last executing test programs:

10m27.30960702s ago: executing program 3 (id=39):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x3, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885f", 0x2}], 0x1}}], 0x1, 0x24008001)
r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x18000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0xc)
setresuid(r8, r8, 0xee01)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000002640)={0xa0, 0x0, 0x0, {{0x2, 0x3, 0x4, 0xffffffff, 0x4, 0x9, {0x8, 0xf4, 0x659d, 0x3ff, 0x40, 0xffffffff80000000, 0x5, 0x7, 0xd90, 0x2000, 0x9, r8, 0x0, 0x5, 0xfffffffb}}, {0x0, 0x11}}}, 0xa0)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x136)

10m25.011073212s ago: executing program 3 (id=41):
r0 = inotify_init()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab)
r2 = io_uring_setup(0x76b0, &(0x7f00000000c0)={0x0, 0x1947c, 0x1})
io_uring_enter(r2, 0x0, 0x2, 0xf, 0x0, 0x0)
r3 = io_uring_setup(0xc01, &(0x7f00000003c0)={0x0, 0xf3f0, 0x2, 0x2, 0x20b, 0x0, r2})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380), 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x69, 0x6, 0x4f}, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
getpgrp(0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
socket(0x2b, 0x1, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x4, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x3)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000580)={0x0, 0xe77e, 0x100, 0x1, 0xb4, 0x0, r3}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62d4, 0x20, 0x0, 0x29f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb902, 0x40, 0x3, 0x5}, <r10=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde2, 0x20000, 0x3, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x937b, 0x8000, 0x0, 0x100, 0x0, r3}}], 0x4, &(0x7f0000001b00)={0x2e, 0x1, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x3, 0x712, 0x0, &(0x7f0000000b00)=@buf_1k="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"}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000001bc0)=[r0, r3], 0x2)
close_range(r6, 0xffffffffffffffff, 0x0)

10m21.673974768s ago: executing program 3 (id=48):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x2, 0x5, 'syz1\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
syz_usb_connect(0x6, 0xffffffffffffff7d, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0xe04, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xc, 0x0, @l2={'ib', 0x3a, 'team_slave_1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, 0x0)
ioctl$SG_BLKTRACESTART(r6, 0x1274, 0x0)

10m16.674184993s ago: executing program 3 (id=55):
r0 = io_uring_setup(0xe67, &(0x7f0000000000)={0x0, 0xa14a, 0x40, 0x2, 0x3bd})
r1 = socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x900, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x8000)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0)
recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {0x0}], 0x3}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)
close_range(r0, 0xffffffffffffffff, 0x0)

10m3.67862953s ago: executing program 3 (id=68):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa})
socket(0x2, 0xa, 0x300)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r4, 0xa, 0x21)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
close_range(r4, r5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

10m0.852657795s ago: executing program 3 (id=72):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa})
socket(0x2, 0xa, 0x300)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r4, 0xa, 0x21)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
close_range(r4, r5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

9m45.012739967s ago: executing program 32 (id=72):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xfffc, 0x100, 0xee}, 'syz0\x00', 0xa})
socket(0x2, 0xa, 0x300)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r4, 0xa, 0x21)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
close_range(r4, r5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

4m30.223758952s ago: executing program 1 (id=580):
io_uring_setup(0xe67, &(0x7f0000000000)={0x0, 0xa14a, 0x40, 0x2, 0x3bd})
r0 = socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd70"], 0x18}}, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

4m22.900574071s ago: executing program 1 (id=588):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0x10, &(0x7f00000003c0)={0x1, 0x6}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockname$packet(r0, 0x0, &(0x7f0000000540))
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x28000081}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r7, &(0x7f0000000080)='4', 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x200)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m20.400922679s ago: executing program 1 (id=589):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0])
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x18, 0x3a, 0xff, @loopback, @private2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}}}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket(0x2, 0x80805, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0xfffffe14)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50)

4m19.206916567s ago: executing program 1 (id=592):
r0 = inotify_init()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab)
r2 = io_uring_setup(0x76b0, &(0x7f00000000c0)={0x0, 0x1947c, 0x1})
io_uring_enter(r2, 0x0, 0x2, 0xf, 0x0, 0x0)
r3 = io_uring_setup(0xc01, &(0x7f00000003c0)={0x0, 0xf3f0, 0x2, 0x2, 0x20b, 0x0, r2})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380), 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x69, 0x6, 0x4f}, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
getpgrp(0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
socket(0x2b, 0x1, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x4, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x3)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10)
syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62d4, 0x20, 0x0, 0x29f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb902, 0x40, 0x3, 0x5}, <r10=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde2, 0x20000, 0x3, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x937b, 0x8000, 0x0, 0x100, 0x0, r3}}], 0x4, &(0x7f0000001b00)={0x2e, 0x1, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x3, 0x712, 0x0, &(0x7f0000000b00)=@buf_1k="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"}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000001bc0)=[r0, r3], 0x2)
close_range(r6, 0xffffffffffffffff, 0x0)

4m15.242254428s ago: executing program 1 (id=596):
r0 = inotify_init()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab)
r2 = io_uring_setup(0x76b0, &(0x7f00000000c0)={0x0, 0x1947c, 0x1})
io_uring_enter(r2, 0x0, 0x2, 0xf, 0x0, 0x0)
r3 = io_uring_setup(0xc01, &(0x7f00000003c0)={0x0, 0xf3f0, 0x2, 0x2, 0x20b, 0x0, r2})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380), 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x69, 0x6, 0x4f}, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
getpgrp(0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
socket(0x2b, 0x1, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x4, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x3)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000580)={0x0, 0xe77e, 0x100, 0x1, 0xb4, 0x0, r3}, 0x0, 0x4, &(0x7f0000001b00)={0x2e, 0x1, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x3, 0x712, 0x0, &(0x7f0000000b00)=@buf_1k="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"}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001bc0)=[r0, r3], 0x2)
close_range(r6, 0xffffffffffffffff, 0x0)

4m11.842249727s ago: executing program 1 (id=600):
r0 = inotify_init()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab)
r2 = io_uring_setup(0x76b0, &(0x7f00000000c0)={0x0, 0x1947c, 0x1})
io_uring_enter(r2, 0x0, 0x2, 0xf, 0x0, 0x0)
r3 = io_uring_setup(0xc01, &(0x7f00000003c0)={0x0, 0xf3f0, 0x2, 0x2, 0x20b, 0x0, r2})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380), 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x69, 0x6, 0x4f}, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
getpgrp(0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
socket(0x2b, 0x1, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x4, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x3)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000580)={0x0, 0xe77e, 0x100, 0x1, 0xb4, 0x0, r3}, 0x0, 0x4, &(0x7f0000001b00)={0x2e, 0x1, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x3, 0x712, 0x0, &(0x7f0000000b00)=@buf_1k="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"}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001bc0)=[r0, r3], 0x2)
close_range(r6, 0xffffffffffffffff, 0x0)

3m56.426361283s ago: executing program 33 (id=600):
r0 = inotify_init()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab)
r2 = io_uring_setup(0x76b0, &(0x7f00000000c0)={0x0, 0x1947c, 0x1})
io_uring_enter(r2, 0x0, 0x2, 0xf, 0x0, 0x0)
r3 = io_uring_setup(0xc01, &(0x7f00000003c0)={0x0, 0xf3f0, 0x2, 0x2, 0x20b, 0x0, r2})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380), 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x69, 0x6, 0x4f}, 0x1)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
getpgrp(0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
socket(0x2b, 0x1, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x4, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x3)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x0, 0x0}, 0x10)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000580)={0x0, 0xe77e, 0x100, 0x1, 0xb4, 0x0, r3}, 0x0, 0x4, &(0x7f0000001b00)={0x2e, 0x1, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf}, 0x0, 0x0, '\x00', {0x3, 0x712, 0x0, &(0x7f0000000b00)=@buf_1k="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"}}, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001bc0)=[r0, r3], 0x2)
close_range(r6, 0xffffffffffffffff, 0x0)

