578734][T10946] overlayfs: failed to clone upperpath
[  412.522452][T10968] fuse: Bad value for 'fd'
[  412.924987][ T7532] net_ratelimit: 21 callbacks suppressed
[  412.925031][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  413.243532][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  413.386964][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  413.436436][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1254'.
[  413.513723][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1253'.
[  413.547498][T10987] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1
[  413.577117][T10987] ref_ctr increment failed for inode: 0x795 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880504baf80
[  413.610590][T10987] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1
[  413.620410][T10987] ref_ctr decrement failed for inode: 0x795 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880504baf80
[  413.651206][T10985] vlan2: entered promiscuous mode
[  413.657574][T10985] bridge0: entered promiscuous mode
[  413.663201][T10985] vlan2: entered allmulticast mode
[  413.671954][T10985] bridge0: entered allmulticast mode
[  413.684812][T10988] bridge_slave_0: left allmulticast mode
[  413.703275][T10988] bridge_slave_0: left promiscuous mode
[  413.720469][T10988] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.755796][T10988] bridge_slave_1: left allmulticast mode
[  413.761695][T10988] bridge_slave_1: left promiscuous mode
[  413.782753][T10988] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.801289][T10988] .`: (slave bond_slave_0): Releasing backup interface
[  413.812006][T10988] .`: (slave bond_slave_1): Releasing backup interface
[  413.847449][T10988] team0: Port device team_slave_0 removed
[  413.977806][T10988] team0: Port device team_slave_1 removed
[  413.999488][T10988] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.022145][T10988] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.067391][T10988] bond1: (slave geneve2): Releasing active interface
[  414.096592][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  414.205479][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  414.345590][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  414.565597][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  414.827162][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  414.935604][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  415.048186][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  415.848612][   T28] audit: type=1326 audit(2000000000.810:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  415.878669][T11029] netlink: 'syz.3.1271': attribute type 1 has an invalid length.
[  415.913855][   T28] audit: type=1326 audit(2000000000.810:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  415.955796][   T28] audit: type=1326 audit(2000000000.810:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  416.005072][   T28] audit: type=1326 audit(2000000000.810:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  416.050073][T11029] 8021q: adding VLAN 0 to HW filter on device bond6
[  416.105261][   T28] audit: type=1326 audit(2000000000.810:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14e4f5cece code=0x7ffc0000
[  416.160695][   T28] audit: type=1326 audit(2000000000.810:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  416.184832][T11033] 8021q: adding VLAN 0 to HW filter on device bond6
[  416.211312][T11033] bond6: (slave vti0): The slave device specified does not support setting the MAC address
[  416.227075][T11033] bond6: (slave vti0): Error -95 calling set_mac_address
[  416.258472][   T28] audit: type=1326 audit(2000000000.810:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  416.317009][   T28] audit: type=1326 audit(2000000000.810:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  416.381558][   T28] audit: type=1326 audit(2000000000.810:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  416.435583][   T28] audit: type=1326 audit(2000000000.810:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.7.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  416.436080][T11029] bond6: (slave gretap2): making interface the new active one
[  416.566534][T11029] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  416.807273][T11042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1275'.
[  418.001223][ T7551] net_ratelimit: 20 callbacks suppressed
[  418.001239][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  419.125481][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  419.405320][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  419.586906][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  419.745471][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  419.895566][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  420.188252][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  420.355631][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  420.987421][T11078] team0: Mode changed to "loadbalance"
[  421.237251][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1289'.
[  421.345805][T11085] vlan0: entered promiscuous mode
[  421.406449][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  421.524158][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  421.742269][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1290'.
[  422.781827][T11110] xt_TCPMSS: Only works on TCP SYN packets
[  423.039039][   T42] net_ratelimit: 10 callbacks suppressed
[  423.039083][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  423.727703][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  423.909815][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  424.050782][ T7551] bond1: (slave bridge2): failed to get link speed/duplex
[  424.195607][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  424.316686][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  424.346156][T11128] netlink: 'syz.6.1302': attribute type 1 has an invalid length.
[  424.418890][T11128] 8021q: adding VLAN 0 to HW filter on device bond4
[  424.466340][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  424.487129][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1302'.
[  424.496458][T11131] bond4: entered promiscuous mode
[  424.501576][T11131] bond4: entered allmulticast mode
[  424.975496][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  425.276640][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  425.541295][T11128] bond4: (slave dummy0): making interface the new active one
[  425.557655][T11128] dummy0: entered promiscuous mode
[  425.563361][T11128] dummy0: entered allmulticast mode
[  425.571592][T11128] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  425.619507][ T7548] bond1: (slave bridge2): failed to get link speed/duplex
[  428.078346][   T42] net_ratelimit: 15 callbacks suppressed
[  428.078365][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  428.263569][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  428.479922][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  428.736269][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  428.865516][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  429.183170][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  429.396293][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  429.515964][ T7546] bond1: (slave bridge2): failed to get link speed/duplex
[  429.629102][T11182] netlink: 'syz.3.1319': attribute type 1 has an invalid length.
[  429.641933][T11183] overlayfs: failed to clone upperpath
[  429.669112][T11183] overlayfs: failed to resolve './file1': -2
[  429.744533][T11182] 8021q: adding VLAN 0 to HW filter on device bond7
[  429.800712][T11185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'.
[  429.825509][T11185] bond7: entered promiscuous mode
[  429.830850][T11185] bond7: entered allmulticast mode
[  429.852588][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  429.891927][T11190] batman_adv: batadv0: Interface deactivated: dummy0
[  429.920161][T11190] batman_adv: batadv0: Removing interface: dummy0
[  429.961331][T11190] bond7: (slave dummy0): making interface the new active one
[  429.975499][T11190] dummy0: entered promiscuous mode
[  429.986083][T11190] dummy0: entered allmulticast mode
[  429.993758][T11190] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  430.017314][ T7532] bond1: (slave bridge2): failed to get link speed/duplex
[  430.464873][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1328'.