2m19.014247446s ago: executing program 4 (id=853):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x46, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xf5)
r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setsig(0x4203, r7, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})

2m17.803927064s ago: executing program 4 (id=856):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f000001fd00)='./file1\x00', 0xe042, 0xe1)
mknod(&(0x7f0000000040)='./bus\x00', 0xa18, 0x13)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./bus\x00')

2m17.326808425s ago: executing program 4 (id=858):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

2m17.002760242s ago: executing program 4 (id=861):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='\b', 0xffffff54}], 0x1, 0x7000, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@auto_da_alloc}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
readv(r1, &(0x7f00000042c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1)

2m16.432473565s ago: executing program 4 (id=865):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}, {@force}, {@nls={'nls', 0x3d, 'macromanian'}}]}, 0x1, 0x5df, &(0x7f0000000cc0)="$eJzs3UFrHOcZB/D/rGRZcsFREjtJ3UJECsXExNauTNpCoWoxRYdgAr3kKup1LLx2grQpmxyKWvxB0oN6yqGXEig95OBzD/kCgh4LhR5FLy4zO7vaWLIs1ZJ2lfx++N15R+/MM888nnnRzgo2wHfWygc5t5kiK9fe65Xr21tLne2tpQeDfpLzSRrVv0yX3X8mU4+ShfRbvp+kqMMVzzrOl60vrnx9u3e1v9aoW7X91EH7Hc5m3bJcJ7l8jPEev3C8YniGZdBbg+CT4Mnz/ecEDz91grE5guIZ/xfzyYUks/U8MLhwG6eb3fGbmBsQAAAATtBLO9lJLxfHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJfX3/xd1awz6CykG3/8/U/8sdf9M+2rcCQAAAAAAAADAMXhzJzvp5eJg/UlRfeb/VrVyqXr9Xj7JRtpZz/X0sppuullPM8n8SKCZ3mq3u948xJ6tffdsnc75AgAAAAAAAMC31B+zsvv5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIIimeovqnZp0J9PYzrJbJKZcrvN5O+D/ln21bgTAAAAgFPw0k520svFwfqTonrP/1r1vn82n+RhullLN520c6d6FtB/19/Y3lrqbG8tPSjb3ri//PeR0qgipv/sYf8jL1ZbXB7usZJf5ze5loW8n/Ws5XdZTTftLORW1VtNkfn66cX8IM/9813+xtr7z8v1jSqTudzNWpXb9fw2H6WTO2lU51Btc/AR/1BWp/hF7ZA1ulMvi6T4QX1mk2G+qsi5YUUW69qX1Xj54Eoc8Tp5+kjNNIbPoC6dQM0v1Muy5rOTUvMykT2VaI1cfa8dXInkne5f37zXeXj/3t2NaxNxSi/i6UosjVTi9e9UJWbqavRn0aPNlm9V+17MWm7no9xJOz/Ju2lVbalajtb18iHutcbR7rUfXa07ryTFXH85Icq6vjxS19GZbr4aG/3JbpVeOf4ZafpK3ZlKiulhTpPg6Uo0Ryrx6sGV+NOT8nWj8/D++r3Vjw95vB/Xy3JuPj8pc3Nlpr56p6u1b14d5dir+441q7FLw7HGnrHLw7Hn3akz9e9weyO1qrHX9x3r7/fGyNh+v+UAMPEuvH1hZu5fc/+Y+3zu0dy9ufdmf3X+p+d/OJNzj6f/NvWXxp8bPy/ezuf5/e77fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P+38eln91c7nfb6cXdSfzPP8UfW0TlEZ3Yy0jiznXHPTJyGG90HH9/Y+PSzd9YerH7Y/rD98OZiq/nuzebPbt64u9ZpL/Zfx50lJ2X3ph93JgAAAAAAAAAAABzFafw56bjPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLNj5YOc20yR5uL1xXJ9e2upU7ZBf3fLRpLpcvnfZOpRspB+y/xIuOJZx/my9cWVr2/3ru7Gagy2nzpov8PZrFuW6ySXjzHe4xeOVwzPsAx6axAcxu1/AQAA//+/ZBqC")
unlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

2m15.704809392s ago: executing program 4 (id=868):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x41, 0x10000, 0x5, 0x4, 0x3, 0x108000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x6, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

2m11.131902998s ago: executing program 5 (id=880):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_io_uring_complete(0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000002c0)=0x7)
close_range(r0, r1, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

2m10.873768174s ago: executing program 5 (id=882):
r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000780)={{r0}, 0x0, 0x0, @unused=[0x8, 0x2, 0x37, 0xfc], @devid})

2m8.857969161s ago: executing program 5 (id=886):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

2m8.173457796s ago: executing program 5 (id=887):
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@rodir}, {@utf8}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@fat=@errors_continue}, {@numtail}, {@utf8no}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}]}, 0x7b, 0x2da, &(0x7f0000000000)="$eJzs3c1qJFUUAOBTneqfOEJ64UoEC3ThKsyML5AgEQezUmqhGx2cDEi6GUigwR9MZuVecOU7uPMBfABBfAMXLkfcOYvBkq6fru5OJzOtyegM37epU3XvuXXr9qUTGvr0x6+MD+/cO757/8tfYzBIorMTO/EwiWF0onEarX4AAM+6h0URfxSVx/XtLZylnaucFwBwdZ747//GU5sSAHDF3v/gw3d39/f33suyQcT460meRHWs2nfvxqcxioO4HlvxKKKYqeIXb+3vRZplzYcBk83II8Yf/VSf7z6IKPNvxFYMFvKvtbPISvH6+GSST+88PXbjhSRit0iqLjdjK16KKLpRD1Id3r61v3czO5sfeS/eeO27ev5/HcR2bMUvn8S9GMWdcog2/6sbWfZW8e2fX1RPkEckJ5O8X/ZrFf4DAgAAAAAAAAAAAAAAAAAAAADg0mxnM8P5+jlNNcDt7eX2NI/4fdzkt/WBdqKsD1RX+DmZq69zPcuypozPJO9GVd8njZfTSP+r5wYAAAAAAAAAAAAAAAAAAID/k+PPPj+8PRodHC0EPxbTYPPCPstBOnel+Vr/47NWB4ffR6yfdWHwTq8MYqOe2ig5c4ukaVpj5B/OaepXQT3i6cXjbK66aXTOW8N0FNXkv1l/NV5d9wGfPBi2U2121+HtJJo+cVqv7mLWYJZV9GPWeTS365pteHScrLEhixVLt3FuVu+SFqF37Z+mb8bylX7E9HWO7mwxF7MGS4vZnQY/X9pruvxOkczFnX//xgMAAAAAAAAAAAAAAAAAAJzRfuk3fjvTeH/hzG/1AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDcan//fxbEcPnKcnBSJ5dXOnXWo6JY1bl/dLzitsN4szw+eKoPCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHPr7wAAAP//qcZLYg==")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

2m7.726833967s ago: executing program 5 (id=889):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0x40)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
fsync(r0)

2m5.889811669s ago: executing program 5 (id=898):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_setup(0xdffffff8, 0x0)
io_submit(0x0, 0x1, &(0x7f00000018c0)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x2}])
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200081, &(0x7f0000000040), 0x3, 0x57e, &(0x7f0000000e40)="$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")
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x2)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1)