[  432.246125][T11212] bridge0: entered promiscuous mode
[  432.251419][T11212] bridge0: entered allmulticast mode
[  432.283595][T11212] team0: Port device bridge0 added
[  432.293846][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1331'.
[  432.338537][T11217] bridge0: port 1(team0) entered blocking state
[  432.344960][T11217] bridge0: port 1(team0) entered disabled state
[  432.424421][T11217] team0: entered allmulticast mode
[  432.430129][T11217] team_slave_1: entered allmulticast mode
[  432.442057][T11217] team0: left allmulticast mode
[  432.447563][T11217] team_slave_1: left allmulticast mode
[  432.527673][T11212] geneve2: entered promiscuous mode
[  432.557169][T11212] geneve2: entered allmulticast mode
[  432.610659][T11224] xt_TCPMSS: Only works on TCP SYN packets
[  433.433167][T11228] netlink: 'syz.7.1334': attribute type 1 has an invalid length.
[  433.508010][T11228] 8021q: adding VLAN 0 to HW filter on device bond2
[  433.515657][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1335'.
[  433.632353][T11231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1334'.
[  433.641673][T11231] bond2: entered promiscuous mode
[  433.653817][T11231] bond2: entered allmulticast mode
[  433.678568][ T7541] net_ratelimit: 5 callbacks suppressed
[  433.678611][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  433.808065][T11228] bond2: (slave dummy0): making interface the new active one
[  433.936911][T11228] dummy0: entered promiscuous mode
[  434.019085][T11228] dummy0: entered allmulticast mode
[  434.282893][T11228] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  434.536815][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  434.675354][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  434.818558][ T7528] bond1: (slave bridge2): failed to get link speed/duplex
[  435.121806][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  435.356126][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  435.899965][   T42] bond1: (slave bridge2): failed to get link speed/duplex
[  436.044652][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  436.210828][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  436.376398][ T7541] bond1: (slave bridge2): failed to get link speed/duplex
[  437.032954][T11276] netlink: 'syz.5.1349': attribute type 1 has an invalid length.
[  437.081857][T11276] 8021q: adding VLAN 0 to HW filter on device bond3
[  437.117292][T11277] bond5: (slave lo): Releasing backup interface
[  437.136808][T11277] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  437.175928][T11277] bond7: (slave dummy0): Releasing active interface
[  437.182643][T11277] dummy0: left promiscuous mode
[  437.189243][T11277] dummy0: left allmulticast mode
[  437.216965][T11277] bond0: (slave bond_slave_0): Releasing backup interface
[  437.266152][T11277] bond0: (slave bond_slave_1): Releasing backup interface
[  437.335059][T11277] team0: Port device team_slave_1 removed
[  437.343326][T11277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.374917][T11277] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.788724][T11277] bond1: (slave bridge2): Removing an active aggregator
[  437.921840][T11277] bond1: (slave bridge2): Releasing backup interface
[  438.114744][T11277] bridge2: left promiscuous mode
[  438.175407][T11277] bridge2: left allmulticast mode
[  438.279582][T11277] bond2: (slave bridge3): Releasing backup interface
[  438.301407][T11277] bridge3: left allmulticast mode
[  438.337024][T11277] bond4: (slave bridge4): Releasing active interface
[  438.366374][T11277] bond6: (slave gretap2): Releasing active interface
[  438.417073][T11277] team0: Port device bridge0 removed
[  438.487887][T11281] team0: Mode changed to "loadbalance"
[  438.497662][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1349'.
[  438.527041][T11276] bond3: entered promiscuous mode
[  438.532145][T11276] bond3: entered allmulticast mode
[  438.551669][ T7360] lo speed is unknown, defaulting to 1000
[  438.557961][ T5816] lo speed is unknown, defaulting to 1000
[  438.570994][T11284] vlan0: entered promiscuous mode
[  438.620333][T11284] team0: Port device vlan0 added
[  438.654517][T11285] bond3: (slave dummy0): making interface the new active one
[  438.665545][T11285] dummy0: entered promiscuous mode
[  438.683670][T11285] dummy0: entered allmulticast mode
[  438.707201][T11285] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  440.546851][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  441.175382][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  441.751328][T11345] xt_TCPMSS: Only works on TCP SYN packets
[  442.269216][T11360] bridge2: entered promiscuous mode
[  442.366825][T11360] bridge2: entered allmulticast mode
[  442.389825][T11360] team0: Port device bridge2 added
[  442.403124][T11352] bridge0: port 1(team0) entered blocking state
[  442.410207][T11352] bridge0: port 1(team0) entered disabled state
[  442.421948][T11352] team0: entered allmulticast mode
[  443.187091][T11352] team0: entered promiscuous mode
[  443.214877][T11360] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.229151][T11354] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  443.237904][T11354] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  443.246414][T11354] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  443.337379][T11360] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.346839][T11360] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.357540][T11360] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.375401][T11360] geneve3: entered promiscuous mode
[  443.396919][T11360] geneve3: entered allmulticast mode
[  443.444323][T11360] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.487428][T11360] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.500208][T11360] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.515662][T11360] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.730560][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1381'.