2m5.372946871s ago: executing program 34 (id=898):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
io_setup(0xdffffff8, 0x0)
io_submit(0x0, 0x1, &(0x7f00000018c0)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x2}])
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200081, &(0x7f0000000040), 0x3, 0x57e, &(0x7f0000000e40)="$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")
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x2)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1)

2m0.392515566s ago: executing program 35 (id=868):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x41, 0x10000, 0x5, 0x4, 0x3, 0x108000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x6, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

12.645843687s ago: executing program 8 (id=1359):
syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xa0040a, &(0x7f0000000000), 0x21, 0x4c0, &(0x7f0000001740)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu85Z5jvOXNzzxlO23sCGFjnI2I7IkYj4n5ETLXLk3aKW62Uve7Vy8cLOy8fLyTRbN79T5LXZ2Wx799kTrbfczwifvqjiF8kb8atb26tzFcq5fV2vtiorhXrm1tXlqvzS+Wl8mqpNDc7N3Pj6vXSkfX1XPUPL364fPtnf/7TN57/dfv7v8qaNdmu29+Po9Tq+shenKxgOCJufxHB+mAoWv0ZPVDe4ZLzAUoj4ksRcSG//6diKL+aAMBx1mxORXNqfx4AOO7SfA0sSQvttYDJSNNCobWGdzYm0kqt3rj8oLaxuthaK5uOkfTBcqU8014rnI6RJMvP5uev86UD+asRcSYifj12Is8XFmqVxX5+8QGAAXbywPz//7HW/A8AHHPj/W4AANBz5n8AGDzmfwAYPOZ/ABg85n8AGDzmfwAYPOZ/ABgoP7lzJ0vNnfbzrxcfbm6s1B5eWSzXVwrVjYXCQm19rbBUqy3lz+ypvuv9KrXa2uy12HhUbJTrjWJ9c+tetbax2riXP9f7XnmkJ70CAN7mzLlnf08iYvvmiTzFvr0czNVwvKX9bgDQN0P9bgDQN3b7gsHl//jAu/Zr7forQk+Pvi1Ab1z6qvV/GFTW/2FwWf+HwWX9HwZXs5nY8x8ABow1fsDP/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODzm8xTkhbae4FPRpoWChGnImI6RpIHy5XyTEScjoi/jY2MZfnZfjcaAHhP6b+S+Ki9DeDFyYO1o8nHY/kxIn7527u/eTTfaKzPZuX/3StvPG2Xl3reeADgEHbn6d15fNerl48XdlMv2/PiB63NRbO4O+3UqhmO4fw4HtmXk4n/Je18SxIRQ0cQf/tJRHylU/+TfG1kur3z6cH4WexTPY2ffiZ+mte1jtln8eUjaAsMmmfZ+HOr0/2Xxvn82Pn+H89HqPe3O/7tHBz/kuG9SENdxr/zh41x7S8/Hu1W9yTia8Md4keyN/4mXeJfPGT8f3z9mxe61TV/F3EpOsffH6vYqK4V65tbV5ar80vlpfJqqTQ3Ozdz4+r1UjFfoy7urlS/6d83L5/uFj/r/0SX+PmVvzPZtf/fOWT/f//J/Z9/6y3xv/ftTvHTOJsfO3/+2Zz43UPGn5/4Y9ftu7P4i136/67rf/mQ8Z//c2vxkC8FAHqgvrm1Ml+plNedONk72f2m96G0p/tJc6rV0g+lPcfnpJ+jEtALr2/6frcEAAAAAAAAAAAAAADophd/TtTvPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8fRoAAP//wLrUnw==")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x11, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_stats={0x2b}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r4)
mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
syz_pidfd_open(0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x890)

10.195596564s ago: executing program 8 (id=1368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b", 0x4b}], 0x1}, 0x8800)

9.365493813s ago: executing program 8 (id=1371):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x46, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0)
r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})

8.893638924s ago: executing program 8 (id=1375):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})

8.247955449s ago: executing program 8 (id=1377):
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d07, &(0x7f0000000340))

8.036038404s ago: executing program 8 (id=1379):
syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0xa0040a, &(0x7f0000000000), 0x21, 0x4c0, &(0x7f0000001740)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x11, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_stats={0x2b}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r4)
mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
syz_pidfd_open(0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x890)

6.04347661s ago: executing program 6 (id=1390):
timer_getoverrun(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)

4.062136826s ago: executing program 0 (id=1399):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x46, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0)
r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})

3.916929719s ago: executing program 7 (id=1401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b7000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.640961876s ago: executing program 0 (id=1403):
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="7911a800000000008500000088000000b7000000000000009500000000000000"], &(0x7f0000001100)='GPL\x00', 0x1, 0x1000, &(0x7f0000000000)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
write(0x2, &(0x7f0000000000), 0x1000)

3.640661356s ago: executing program 7 (id=1404):
nanosleep(&(0x7f0000000200)={0x0, 0x2faf0800}, 0x0)

3.319981383s ago: executing program 0 (id=1406):
timer_getoverrun(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="de6896034bbcb6b7f2b1c08f13ea12f568e87ef55137e9c51acb300b4edd91b1430000dde8c74e5e406c38ef268a449faf90815ace6dddc52cb0d615e995ad59f786e0364789eee5ae6229968a8b188a1f5f0c9c5ce25e0a8639bbc061572b83781ebd7104617ca7f6e45e2cddd81f777a5f5bd885d55bc10b76d87ad6dc7ea6e19ca9891f062c91bc42940cbc35608d8bbe197ba80fb6405c56660c5124d37690fac67816", @ANYRES64=0x0], 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
io_setup(0x4, &(0x7f0000000080))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'veth0_to_bond\x00', &(0x7f00000006c0)=@ethtool_perm_addr={0x20, 0xbb, "02a7646fb6f080ec47fe5e1e48ecc8ebfa32858effe2791588ebafc8740b2d073f125ac573130531cbaff626a67ca64d0c71cba83001d6c625086b060415eb316ec83ac1840a5c6318b69a527e6adad2eaee620324d2abbac417ec20082330efb8de997dc67049067d7c255f114f6add1f99f87239912f2f0ba9b073b2cc0b394cb851fe2fe607db294393995b05a8c44a7b071c574813f35b1d3c48331b9ac5ea5ff288756705d9e8e21009b33b2a4b957ab98d3970ae56bdc163"}})
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x20, 0x80, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x8, 0x131, 0xff, 0x80, 0x0, [0x0, 0xfffffffe]}})
socket$netlink(0x10, 0x3, 0x2)

2.246397808s ago: executing program 0 (id=1407):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x101701)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
open(0x0, 0x149040, 0x10)
r2 = gettid()
syz_usb_connect(0x0, 0x42, 0x0, 0x0)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000280)=0x800000)
syz_open_dev$usbmon(&(0x7f0000000180), 0x9, 0x400002)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0)

2.243323358s ago: executing program 2 (id=1408):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pim6reg0\x00'})
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r1, 0x2007ffb)
sendfile(r1, r1, 0x0, 0x1000000201005)

2.125932411s ago: executing program 7 (id=1409):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d000000000000000017000000080003", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

2.123975251s ago: executing program 2 (id=1410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x40050, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x84, 0x6, @local}, 0x14)

2.099602991s ago: executing program 6 (id=1411):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

1.925796365s ago: executing program 7 (id=1412):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})

1.700664101s ago: executing program 6 (id=1413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x46, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000cc0)={0x1f, 0x2, 0x3}, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0)
r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setsig(0x4203, r2, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})