[  447.063473][   T28] kauditd_printk_skb: 53 callbacks suppressed
[  447.063489][   T28] audit: type=1326 audit(2000000291.021:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  447.149152][   T28] audit: type=1326 audit(2000000291.021:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  447.204392][   T28] audit: type=1326 audit(2000000291.021:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  447.248115][   T28] audit: type=1326 audit(2000000291.021:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  447.302594][   T28] audit: type=1326 audit(2000000291.021:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  447.415608][   T28] audit: type=1326 audit(2000000291.021:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  447.485436][   T28] audit: type=1326 audit(2000000291.021:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14e4f9c392 code=0x7ffc0000
[  447.507950][   T28] audit: type=1326 audit(2000000291.061:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14e4f5cece code=0x7ffc0000
[  448.902203][   T28] audit: type=1326 audit(2000000291.071:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f14e4f9c457 code=0x7ffc0000
[  449.022388][   T28] audit: type=1326 audit(2000000291.071:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.7.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14e4f5cece code=0x7ffc0000
[  450.689696][T11438] VFS: Mount too revealing
[  451.330856][ T5771] kernel write not supported for file bpf-prog (pid: 5771 comm: kworker/1:3)
[  453.657802][T11481] xt_socket: unknown flags 0x50
[  454.505433][ T5816] IPVS: starting estimator thread 0...
[  454.517143][T11487] net_ratelimit: 5 callbacks suppressed
[  454.517166][T11487] IPVS: rr: FWM 3 0x00000003 - no destination available
[  454.615343][T11488] IPVS: using max 26 ests per chain, 62400 per kthread
[  455.910738][T11502] netlink: get zone limit has 4 unknown bytes
[  456.668816][T11501] netlink: 'syz.7.1412': attribute type 1 has an invalid length.
[  456.871863][T11501] 8021q: adding VLAN 0 to HW filter on device bond3
[  457.384643][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  457.384663][   T28] audit: type=1804 audit(2000000301.331:246): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1415" name="bus" dev="ramfs" ino=25632 res=1 errno=0
[  457.456433][   T28] audit: type=1804 audit(2000000301.411:247): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1415" name="bus" dev="ramfs" ino=25632 res=1 errno=0
[  457.786180][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1417'.
[  459.086455][T11539] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1420'.
[  460.517708][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'.
[  461.186196][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'.
[  463.859389][T11599] netlink: 'syz.7.1438': attribute type 3 has an invalid length.
[  463.895055][T11599] netlink: 'syz.7.1438': attribute type 3 has an invalid length.
[  465.319207][T11605] lo speed is unknown, defaulting to 1000
[  466.472358][   T28] audit: type=1326 audit(2000000310.431:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.509552][   T28] audit: type=1326 audit(2000000310.471:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.540045][   T28] audit: type=1326 audit(2000000310.471:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.571569][   T28] audit: type=1326 audit(2000000310.471:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.600380][   T28] audit: type=1326 audit(2000000310.471:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.655358][   T28] audit: type=1326 audit(2000000310.471:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.678411][   T28] audit: type=1326 audit(2000000310.471:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.715694][   T28] audit: type=1326 audit(2000000310.491:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.748653][   T28] audit: type=1326 audit(2000000310.491:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  466.791372][   T28] audit: type=1326 audit(2000000310.501:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.3.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  467.987442][T11642] xt_CT: You must specify a L4 protocol and not use inversions on it
[  471.481010][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1461'.
[  474.223281][T11692] tipc: Started in network mode
[  474.228471][T11692] tipc: Node identity ac1414aa, cluster identity 4711
[  474.237703][T11692] tipc: Enabled bearer <udp:syz2>, priority 10
[  474.269296][T11692] tipc: Enabled bearer <eth:team0>, priority 0
[  474.431781][   T28] kauditd_printk_skb: 74 callbacks suppressed
[  474.431797][   T28] audit: type=1326 audit(2000000318.391:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  474.533262][   T28] audit: type=1326 audit(2000000318.431:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  474.567963][   T28] audit: type=1326 audit(2000000318.431:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  474.614679][   T28] audit: type=1326 audit(2000000318.431:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  474.657414][   T28] audit: type=1326 audit(2000000318.431:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  474.705228][   T28] audit: type=1326 audit(2000000318.431:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  474.774375][   T28] audit: type=1326 audit(2000000318.431:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  474.882246][   T28] audit: type=1326 audit(2000000318.431:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  476.105495][   T28] audit: type=1326 audit(2000000318.431:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ffd39c392 code=0x7ffc0000
[  476.906677][   T28] audit: type=1326 audit(2000000318.451:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ffd35cece code=0x7ffc0000
[  476.930707][T11713] lo: Caught tx_queue_len zero misconfig
[  477.033895][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1473'.
[  477.254237][   T23] tipc: Node number set to 2886997162
[  477.872624][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1485'.
[  477.997024][T11743] bridge2: port 1(veth5) entered blocking state
[  478.012473][T11743] bridge2: port 1(veth5) entered disabled state
[  478.037321][T11743] veth5: entered allmulticast mode
[  478.057279][T11748] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa
[  478.069044][T11743] veth5: entered promiscuous mode
[  478.095558][T11743] bridge2: port 1(veth5) entered blocking state
[  478.102002][T11743] bridge2: port 1(veth5) entered forwarding state
[  478.144030][ T7551] bridge2: port 1(veth5) entered disabled state
[  478.256634][T11749] bridge2: port 2(veth7) entered blocking state
[  478.273512][T11749] bridge2: port 2(veth7) entered disabled state
[  478.293845][T11749] veth7: entered allmulticast mode
[  478.320941][T11749] veth7: entered promiscuous mode
[  478.331836][T11749] bridge2: port 2(veth7) entered blocking state
[  478.338431][T11749] bridge2: port 2(veth7) entered forwarding state
[  478.353219][ T7541] bridge2: port 2(veth7) entered disabled state
[  479.900830][T11792] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1497'.
[  481.254574][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1506'.
[  481.270273][T11812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1506'.
[  481.341679][T11813] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1505'.
[  481.403307][T11815] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1507'.
[  481.417633][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1507'.
[  481.429186][T11815] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1507'.
[  483.597891][T11843] lo: entered allmulticast mode
[  483.610776][T11843] lo: left allmulticast mode
[  483.898088][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1519'.
[  485.381882][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'.
[  485.476041][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'.
[  486.922864][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'.