1.674117531s ago: executing program 7 (id=1414):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
listen(r0, 0x1)
sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x110, 0x1}, {0x10, 0x110, 0xe}], 0x20}, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x12}, 0x0)

1.512654815s ago: executing program 2 (id=1415):
dup2(0xffffffffffffffff, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d07, &(0x7f0000000340))

1.397841197s ago: executing program 6 (id=1416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001100010000000000000000000000000000000000000000000000000008000300666f6f00"], 0x28}}, 0x0)

1.352890768s ago: executing program 2 (id=1417):
timer_getoverrun(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="de6896034bbcb6b7f2b1c08f13ea12f568e87ef55137e9c51acb300b4edd91b1430000dde8c74e5e406c38ef268a449faf90815ace6dddc52cb0d615e995ad59f786e0364789eee5ae6229968a8b188a1f5f0c9c5ce25e0a8639bbc061572b83781ebd7104617ca7f6e45e2cddd81f777a5f5bd885d55bc10b76d87ad6dc7ea6e19ca9891f062c91bc42940cbc35608d8bbe197ba80fb6405c56660c5124d37690fac67816", @ANYRES64=0x0], 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
io_setup(0x4, &(0x7f0000000080))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'veth0_to_bond\x00', &(0x7f00000006c0)=@ethtool_perm_addr={0x20, 0xbb, "02a7646fb6f080ec47fe5e1e48ecc8ebfa32858effe2791588ebafc8740b2d073f125ac573130531cbaff626a67ca64d0c71cba83001d6c625086b060415eb316ec83ac1840a5c6318b69a527e6adad2eaee620324d2abbac417ec20082330efb8de997dc67049067d7c255f114f6add1f99f87239912f2f0ba9b073b2cc0b394cb851fe2fe607db294393995b05a8c44a7b071c574813f35b1d3c48331b9ac5ea5ff288756705d9e8e21009b33b2a4b957ab98d3970ae56bdc163"}})
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x20, 0x80, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x8, 0x131, 0xff, 0x80, 0x0, [0x0, 0xfffffffe]}})
socket$netlink(0x10, 0x3, 0x2)

1.30312801s ago: executing program 6 (id=1418):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

255.631294ms ago: executing program 6 (id=1419):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10)
listen(r0, 0x5)
syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='secret\x00', &(0x7f0000000700)='AQAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA==\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='mount_timeout\x00', &(0x7f0000000900)='1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
write(r2, &(0x7f0000000a00)='ceph v2\n\x00\x00', 0xa)

255.310274ms ago: executing program 2 (id=1420):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pim6reg0\x00'})
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r1, 0x2007ffb)
sendfile(r1, r1, 0x0, 0x1000000201005)

255.086114ms ago: executing program 7 (id=1421):
timer_getoverrun(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)

239.102564ms ago: executing program 0 (id=1422):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d000000000000000017000000080003", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

879.18µs ago: executing program 2 (id=1423):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0)
read(r0, &(0x7f0000000200)=""/256, 0x100)

0s ago: executing program 0 (id=1424):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

kernel console output (not intermixed with test programs):

92] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  470.679655][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  470.687609][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  470.738115][ T7077] Cannot find add_set index 0 as target
[  470.812406][ T7078] overlayfs: conflicting options: nfs_export=on,index=off
[  471.595785][ T7081] loop2: detected capacity change from 0 to 512
[  471.643150][ T7081] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  472.917274][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[  473.140060][ T7081] EXT4-fs (loop2): 1 truncate cleaned up
[  473.146072][ T7081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  474.653808][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  475.032228][ T4290] Bluetooth: hci0: command 0x041b tx timeout
[  476.543283][ T7115] Cannot find add_set index 0 as target
[  477.062203][ T4292] Bluetooth: hci0: command 0x040f tx timeout
[  477.693816][ T7138] blktrace: Concurrent blktraces are not allowed on sg0
[  477.865848][ T7067] chnl_net:caif_netlink_parms(): no params data found
[  479.461042][ T4292] Bluetooth: hci0: command 0x0419 tx timeout
[  485.114733][ T7067] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.140484][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.133606][ T7067] device bridge_slave_0 entered promiscuous mode
[  486.352330][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.359488][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.418144][ T7184] Cannot find add_set index 0 as target
[  486.488360][ T7067] device bridge_slave_1 entered promiscuous mode
[  488.264676][ T7067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  489.850742][ T7067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.587146][ T7067] team0: Port device team_slave_0 added
[  491.528181][ T7067] team0: Port device team_slave_1 added
[  491.676631][ T7226] Cannot find add_set index 0 as target
[  492.457472][ T4416] device hsr_slave_0 left promiscuous mode
[  492.535248][ T7228] Cannot find add_set index 0 as target
[  492.964533][ T4416] device hsr_slave_1 left promiscuous mode
[  493.027230][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.959148][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.645204][ T4416] device bridge_slave_1 left promiscuous mode
[  496.651496][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.741434][ T4416] device bridge_slave_0 left promiscuous mode
[  497.752579][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.259696][ T7276] Cannot find add_set index 0 as target
[  501.472740][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.479118][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.608090][ T7286] zonefs (nullb0) ERROR: Not a zoned block device
[  502.477860][ T7287] Cannot find add_set index 0 as target
[  503.128684][ T7297] Cannot find add_set index 0 as target
[  503.148609][ T7297] overlayfs: conflicting options: nfs_export=on,index=off
[  504.058769][ T4416] team0 (unregistering): Port device team_slave_1 removed
[  504.231598][ T4416] team0 (unregistering): Port device team_slave_0 removed
[  505.753148][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.800993][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.588446][ T4416] bond0 (unregistering): Released all slaves
[  508.383656][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  508.401325][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  508.409718][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  508.447047][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  508.455192][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  508.462624][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  510.624187][ T4285] Bluetooth: hci2: command 0x0409 tx timeout
[  511.789028][ T7067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.254998][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[  513.882684][ T7067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.926708][ T7067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.939609][ T7067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.947063][ T7067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.973288][ T7067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.174287][ T7349] Cannot find add_set index 0 as target
[  514.250177][ T7350] overlayfs: missing 'lowerdir'
[  514.973155][ T7067] device hsr_slave_0 entered promiscuous mode
[  515.112669][ T7067] device hsr_slave_1 entered promiscuous mode
[  515.125486][ T7067] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  515.142816][ T7067] Cannot create hsr debugfs directory
[  515.235928][ T7357] Cannot find add_set index 0 as target
[  515.302335][ T4285] Bluetooth: hci2: command 0x040f tx timeout
[  515.316838][ T7358] overlayfs: missing 'lowerdir'
[  517.306534][ T7323] chnl_net:caif_netlink_parms(): no params data found
[  518.619687][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[  521.450890][ T7402] Cannot find add_set index 0 as target
[  521.524053][ T7403] overlayfs: missing 'lowerdir'
[  524.990695][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.034761][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.080049][ T7323] device bridge_slave_0 entered promiscuous mode
[  527.380586][ T4416] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.397871][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.406338][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.421738][ T7323] device bridge_slave_1 entered promiscuous mode
[  527.484585][ T4416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.561407][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.577971][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.626967][ T4416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.660105][ T7323] team0: Port device team_slave_0 added
[  527.677405][ T7323] team0: Port device team_slave_1 added
[  527.727909][ T4416] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.778728][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.802233][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.891000][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.172443][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.340023][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.480684][ T7465] Cannot find add_set index 0 as target
[  529.552553][ T7466] overlayfs: conflicting options: nfs_export=on,index=off
[  529.914392][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.204360][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  531.241929][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  531.250599][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  531.259072][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  531.266806][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  531.274235][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  533.357621][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[  533.576165][ T7323] device hsr_slave_0 entered promiscuous mode
[  533.617291][ T7323] device hsr_slave_1 entered promiscuous mode
[  533.739995][ T7323] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  533.768151][ T7323] Cannot create hsr debugfs directory
[  535.576256][ T4285] Bluetooth: hci0: command 0x041b tx timeout
[  535.835128][ T7521] Cannot find add_set index 0 as target
[  535.935153][ T7523] overlayfs: missing 'lowerdir'
[  536.370522][ T7525] x_tables: duplicate underflow at hook 3
[  536.418402][ T7525] blktrace: Concurrent blktraces are not allowed on sg0
[  537.623454][ T4292] Bluetooth: hci0: command 0x040f tx timeout
[  540.082093][ T4292] Bluetooth: hci0: command 0x0419 tx timeout
[  542.502413][ T7323] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  542.516158][ T7323] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  543.280821][ T7473] chnl_net:caif_netlink_parms(): no params data found
[  543.835909][ T7323] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  543.975535][ T7323] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  549.146812][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.208296][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.254392][ T7473] device bridge_slave_0 entered promiscuous mode
[  549.302300][ T7617] Cannot find add_set index 0 as target
[  549.318555][ T7617] overlayfs: conflicting options: nfs_export=on,index=off
[  550.147631][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.542892][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.592983][ T7473] device bridge_slave_1 entered promiscuous mode
[  550.687643][ T4416] device hsr_slave_0 left promiscuous mode
[  550.710251][ T4416] device hsr_slave_1 left promiscuous mode
[  550.729955][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.888374][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.627551][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.655534][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.749557][ T4416] device bridge_slave_1 left promiscuous mode
[  551.787431][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.173273][ T4416] device bridge_slave_0 left promiscuous mode
[  552.198062][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.590102][ T4416] device veth1_macvtap left promiscuous mode
[  552.610202][ T4416] device veth0_macvtap left promiscuous mode
[  552.619602][ T4416] device veth1_vlan left promiscuous mode
[  552.625721][ T4416] device veth0_vlan left promiscuous mode
[  553.892961][ T7640] Cannot find add_set index 0 as target
[  553.970197][ T7642] overlayfs: conflicting options: nfs_export=on,index=off
[  554.313699][ T7658] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  554.446573][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  554.642494][    T7] usb 1-1: Using ep0 maxpacket: 16
[  554.673833][    T7] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  554.694929][    T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  554.707687][    T7] usb 1-1: config 1 has no interface number 0
[  554.718233][    T7] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  554.731514][    T7] usb 1-1: config 1 interface 105 has no altsetting 0
[  554.766311][    T7] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  554.778582][ T4416] team0 (unregistering): Port device team_slave_1 removed
[  554.782066][    T7] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  554.802105][    T7] usb 1-1: Product: syz
[  554.806508][    T7] usb 1-1: Manufacturer: syz
[  554.811147][    T7] usb 1-1: SerialNumber: syz
[  554.940434][ T4416] team0 (unregistering): Port device team_slave_0 removed
[  555.071582][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.071611][    T7] aqc111: probe of 1-1:1.105 failed with error -22
[  555.162818][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.312429][ T4407] usb 1-1: USB disconnect, device number 2
[  555.641668][ T7681] loop4: detected capacity change from 0 to 512
[  555.753269][ T7681] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.686: bg 0: block 5: invalid block bitmap
[  555.776612][ T7681] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  555.788782][ T7681] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.686: invalid indirect mapped block 3 (level 2)
[  555.813105][ T4416] bond0 (unregistering): Released all slaves
[  555.847534][ T7681] EXT4-fs (loop4): 1 orphan inode deleted
[  555.857299][ T7681] EXT4-fs (loop4): 1 truncate cleaned up
[  555.873146][ T7681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  556.006188][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  556.087726][ T7473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.199507][ T7473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.273481][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.284200][ T7697] loop4: detected capacity change from 0 to 256
[  556.296422][ T7473] team0: Port device team_slave_0 added
[  556.320459][ T7473] team0: Port device team_slave_1 added
[  556.386207][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  556.388447][ T7697] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  556.402880][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  556.477189][ T7323] 8021q: adding VLAN 0 to HW filter on device team0
[  556.512546][   T26] audit: type=1800 audit(1789061250.038:2): pid=7697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.691" name="file1" dev="loop4" ino=1048595 res=0 errno=0
[  556.609040][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.640585][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.678788][ T7473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.747583][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.779477][   T26] audit: type=1800 audit(1789061250.308:3): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.691" name="bus" dev="loop4" ino=1048596 res=0 errno=0
[  556.813189][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.874483][ T7711] loop7: detected capacity change from 0 to 7