[  489.732896][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1534'.
[  490.114604][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1537'.
[  490.357559][T11916] bridge4: port 1(veth9) entered blocking state
[  490.401371][T11916] bridge4: port 1(veth9) entered disabled state
[  490.602082][T11916] veth9: entered allmulticast mode
[  491.252840][T11916] veth9: entered promiscuous mode
[  491.632389][T11918] bridge4: port 2(veth11) entered blocking state
[  491.682322][T11918] bridge4: port 2(veth11) entered disabled state
[  491.713932][T11918] veth11: entered allmulticast mode
[  491.721023][T11918] veth11: entered promiscuous mode
[  492.574113][T11937] netlink: 'syz.5.1542': attribute type 1 has an invalid length.
[  492.904525][T11937] 8021q: adding VLAN 0 to HW filter on device bond4
[  494.094143][T11937] bond4: (slave gretap1): making interface the new active one
[  494.118601][T11937] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  494.531022][T11937] syz.5.1542 (11937) used greatest stack depth: 19920 bytes left
[  494.706438][T11962] netlink: 'syz.6.1552': attribute type 11 has an invalid length.
[  496.069924][T11972] xt_nat: multiple ranges no longer supported
[  498.034942][T12000] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  502.532992][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  502.539560][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  503.056042][T12041] UBIFS error (pid: 12041): cannot open "ubifs", error -22
[  505.341670][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1584'.
[  509.794990][T12131] team0: left allmulticast mode
[  509.810054][T12131] team0: left promiscuous mode
[  509.816681][T12131] bridge0: port 1(team0) entered disabled state
[  509.831299][T12131] bond2: (slave dummy0): Releasing active interface
[  509.848688][T12131] dummy0: left promiscuous mode
[  509.854085][T12131] dummy0: left allmulticast mode
[  509.931307][T12131] team0: Port device bridge2 removed
[  510.136312][T12138] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  510.162373][T12138] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  510.191426][T12137] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  510.598690][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'.
[  511.370772][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1614'.
[  511.552751][T12168] bond5: (slave vcan1): refused to change device type
[  515.156400][T12206] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1625'.
[  515.262857][T12209] vxcan0: entered allmulticast mode
[  517.375080][T12237] xt_nat: multiple ranges no longer supported
[  518.149562][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  518.149581][   T28] audit: type=1326 audit(2000000370.104:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.6.1638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x0
[  519.720148][T12273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  519.800425][T12278] openvswitch: netlink: Message has 4 unknown bytes.
[  521.695577][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1653'.
[  522.181649][T12312] bond5 (unregistering): Released all slaves
[  526.218768][T12350] lo speed is unknown, defaulting to 1000
[  526.675966][T12364] syz_tun: entered allmulticast mode
[  526.969130][T12368] netlink: 'syz.3.1668': attribute type 1 has an invalid length.
[  527.459615][T12368] bond8: entered promiscuous mode
[  527.479039][T12368] 8021q: adding VLAN 0 to HW filter on device bond8
[  527.527662][T12372] bond8: (slave bridge7): making interface the new active one
[  527.545891][T12372] bridge7: entered promiscuous mode
[  527.582404][T12372] bond8: (slave bridge7): Enslaving as an active interface with an up link
[  527.681047][T12375] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  527.787660][T12375] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  538.700531][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1690'.
[  538.723273][T12443] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  538.732125][T12443] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  538.741007][T12443] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  538.749765][T12443] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  538.767657][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1690'.
[  539.310179][T12457] xt_CT: You must specify a L4 protocol and not use inversions on it
[  539.876149][T12459] warning: `syz.3.1694' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  540.010421][T12459] netlink: 'syz.3.1694': attribute type 10 has an invalid length.
[  540.249682][T12459] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  540.279295][T12464] tipc: Enabled bearer <eth:caif0>, priority 14
[  540.325275][T12465] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1696'.
[  540.334323][T12465] 0ªX¹¦À: renamed from caif0
[  540.401684][T12465] tipc: Disabling bearer <eth:caif0>
[  540.445571][T12465] 0ªX¹¦À: entered allmulticast mode
[  540.470437][T12465] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  542.038257][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'.
[  543.791027][ T5082] Bluetooth: hci3: unexpected event for opcode 0x042c
[  545.734927][T12526] overlayfs: failed to clone upperpath
[  545.911227][T12531] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  546.051872][T12533] netlink: 'syz.3.1719': attribute type 9 has an invalid length.
[  548.438316][T12572] xt_CT: You must specify a L4 protocol and not use inversions on it
[  549.388464][T12589] netlink: 'syz.6.1733': attribute type 4 has an invalid length.
[  550.961176][T12619] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  553.032164][T12637] bond4: (slave dummy0): Releasing active interface
[  553.318218][T12637] dummy0: left promiscuous mode
[  553.674240][T12637] dummy0: left allmulticast mode
[  553.861730][T12637] bridge_slave_0: left allmulticast mode
[  553.901844][T12637] bridge_slave_0: left promiscuous mode
[  553.932509][T12637] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.007361][T12637] bridge_slave_1: left allmulticast mode
[  554.050805][T12637] bridge_slave_1: left promiscuous mode
[  554.092732][T12637] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.118161][T12637] bond0: (slave bond_slave_0): Releasing backup interface
[  554.160167][T12637] bond0: (slave bond_slave_1): Releasing backup interface
[  554.224100][T12637] team0: Port device team_slave_0 removed
[  554.261728][T12637] team0: Port device team_slave_1 removed
[  554.276976][T12637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.318035][T12637] team0: Port device macvlan2 removed
[  554.337000][T12637] bond3: (slave bridge1): Releasing active interface
[  554.348340][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1751'.
[  556.423652][T12688] netlink: 'syz.6.1764': attribute type 5 has an invalid length.
[  558.718260][T12706] netlink: zone id is out of range
[  558.745324][T12706] netlink: zone id is out of range
[  558.750508][T12706] netlink: zone id is out of range
[  558.888032][T12706] netlink: zone id is out of range
[  558.906708][T12706] netlink: zone id is out of range
[  558.939442][T12706] netlink: zone id is out of range
[  558.965825][T12706] netlink: zone id is out of range
[  558.989024][T12706] netlink: zone id is out of range
[  559.015314][T12706] netlink: zone id is out of range
[  559.083117][T12706] netlink: zone id is out of range
[  563.477391][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.483870][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.854194][T12749] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2308916002/2308916004
[  563.874728][T12747] tipc: Failed to remove unknown binding: 66,0,0/2886997007:997638363/997638364
[  563.998678][T12747] tipc: Failed to remove unknown binding: 66,0,0/2886997007:997638363/997638364
[  564.813676][T12756] bond5: (slave ip6gretap0): making interface the new active one
[  564.866839][T12756] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link
[  565.280035][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'.
[  565.960367][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1785'.
[  566.005616][T12769] veth13: entered promiscuous mode
[  566.035427][T12769] veth13: entered allmulticast mode
[  566.427466][T12781] overlayfs: failed to clone upperpath
[  570.143717][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1800'.
[  570.584932][T12835] x_tables: duplicate entry at hook 3
[  570.617798][T12835] netlink: 'syz.6.1804': attribute type 16 has an invalid length.
[  570.653689][T12835] netlink: 'syz.6.1804': attribute type 17 has an invalid length.
[  571.076317][T12835] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.214508][T12835] 8021q: adding VLAN 0 to HW filter on device team0
[  571.307076][T12835] 0ªX¹¦À: left allmulticast mode
[  571.330440][T12835] net_ratelimit: 23 callbacks suppressed
[  571.330453][T12835] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  575.006719][T12872] netlink: 'syz.6.1814': attribute type 1 has an invalid length.
[  575.267706][T12872] bond5: entered promiscuous mode
[  575.285268][T12872] 8021q: adding VLAN 0 to HW filter on device bond5
[  575.544784][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1815'.
[  576.042083][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'.
[  576.116607][T12872] bond5: (slave bridge2): making interface the new active one
[  576.124286][T12872] bridge2: entered promiscuous mode
[  576.131391][T12872] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  577.167298][T12894] bond_slave_1: entered promiscuous mode
[  577.632724][T12894] bond_slave_1: left promiscuous mode
[  578.309541][T12912] mmap: syz.6.1821 (12912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  579.822328][T12929] netlink: 'syz.3.1826': attribute type 1 has an invalid length.
[  580.180564][T12929] bond9: entered promiscuous mode
[  580.956486][T12929] 8021q: adding VLAN 0 to HW filter on device bond9
[  581.005474][T12938] bond9: (slave bridge8): making interface the new active one
[  581.050008][T12938] bridge8: entered promiscuous mode
[  581.072578][T12938] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  581.585854][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'.
[  581.752669][T12952] bond5: (slave ip6gretap0): Releasing active interface
[  587.533351][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1847'.
[  588.231314][T13022] xt_hashlimit: size too large, truncated to 1048576
[  595.426039][T13086] bond_slave_1: entered promiscuous mode
[  595.438010][T13086] bond_slave_1: left promiscuous mode
[  599.763008][T13135] netlink: 'syz.7.1887': attribute type 9 has an invalid length.
[  600.512197][T13114] syz.3.1875 (13114) used greatest stack depth: 17904 bytes left
[  600.553662][T13118] syz.3.1875 (13118) used greatest stack depth: 17864 bytes left
[  603.167047][T13169] wlan1: mtu greater than device maximum
[  606.924199][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'.
[  607.067925][T13193] netlink: 63 bytes leftover after parsing attributes in process `syz.5.1900'.
[  611.379939][T13235] netlink: 'syz.6.1913': attribute type 16 has an invalid length.
[  611.505329][T13235] netlink: 'syz.6.1913': attribute type 17 has an invalid length.
[  611.582094][T13240] UBIFS error (pid: 13240): cannot open "./file0", error -22
[  622.161466][T13287] netlink: 'syz.6.1930': attribute type 11 has an invalid length.
[  623.800570][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1933'.
[  625.635873][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  625.646130][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  629.627509][T13370] netlink: 'syz.3.1950': attribute type 1 has an invalid length.
[  629.660479][T13370] 8021q: adding VLAN 0 to HW filter on device bond10
[  630.406855][T13370] bond10: entered allmulticast mode
[  630.529651][T13373] bond10: (slave ip6gretap0): making interface the new active one
[  630.545631][T13373] ip6gretap0: entered allmulticast mode
[  630.554799][T13373] bond10: (slave ip6gretap0): Enslaving as an active interface with an up link
[  631.919019][T13393] lo speed is unknown, defaulting to 1000
[  632.178821][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1957'.
[  632.231241][T13401] sch_tbf: burst 88 is lower than device veth1 mtu (1514) !
[  634.217653][T13422] bad cache= option: no%e
[  634.217653][T13422] 
[  634.224570][T13422] CIFS: VFS: bad cache= option: no%e
[  635.145356][T13433] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1964'.
[  641.315040][T13462] overlayfs: failed to clone upperpath
[  641.725041][T13470] netlink: 'syz.7.1976': attribute type 1 has an invalid length.
[  644.561800][T13491] netlink: 'syz.6.1981': attribute type 1 has an invalid length.
[  658.390879][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1999'.
[  660.396091][T13577] ptrace attach of "./syz-executor exec"[13579] was attempted by "./syz-executor exec"[13577]
[  662.107630][T13593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2010'.