[  556.892341][ T7473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.928351][   T94] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.959959][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  556.969329][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.028622][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  557.038127][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  557.046765][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.056068][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.074172][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.083428][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.084537][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.098421][ T4616] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.122733][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.132061][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.142494][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.151735][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.152448][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  557.175511][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.184744][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.202245][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.211502][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.214199][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  557.227403][ T7711] ldm_validate_partition_table(): Disk read failed.
[  557.235893][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.245114][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.267668][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.274867][ T4616] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.302559][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  557.311742][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.332482][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  557.352899][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  557.361480][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  557.420946][ T7711] Dev loop7: unable to read RDB block 0
[  557.430764][ T7711]  loop7: unable to read partition table
[  557.448334][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  557.475047][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  557.499512][ T7711] loop7: partition table beyond EOD, truncated
[  557.510611][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  557.530385][ T7711] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  557.554708][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  557.563890][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  557.572989][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  557.581773][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  557.595347][ T7323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  557.618617][ T7323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  557.646285][ T7473] device hsr_slave_0 entered promiscuous mode
[  557.704414][ T7473] device hsr_slave_1 entered promiscuous mode
[  557.772269][ T7473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.798973][ T7473] Cannot create hsr debugfs directory
[  557.877122][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  558.051511][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  558.370248][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  560.005720][ T7473] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  560.037389][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  560.082490][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  560.096759][ T4416] device hsr_slave_0 left promiscuous mode
[  560.113918][ T4416] device hsr_slave_1 left promiscuous mode
[  560.132575][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  560.171974][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  560.180255][ T4416] device bridge_slave_1 left promiscuous mode
[  560.210815][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.232131][ T4416] device bridge_slave_0 left promiscuous mode
[  560.238467][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.760737][ T4416] team0 (unregistering): Port device team_slave_1 removed
[  560.828736][ T4416] team0 (unregistering): Port device team_slave_0 removed
[  561.333690][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.818418][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.974858][ T4416] bond0 (unregistering): Released all slaves
[  562.027962][ T7473] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  562.050034][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.066630][ T7772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.708'.
[  562.078685][ T7772] FAULT_INJECTION: forcing a failure.
[  562.078685][ T7772] name failslab, interval 1, probability 0, space 0, times 1
[  562.112093][ T7772] CPU: 1 PID: 7772 Comm: syz.0.708 Not tainted syzkaller #0
[  562.119452][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  562.129523][ T7772] Call Trace:
[  562.132891][ T7772]  <TASK>
[  562.135860][ T7772]  dump_stack_lvl+0x188/0x24e
[  562.140697][ T7772]  ? show_regs_print_info+0x12/0x12
[  562.145931][ T7772]  ? load_image+0x410/0x410
[  562.150479][ T7772]  ? __lock_acquire+0x7c40/0x7c40
[  562.155543][ T7772]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  562.161497][ T7772]  ? _raw_spin_unlock+0x40/0x40
[  562.166388][ T7772]  should_fail_ex+0x390/0x4c0
[  562.171142][ T7772]  should_failslab+0x5/0x20
[  562.175677][ T7772]  slab_pre_alloc_hook+0x59/0x300
[  562.180740][ T7772]  kmem_cache_alloc+0x56/0x2f0
[  562.185503][ T7772]  ? fib_trie_unmerge+0x266/0xce0
[  562.190543][ T7772]  fib_trie_unmerge+0x266/0xce0
[  562.195405][ T7772]  fib_unmerge+0xbc/0x350
[  562.199753][ T7772]  fib4_rule_configure+0x114/0xae0
[  562.204909][ T7772]  ? __nla_parse+0x3c/0x50
[  562.209333][ T7772]  fib_nl_newrule+0x135a/0x1e40
[  562.214247][ T7772]  ? __mutex_lock+0x7ec/0xae0
[  562.218942][ T7772]  ? __lock_acquire+0x7c40/0x7c40
[  562.223993][ T7772]  ? fib_rules_seq_read+0xf0/0xf0
[  562.229030][ T7772]  ? do_raw_spin_unlock+0x11d/0x230
[  562.234264][ T7772]  ? fib_rules_seq_read+0xf0/0xf0
[  562.239306][ T7772]  rtnetlink_rcv_msg+0x863/0xfb0
[  562.244306][ T7772]  ? rtnetlink_rcv_msg+0x220/0xfb0
[  562.249450][ T7772]  ? rtnetlink_bind+0x80/0x80
[  562.254138][ T7772]  ? __local_bh_enable_ip+0x136/0x1c0
[  562.259564][ T7772]  ? lockdep_hardirqs_on+0x94/0x140
[  562.264803][ T7772]  ? __local_bh_enable_ip+0x136/0x1c0
[  562.270357][ T7772]  ? _local_bh_enable+0xa0/0xa0
[  562.275224][ T7772]  ? __dev_queue_xmit+0x281/0x3810
[  562.280385][ T7772]  ? __dev_queue_xmit+0x281/0x3810
[  562.285509][ T7772]  ? __dev_queue_xmit+0x1d84/0x3810
[  562.290724][ T7772]  ? __dev_queue_xmit+0x281/0x3810
[  562.295853][ T7772]  ? ref_tracker_free+0x682/0x830
[  562.300931][ T7772]  ? refcount_inc+0x70/0x70
[  562.305448][ T7772]  ? memcpy+0x3c/0x60
[  562.309474][ T7772]  ? __copy_skb_header+0x3ba/0x4f0
[  562.314639][ T7772]  ? __skb_clone+0x446/0x6c0
[  562.319250][ T7772]  netlink_rcv_skb+0x1ef/0x440
[  562.324065][ T7772]  ? rtnetlink_bind+0x80/0x80
[  562.328751][ T7772]  ? netlink_ack+0x1160/0x1160
[  562.333543][ T7772]  ? netlink_deliver_tap+0x2e/0x1b0
[  562.338757][ T7772]  netlink_unicast+0x7ad/0x920
[  562.343544][ T7772]  netlink_sendmsg+0x8ad/0xbd0
[  562.348324][ T7772]  ? netlink_getsockopt+0x550/0x550
[  562.353532][ T7772]  ? apparmor_socket_sendmsg+0x8a/0x330
[  562.359146][ T7772]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  562.364470][ T7772]  ? security_socket_sendmsg+0x7c/0xa0
[  562.369962][ T7772]  ? netlink_getsockopt+0x550/0x550
[  562.375171][ T7772]  ____sys_sendmsg+0x5ed/0x9a0
[  562.379991][ T7772]  ? __sys_sendmsg_sock+0x30/0x30
[  562.385031][ T7772]  ? __import_iovec+0x306/0x510
[  562.389918][ T7772]  ? import_iovec+0x6f/0xa0
[  562.394443][ T7772]  ___sys_sendmsg+0x2a2/0x360
[  562.399145][ T7772]  ? __sys_sendmsg+0x2a0/0x2a0
[  562.403963][ T7772]  __se_sys_sendmsg+0x1c3/0x2b0
[  562.408836][ T7772]  ? __x64_sys_sendmsg+0x80/0x80
[  562.413842][ T7772]  ? lockdep_hardirqs_on+0x94/0x140
[  562.419058][ T7772]  do_syscall_64+0x4c/0xa0
[  562.423492][ T7772]  ? clear_bhb_loop+0x60/0xb0
[  562.428186][ T7772]  ? clear_bhb_loop+0x60/0xb0
[  562.432887][ T7772]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  562.438799][ T7772] RIP: 0033:0x7f3b71f9e159
[  562.443310][ T7772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.462955][ T7772] RSP: 002b:00007f3b72e39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  562.471386][ T7772] RAX: ffffffffffffffda RBX: 00007f3b72225fa0 RCX: 00007f3b71f9e159
[  562.479371][ T7772] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[  562.487352][ T7772] RBP: 00007f3b7203503b R08: 0000000000000000 R09: 0000000000000000
[  562.495327][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  562.503413][ T7772] R13: 00007f3b72226038 R14: 00007f3b72225fa0 R15: 00007ffdebe33ab8
[  562.511418][ T7772]  </TASK>
[  562.581118][ T7473] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  562.666959][ T7473] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  562.914675][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.921645][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  562.991441][ T7803] loop4: detected capacity change from 0 to 512
[  563.006634][ T7803] EXT4-fs (loop4): Test dummy encryption mode enabled
[  563.276547][ T7803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  563.828703][ T7473] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.838459][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  563.963447][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  563.996956][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  564.008270][ T7816] loop0: detected capacity change from 0 to 256
[  564.054234][ T7473] 8021q: adding VLAN 0 to HW filter on device team0
[  564.113581][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  564.169122][ T7820] loop4: detected capacity change from 0 to 256
[  564.176364][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  564.197307][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.204509][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.343289][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  564.411380][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  564.459494][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  564.468188][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.475382][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.488124][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  564.497742][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  564.514147][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  564.529803][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  564.546862][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  564.609268][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  564.643209][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  564.697828][ T7473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  564.733676][ T7473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  564.768064][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  564.795899][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  564.810145][ T7834] loop4: detected capacity change from 0 to 128
[  564.847236][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  564.866324][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  564.910440][ T7834] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿT�ô‰Û\i‡»‰”N<è©×J¥W¾ë¿{ô¡›ì•kqŸü4uW{zÛ1Û°
[  564.910440][ T7834] aJ€�þõõÂÝqÄÕ¦ ”5{“+0xffffffffffffffff" or missing value
[  564.915164][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  565.023214][ T7832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.268440][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  565.293022][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  565.369204][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  565.393170][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  565.421240][ T7323] device veth0_vlan entered promiscuous mode
[  565.432241][ T4323] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  565.449987][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  565.467873][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  565.495593][ T7323] device veth1_vlan entered promiscuous mode
[  565.580696][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  565.596189][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  565.626299][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short
[  565.628698][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  565.653846][ T4323] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[  565.660233][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  565.686620][ T4323] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0
[  565.699175][ T7323] device veth0_macvtap entered promiscuous mode
[  565.744408][ T4323] usb 5-1: string descriptor 0 read error: -22
[  565.751613][ T7323] device veth1_macvtap entered promiscuous mode
[  565.781290][ T4323] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[  565.816989][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.821701][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.831172][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.876585][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.898251][ T4323] usb 5-1: low speed audio streaming not supported
[  565.905119][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.905141][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  565.905159][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  565.906659][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.965899][ T4323] usb 5-1: low speed audio streaming not supported
[  566.032289][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  566.041041][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  566.089307][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  566.126024][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  566.147741][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  566.172254][ T4323] usb 5-1: USB disconnect, device number 2
[  566.174876][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  566.214288][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.262657][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.282273][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  566.312078][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  566.339347][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  566.351796][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  566.372431][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  566.388999][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  566.406935][ T7323] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.422278][ T7323] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.445360][ T7843] loop0: detected capacity change from 0 to 40427
[  566.454937][ T7323] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.502283][ T7323] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.513835][ T7843] F2FS-fs (loop0): invalid crc value
[  566.544733][ T7843] F2FS-fs (loop0): Found nat_bits in checkpoint
[  566.753202][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.786970][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.787925][ T7843] F2FS-fs (loop0): Start checkpoint disabled!
[  566.818892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  566.878366][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.904950][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.953984][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  566.974304][ T7843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  567.110467][ T7865] loop4: detected capacity change from 0 to 512
[  567.322312][ T7865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  567.331353][ T7865] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  567.592488][ T4416] kworker/u4:13: attempt to access beyond end of device
[  567.592488][ T4416] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  568.013332][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  568.024253][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  568.046343][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  568.109418][ T7473] device veth0_vlan entered promiscuous mode
[  568.322801][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  568.331461][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  568.460596][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  568.466058][ T7473] device veth1_vlan entered promiscuous mode
[  568.544684][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  568.553780][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  568.566639][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  568.576472][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  568.584572][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  569.239395][ T7904] loop0: detected capacity change from 0 to 512
[  569.276730][ T4347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.304076][ T7904] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  569.335153][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  569.362516][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  569.403760][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  569.434087][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  569.528603][ T7906] FAULT_INJECTION: forcing a failure.
[  569.528603][ T7906] name failslab, interval 1, probability 0, space 0, times 0
[  569.582236][ T7906] CPU: 1 PID: 7906 Comm: syz.4.730 Not tainted syzkaller #0
[  569.589596][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  569.599697][ T7906] Call Trace:
[  569.603034][ T7906]  <TASK>
[  569.606006][ T7906]  dump_stack_lvl+0x188/0x24e
[  569.610742][ T7906]  ? show_regs_print_info+0x12/0x12
[  569.616007][ T7906]  ? load_image+0x410/0x410
[  569.620564][ T7906]  ? __might_sleep+0xd0/0xd0
[  569.625283][ T7906]  ? __lock_acquire+0x7c40/0x7c40
[  569.630368][ T7906]  should_fail_ex+0x390/0x4c0
[  569.635112][ T7906]  should_failslab+0x5/0x20
[  569.639660][ T7906]  slab_pre_alloc_hook+0x59/0x300
[  569.644737][ T7906]  ? security_sk_alloc+0x47/0x130
[  569.649861][ T7906]  __kmem_cache_alloc_node+0x4f/0x270
[  569.655263][ T7906]  ? security_sk_alloc+0x47/0x130
[  569.660305][ T7906]  __kmalloc+0xa3/0x240
[  569.664501][ T7906]  ? sk_prot_alloc+0xe7/0x210
[  569.669190][ T7906]  security_sk_alloc+0x47/0x130
[  569.674055][ T7906]  sk_prot_alloc+0x101/0x210
[  569.678652][ T7906]  ? sk_alloc+0x20/0x330
[  569.682919][ T7906]  sk_alloc+0x36/0x330
[  569.687003][ T7906]  __netlink_create+0x6b/0x2d0
[  569.691783][ T7906]  ? __lock_acquire+0x7c40/0x7c40
[  569.696828][ T7906]  netlink_create+0x3a7/0x510
[  569.701516][ T7906]  ? genl_rcv+0x40/0x40
[  569.705737][ T7906]  __sock_create+0x49a/0x940
[  569.710354][ T7906]  __sys_socket+0xc4/0x190
[  569.714786][ T7906]  __x64_sys_socket+0x76/0x80
[  569.719487][ T7906]  do_syscall_64+0x4c/0xa0
[  569.723934][ T7906]  ? clear_bhb_loop+0x60/0xb0
[  569.728625][ T7906]  ? clear_bhb_loop+0x60/0xb0
[  569.733315][ T7906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  569.739221][ T7906] RIP: 0033:0x7ff72eb9f9c7
[  569.743653][ T7906] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.763273][ T7906] RSP: 002b:00007ff72f9cff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  569.771702][ T7906] RAX: ffffffffffffffda RBX: 00007ff72ee25fa0 RCX: 00007ff72eb9f9c7
[  569.779683][ T7906] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  569.787669][ T7906] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  569.795649][ T7906] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[  569.803626][ T7906] R13: 00007ff72ee26038 R14: 00007ff72ee25fa0 R15: 00007ffe37c02298
[  569.811621][ T7906]  </TASK>
[  569.853495][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  569.864039][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  570.212787][ T4347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.284359][ T7473] device veth0_macvtap entered promiscuous mode
[  570.316055][ T7473] device veth1_macvtap entered promiscuous mode
[  570.409280][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.460531][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.511362][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.552067][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.609860][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.640903][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.662491][ T4290] Bluetooth: hci2: command 0x0409 tx timeout
[  570.670408][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.701643][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.739092][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.771192][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.810332][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.840758][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.870347][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.896761][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.936970][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.968960][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.991845][ T7473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.008090][ T7473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.036450][ T7473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.060773][ T7473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.344575][ T4347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.402792][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  571.415839][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  571.466094][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  571.521910][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  571.551972][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  571.601783][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  571.845821][ T4347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.898095][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.923278][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.974814][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  572.117972][ T4670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.128745][ T4670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.174926][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  573.236957][ T7936] loop0: detected capacity change from 0 to 512
[  573.255159][ T4290] Bluetooth: hci2: command 0x041b tx timeout
[  573.279390][ T7936] EXT4-fs (loop0): Test dummy encryption mode enabled
[  573.393981][ T7936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  573.408237][ T7894] chnl_net:caif_netlink_parms(): no params data found
[  573.858644][ T7950] zonefs (nullb0) ERROR: Not a zoned block device
[  574.527019][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  575.945729][ T4290] Bluetooth: hci2: command 0x040f tx timeout
[  576.102480][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.109646][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.138912][ T7894] device bridge_slave_0 entered promiscuous mode
[  576.333065][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.341255][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.409800][ T7894] device bridge_slave_1 entered promiscuous mode
[  576.609323][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.740016][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.931223][ T7894] team0: Port device team_slave_0 added
[  577.233907][ T7894] team0: Port device team_slave_1 added
[  577.516190][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.535665][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.605317][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.646326][ T3654] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  577.665321][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.682361][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.752222][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  577.788190][ T4347] device hsr_slave_0 left promiscuous mode
[  577.810890][ T4347] device hsr_slave_1 left promiscuous mode
[  577.830235][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  577.848211][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.857481][ T3654] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  577.878710][ T3654] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  577.902142][ T3654] usb 5-1: config 0 interface 0 has no altsetting 0
[  577.922141][ T3654] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  577.951693][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.981485][ T3654] usb 5-1: config 0 descriptor??
[  578.005849][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.014032][ T8003] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  578.022526][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[  578.039188][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.057322][ T4347] device bridge_slave_1 left promiscuous mode
[  578.082313][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.092787][ T4347] device bridge_slave_0 left promiscuous mode
[  578.099059][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.234618][ T4347] device veth1_macvtap left promiscuous mode
[  578.248364][ T4347] device veth0_macvtap left promiscuous mode
[  578.268966][ T4347] device veth1_vlan left promiscuous mode
[  578.289803][ T4347] device veth0_vlan left promiscuous mode
[  578.454477][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.468162][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.475498][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.482568][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.494477][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.501237][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.508610][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.515706][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.524000][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.533026][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.539937][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.547040][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.561742][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.569310][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.583635][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.590566][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.605030][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.611969][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.619198][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.630940][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.638141][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.652407][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.659372][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.675068][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.685833][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.696333][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.703817][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.710550][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.717934][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.725091][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.742482][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.749236][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.763564][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.770514][ T3654] kye 0003:0458:4018.0001: unknown main item tag 0x0