[  667.321989][T13631] xt_TCPMSS: Only works on TCP SYN packets
[  668.242710][ T5082] Bluetooth: hci3: command 0x0406 tx timeout
[  670.026209][T13648] libceph: resolve '4..' (ret=-3): failed
[  670.994036][T13652] lo speed is unknown, defaulting to 1000
[  671.320376][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2030'.
[  674.925624][T13671] ptrace attach of "./syz-executor exec"[13682] was attempted by "./syz-executor exec"[13671]
[  676.202558][T13688] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  676.730848][T13688] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  678.233413][T13706] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  678.253613][T13712] netlink: 'syz.3.2045': attribute type 21 has an invalid length.
[  682.019282][T13751] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  684.626209][T13782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2064'.
[  686.215662][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.222139][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  688.416413][T13814] MTD: Attempt to mount non-MTD device "./file0"
[  688.424046][T13814] ./file0: Can't open blockdev
[  699.638649][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2091'.
[  701.218340][T13889] tipc: Failed to remove unknown binding: 66,0,0/2886997007:690181964/690181966
[  701.233522][T13889] tipc: Failed to remove unknown binding: 66,0,0/2886997007:690181964/690181965
[  701.247268][T13889] tipc: Failed to remove unknown binding: 66,0,0/2886997007:690181964/690181966
[  701.261574][T13889] tipc: Failed to remove unknown binding: 66,0,0/2886997007:690181964/690181965
[  701.458010][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2097'.
[  706.455402][T13941] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  707.147711][T13950] team0: Port device vlan0 removed
[  707.372603][T13950] bond0: (slave wlan1): Releasing backup interface
[  707.457132][T13950] bond8: (slave bridge7): Releasing backup interface
[  707.464106][T13950] bridge7: left promiscuous mode
[  707.555355][T13950] bond9: (slave bridge8): Releasing backup interface
[  707.592368][T13950] bridge8: left promiscuous mode
[  707.910776][T13950] bond10: (slave ip6gretap0): Releasing active interface
[  708.045135][T13950] ip6gretap0: left allmulticast mode
[  708.173763][T13949] netlink: 'syz.3.2109': attribute type 10 has an invalid length.
[  708.278408][T13949] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  708.308546][T13949] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  708.383272][T13956] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2109'.
[  708.573937][T13956] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  708.624296][T13956] bond0 (unregistering): Released all slaves
[  719.345244][T14082] netlink: 'syz.6.2137': attribute type 1 has an invalid length.
[  719.565273][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2137'.
[  719.668518][T14088] bond6: (slave bridge4): making interface the new active one
[  719.698401][T14088] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  719.788238][T14090] bond6: (slave bridge5): Enslaving as an active interface with a down link
[  729.550140][T14161] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  729.606157][T14162] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  730.480797][T14169] netlink: 'syz.6.2151': attribute type 1 has an invalid length.
[  730.586057][T14171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  730.608207][T14171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  730.636138][T14171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  730.677542][T14171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  730.725293][T14171] bond7: (slave geneve2): making interface the new active one
[  730.757429][T14171] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  730.777809][T14169] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2151'.
[  730.827249][T14169] 8021q: adding VLAN 0 to HW filter on device bond7
[  735.911327][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  736.073709][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  736.086418][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  736.101054][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  736.110565][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  736.120923][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  736.905427][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  736.999672][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  737.049128][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  737.287887][T14220] netlink: 'syz.3.2164': attribute type 4 has an invalid length.
[  737.382483][T14239] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.2172'.
[  737.392526][T14239] openvswitch: netlink: ct_state flags 00030000 unsupported
[  743.353045][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2180'.
[  746.970315][T14312] validate_nla: 30 callbacks suppressed
[  746.970334][T14312] netlink: 'syz.7.2193': attribute type 1 has an invalid length.
[  747.044540][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2193'.
[  747.076412][T14312] bond4: (slave bridge4): making interface the new active one
[  747.096660][T14312] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  747.394617][T14312] bond4: (slave bridge5): Enslaving as an active interface with a down link
[  747.601145][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.607919][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  750.393132][T14375] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  750.435698][T14375] bond4: (slave bridge4): Releasing active interface
[  750.442708][T14375] bond4: (slave bridge4): the permanent HWaddr of slave - f2:dc:d0:ed:4d:71 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  750.489619][T14375] bond4: (slave bridge5): Releasing active interface
[  750.521297][T14379] netlink: 'syz.7.2211': attribute type 10 has an invalid length.
[  750.534142][T14379] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  750.560278][T14379] wlan1: mtu less than device minimum
[  750.580615][T14379] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  750.594270][T14375] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2211'.
[  750.652287][T14375] .` (unregistering): Released all slaves
[  751.874006][T14389] netlink: 'syz.5.2217': attribute type 1 has an invalid length.
[  751.917442][T14389] 8021q: adding VLAN 0 to HW filter on device bond7
[  752.833363][T14389] vlan1: entered promiscuous mode
[  752.839175][T14389] bond7: entered promiscuous mode
[  752.844417][T14389] vlan1: entered allmulticast mode
[  752.849943][T14389] bond7: entered allmulticast mode
[  752.936744][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2217'.
[  753.041763][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2219'.
[  753.221900][T14389] bond7: (slave bridge5): making interface the new active one
[  753.236265][T14389] bridge5: entered promiscuous mode
[  753.241876][T14389] bridge5: entered allmulticast mode
[  753.257026][T14389] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  753.754318][T14414] netlink: 'syz.6.2220': attribute type 4 has an invalid length.
[  755.389376][T14438] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  755.684765][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2229'.
[  758.058851][T14468] netlink: 'syz.3.2235': attribute type 1 has an invalid length.
[  758.133637][T14473] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  758.144334][T14473] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  758.153791][T14473] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  758.162876][T14473] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  758.184670][T14464] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1
[  758.202537][T14464] ref_ctr increment failed for inode: 0x937 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804c945580
[  758.228245][T14464] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1
[  758.237466][T14464] ref_ctr decrement failed for inode: 0x937 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88804c945580
[  758.267959][T14473] bond0: (slave geneve2): making interface the new active one
[  758.277557][T14473] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  758.289336][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2235'.
[  758.302647][T14468] 8021q: adding VLAN 0 to HW filter on device bond0
[  758.604832][T14482] tipc: Started in network mode
[  758.613024][T14482] tipc: Node identity 7f000001, cluster identity 4711
[  758.869950][T14482] tipc: Enabled bearer <udp:syz2>, priority 10
[  759.535583][T14482] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2240'.
[  759.579543][T14482] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  760.694813][T14482] tipc: Enabled bearer <udp:syz0>, priority 10
[  762.335066][ T5771] tipc: Node number set to 2130706433
[  767.484262][T14544] ipt_REJECT: ECHOREPLY no longer supported.
[  768.175154][   T28] audit: type=1326 audit(2000000620.094:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  768.200446][T14547] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2259'.
[  768.245079][   T28] audit: type=1326 audit(2000000620.114:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  768.527792][   T28] audit: type=1326 audit(2000000620.114:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  768.612469][   T28] audit: type=1326 audit(2000000620.124:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  768.861902][   T28] audit: type=1326 audit(2000000620.124:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  768.921707][   T28] audit: type=1326 audit(2000000620.124:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  769.324203][   T28] audit: type=1326 audit(2000000620.164:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  769.622911][   T28] audit: type=1326 audit(2000000620.164:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  769.776090][   T28] audit: type=1326 audit(2000000620.164:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  769.854664][   T28] audit: type=1326 audit(2000000620.174:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14538 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f2ffd39c629 code=0x7ffc0000
[  771.838939][T14572] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  775.277088][   T28] kauditd_printk_skb: 59 callbacks suppressed
[  775.277116][   T28] audit: type=1326 audit(2000000627.214:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  775.845591][   T28] audit: type=1326 audit(2000000627.214:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  775.870680][   T28] audit: type=1326 audit(2000000627.214:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  775.921422][   T28] audit: type=1326 audit(2000000627.364:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  775.998243][   T28] audit: type=1326 audit(2000000627.364:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  776.085191][   T28] audit: type=1326 audit(2000000627.364:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  776.153002][   T28] audit: type=1326 audit(2000000627.374:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  776.196332][   T28] audit: type=1326 audit(2000000627.374:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  776.254827][   T28] audit: type=1326 audit(2000000627.374:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  776.283413][T14609] netlink: 'syz.6.2274': attribute type 10 has an invalid length.
[  776.295636][   T28] audit: type=1326 audit(2000000627.374:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14592 comm="syz.7.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f14e4f9c629 code=0x7ffc0000
[  776.411241][T14611] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2274'.
[  776.465926][T14613] netlink: 'syz.7.2275': attribute type 3 has an invalid length.
[  777.649747][T14629] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa
[  791.632977][T14726] vlan2: entered promiscuous mode
[  791.642990][T14729] bridge0: port 1(hsr0) entered blocking state
[  791.655554][T14729] bridge0: port 1(hsr0) entered disabled state
[  791.662213][T14729] hsr0: entered allmulticast mode
[  791.671297][T14729] hsr_slave_0: entered allmulticast mode
[  791.678707][T14729] hsr_slave_1: entered allmulticast mode
[  791.696914][T14729] hsr0: entered promiscuous mode
[  791.704834][T14729] bridge0: port 1(hsr0) entered blocking state
[  791.711253][T14729] bridge0: port 1(hsr0) entered listening state
[  793.195887][T14762] ipt_REJECT: ECHOREPLY no longer supported.
[  797.485893][T14804] overlayfs: failed to clone upperpath
[  799.704185][T14817] ipt_REJECT: ECHOREPLY no longer supported.
[  800.946493][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2328'.
[  807.118253][    C0] bridge0: port 1(hsr0) entered learning state
[  809.639400][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  809.645895][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  816.835618][T14985] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  818.356956][T14988] lo speed is unknown, defaulting to 1000
[  819.165386][T14982] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  821.857525][   T28] kauditd_printk_skb: 68 callbacks suppressed
[  821.857541][   T28] audit: type=1326 audit(2000000673.814:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  821.912982][   T28] audit: type=1326 audit(2000000673.814:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  821.961098][   T28] audit: type=1326 audit(2000000673.814:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  822.015429][   T28] audit: type=1326 audit(2000000673.824:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  822.107029][   T28] audit: type=1326 audit(2000000673.824:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  822.528396][    C0] bridge0: port 1(hsr0) entered forwarding state
[  822.534790][    C0] bridge0: topology change detected, propagating
[  823.395034][   T28] audit: type=1326 audit(2000000673.843:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  823.507456][   T28] audit: type=1326 audit(2000000673.852:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  823.606367][   T28] audit: type=1326 audit(2000000673.852:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  823.683690][   T28] audit: type=1326 audit(2000000673.852:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  823.736835][   T28] audit: type=1326 audit(2000000673.852:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15006 comm="syz.6.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965619c629 code=0x7ffc0000
[  828.419613][ T7544] ------------[ cut here ]------------
[  828.425766][ T7544] WARNING: CPU: 0 PID: 7544 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820
[  828.435488][ T7544] Modules linked in:
[  828.439462][ T7544] CPU: 0 PID: 7544 Comm: kworker/u4:16 Not tainted syzkaller #0
[  828.447192][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  828.457388][ T7544] Workqueue: iou_exit io_ring_exit_work
[  828.463067][ T7544] RIP: 0010:io_ring_exit_work+0x3a7/0x820
[  828.468839][ T7544] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00
[  828.488642][ T7544] RSP: 0018:ffffc90004ae7a40 EFLAGS: 00010293
[  828.494812][ T7544] RAX: ffffffff8a7bea87 RBX: ffff88807ea0c000 RCX: ffff88801828bc00
[  828.502833][ T7544] RDX: 0000000000000000 RSI: ffffffffffffffec RDI: 0000000000000000
[  828.510938][ T7544] RBP: ffffc90004ae7bb0 R08: ffffc90004ae79c7 R09: 1ffff9200095cf38
[  828.518996][ T7544] R10: dffffc0000000000 R11: fffff5200095cf39 R12: dffffc0000000000
[  828.527638][ T7544] R13: ffff88807ea0c288 R14: 000000010000cd54 R15: 000000010000cd68
[  828.535670][ T7544] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  828.544750][ T7544] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  828.551481][ T7544] CR2: 00007f237ba5a45e CR3: 000000001df91000 CR4: 00000000003506f0
[  828.559583][ T7544] Call Trace:
[  828.562913][ T7544]  <TASK>
[  828.565896][ T7544]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  828.571858][ T7544]  ? _raw_spin_unlock_irq+0x23/0x50
[  828.577108][ T7544]  ? process_scheduled_works+0x96f/0x15d0
[  828.583024][ T7544]  ? process_scheduled_works+0x96f/0x15d0
[  828.588796][ T7544]  process_scheduled_works+0xa5d/0x15d0
[  828.594548][ T7544]  ? assign_work+0x430/0x430
[  828.599203][ T7544]  ? assign_work+0x3d0/0x430
[  828.603915][ T7544]  worker_thread+0xa55/0xfc0
[  828.608590][ T7544]  kthread+0x2fa/0x390
[  828.612803][ T7544]  ? pr_cont_work+0x560/0x560
[  828.617541][ T7544]  ? kthread_blkcg+0xd0/0xd0
[  828.622250][ T7544]  ret_from_fork+0x48/0x80
[  828.626720][ T7544]  ? kthread_blkcg+0xd0/0xd0
[  828.631355][ T7544]  ret_from_fork_asm+0x11/0x20
[  828.636402][ T7544]  </TASK>
[  828.639465][ T7544] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  828.646865][ T7544] CPU: 0 PID: 7544 Comm: kworker/u4:16 Not tainted syzkaller #0
[  828.654527][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  828.664623][ T7544] Workqueue: iou_exit io_ring_exit_work
[  828.670245][ T7544] Call Trace:
[  828.673563][ T7544]  <TASK>
[  828.676529][ T7544]  dump_stack_lvl+0x18c/0x250
[  828.681263][ T7544]  ? show_regs_print_info+0x20/0x20
[  828.686503][ T7544]  ? load_image+0x400/0x400
[  828.691063][ T7544]  panic+0x2dc/0x730
[  828.695006][ T7544]  ? bpf_jit_dump+0xd0/0xd0
[  828.699573][ T7544]  ? ret_from_fork_asm+0x11/0x20
[  828.704557][ T7544]  __warn+0x2e0/0x470
[  828.708581][ T7544]  ? io_ring_exit_work+0x3a7/0x820
[  828.713740][ T7544]  ? io_ring_exit_work+0x3a7/0x820
[  828.718898][ T7544]  report_bug+0x2be/0x4f0
[  828.723286][ T7544]  ? io_ring_exit_work+0x3a7/0x820
[  828.728441][ T7544]  ? io_ring_exit_work+0x3a7/0x820
[  828.733616][ T7544]  ? io_ring_exit_work+0x3a9/0x820
[  828.738773][ T7544]  handle_bug+0xcf/0x120
[  828.743067][ T7544]  exc_invalid_op+0x1a/0x50
[  828.747642][ T7544]  asm_exc_invalid_op+0x1a/0x20
[  828.752537][ T7544] RIP: 0010:io_ring_exit_work+0x3a7/0x820
[  828.758391][ T7544] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00
[  828.778054][ T7544] RSP: 0018:ffffc90004ae7a40 EFLAGS: 00010293
[  828.784190][ T7544] RAX: ffffffff8a7bea87 RBX: ffff88807ea0c000 RCX: ffff88801828bc00
[  828.792224][ T7544] RDX: 0000000000000000 RSI: ffffffffffffffec RDI: 0000000000000000
[  828.800261][ T7544] RBP: ffffc90004ae7bb0 R08: ffffc90004ae79c7 R09: 1ffff9200095cf38
[  828.808274][ T7544] R10: dffffc0000000000 R11: fffff5200095cf39 R12: dffffc0000000000
[  828.816284][ T7544] R13: ffff88807ea0c288 R14: 000000010000cd54 R15: 000000010000cd68
[  828.824310][ T7544]  ? io_ring_exit_work+0x3a7/0x820
[  828.829499][ T7544]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  828.835378][ T7544]  ? _raw_spin_unlock_irq+0x23/0x50
[  828.840615][ T7544]  ? process_scheduled_works+0x96f/0x15d0
[  828.846375][ T7544]  ? process_scheduled_works+0x96f/0x15d0
[  828.852170][ T7544]  process_scheduled_works+0xa5d/0x15d0
[  828.857809][ T7544]  ? assign_work+0x430/0x430
[  828.862451][ T7544]  ? assign_work+0x3d0/0x430
[  828.867089][ T7544]  worker_thread+0xa55/0xfc0
[  828.871760][ T7544]  kthread+0x2fa/0x390
[  828.875864][ T7544]  ? pr_cont_work+0x560/0x560
[  828.880591][ T7544]  ? kthread_blkcg+0xd0/0xd0
[  828.885232][ T7544]  ret_from_fork+0x48/0x80
[  828.889695][ T7544]  ? kthread_blkcg+0xd0/0xd0
[  828.894329][ T7544]  ret_from_fork_asm+0x11/0x20
[  828.899154][ T7544]  </TASK>
[  828.906397][ T7544] Kernel Offset: disabled
[  828.910851][ T7544] Rebooting in 86400 seconds..