[  578.791544][ T3654] kye 0003:0458:4018.0001: hidraw0: USB HID v0.01 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0
[  578.819714][ T3654] usb 5-1: USB disconnect, device number 3
[  579.119397][ T8024] fido_id[8024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  580.346967][ T4347] team0 (unregistering): Port device team_slave_1 removed
[  580.444746][ T4347] team0 (unregistering): Port device team_slave_0 removed
[  580.549397][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.639094][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.015287][ T4347] bond0 (unregistering): Released all slaves
[  581.274543][ T7894] device hsr_slave_0 entered promiscuous mode
[  581.322586][ T7894] device hsr_slave_1 entered promiscuous mode
[  581.343100][ T7894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  581.363136][ T7894] Cannot create hsr debugfs directory
[  581.504532][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'.
[  581.590728][ T8046] wlan0 speed is unknown, defaulting to 1000
[  581.642165][ T8046] wlan0 speed is unknown, defaulting to 1000
[  581.702895][ T8046] wlan0 speed is unknown, defaulting to 1000
[  581.778055][ T8046] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  581.799023][ T8046] infiniband syq0: RDMA CMA: cma_listen_on_dev, error -98
[  581.969147][ T8053] loop0: detected capacity change from 0 to 256
[  582.022843][ T8046] wlan0 speed is unknown, defaulting to 1000
[  582.031302][ T8046] wlan0 speed is unknown, defaulting to 1000
[  582.081338][ T8053] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  582.129571][ T8046] wlan0 speed is unknown, defaulting to 1000
[  582.159487][ T8046] wlan0 speed is unknown, defaulting to 1000
[  582.191668][ T8046] wlan0 speed is unknown, defaulting to 1000
[  582.474398][ T7894] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  582.533265][ T7894] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  582.557774][ T7894] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  582.591660][ T7894] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  582.786288][ T8066] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  582.862547][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.894646][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  582.934471][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  582.963232][ T7894] 8021q: adding VLAN 0 to HW filter on device team0
[  583.005778][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  583.055265][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  583.080927][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.088172][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.117285][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  583.182912][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  583.211420][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  583.238244][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.245455][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.311793][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  583.335899][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  583.376070][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  583.414169][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  583.450584][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  583.489353][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  583.514990][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  583.539982][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  583.577622][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  583.589996][ T8087] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  583.631825][ T7894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  583.660781][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  583.680257][ T8087] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  583.689704][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  583.699398][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  585.465999][ T8121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.520596][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  585.531464][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  585.566020][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.751056][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'.
[  587.137780][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.788'.
[  587.295836][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'.
[  587.667683][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  587.683454][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  587.768614][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  587.802650][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  587.845279][ T7894] device veth0_vlan entered promiscuous mode
[  587.852650][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  587.882537][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  588.856761][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.864218][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.852551][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  591.883290][ T8170] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.892368][ T8170] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.901270][ T8170] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.921793][ T8170] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.969018][ T8182] wlan0 speed is unknown, defaulting to 1000
[  591.984888][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  592.014498][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  592.051951][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  592.062491][ T8215] device bridge_slave_0 left promiscuous mode
[  592.083375][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.106382][ T8224] netlink: 'syz.0.801': attribute type 29 has an invalid length.
[  592.132223][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  592.149283][ T8215] device bridge_slave_1 left promiscuous mode
[  592.166891][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.181928][ T8215] bond0: (slave bond_slave_0): Releasing backup interface
[  592.210539][ T8215] bond0: (slave bond_slave_1): Releasing backup interface
[  592.279748][ T8215] team0: Port device team_slave_0 removed
[  592.321679][ T8215] team0: Port device team_slave_1 removed
[  592.330894][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.347888][ T8215] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.360326][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  592.368348][ T8215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.399342][ T7894] device veth1_vlan entered promiscuous mode
[  592.427724][ T8224] netlink: 'syz.0.801': attribute type 29 has an invalid length.
[  592.452090][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  592.681230][ T7894] device veth0_macvtap entered promiscuous mode
[  592.704153][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  592.723567][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  592.803661][ T7894] device veth1_macvtap entered promiscuous mode
[  592.812952][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  592.824189][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  592.887427][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.922157][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  592.962209][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  592.992393][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.013749][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.057144][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.107241][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.137658][ T7894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.165674][ T7894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.189763][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.229112][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  593.243029][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  593.270638][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  593.290230][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  593.322797][ T7894] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.331631][ T7894] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.393539][ T7894] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.429220][ T7894] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.776419][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.799144][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.869274][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  593.909210][ T4616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.923165][ T4616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.945416][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  593.955923][ T8209] syz.5.798 (8209): drop_caches: 3
[  595.408047][ T8265] loop5: detected capacity change from 0 to 1024
[  595.580380][ T8270] loop6: detected capacity change from 0 to 1764
[  595.743983][ T4278] blk_print_req_error: 11 callbacks suppressed
[  595.744001][ T4278] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  596.578012][ T5195] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  596.585666][ T8284] loop6: detected capacity change from 0 to 8192
[  596.811963][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.853700][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.976038][ T8267] loop4: detected capacity change from 0 to 40427
[  597.027602][ T8267] F2FS-fs (loop4): build fault injection attr: rate: 174, type: 0x3ffff
[  597.037656][ T8289] netlink: 'syz.6.820': attribute type 1 has an invalid length.
[  597.152297][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.6.820'.
[  597.191265][ T8289] device vcan0 entered promiscuous mode
[  597.252760][ T8289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  598.054444][ T8304] loop4: detected capacity change from 0 to 128
[  598.189613][ T8304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  598.208791][ T8304] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.345142][ T8300] loop6: detected capacity change from 0 to 8192
[  598.361005][   T26] audit: type=1800 audit(1789061291.888:4): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.826" name="file1" dev="loop4" ino=12 res=0 errno=0
[  598.549658][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  598.553054][ T8282] loop5: detected capacity change from 0 to 40427
[  598.658606][ T8282] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  598.708629][ T8282] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  598.800516][ T8282] F2FS-fs (loop5): invalid crc value
[  598.903449][ T8282] F2FS-fs (loop5): Found nat_bits in checkpoint
[  599.072106][ T4326] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  599.195358][ T8282] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  599.228481][ T8282] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  599.274074][ T4326] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.322679][ T4326] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.362840][ T5195] usb 6-1: unable to read config index 0 descriptor/start: -71
[  599.377441][ T5195] usb 6-1: can't read configurations, error -71
[  599.386578][ T4326] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  599.422340][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.894553][ T4326] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  599.946715][ T4326] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0
[  599.998715][ T4326] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0002/input/input5
[  600.020874][ T8326] loop6: detected capacity change from 0 to 32768
[  600.117391][ T4326] usb 5-1: USB disconnect, device number 4
[  600.400563][ T8339] loop0: detected capacity change from 0 to 8192
[  600.426572][ T8347] loop5: detected capacity change from 0 to 4096
[  600.653044][ T8347] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  600.717755][ T8347] ntfs3: loop5: Failed to load $Extend.
[  600.753745][ T8348] fido_id[8348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  601.005234][ T8347] ntfs3: loop5: ino=1e, "file1" attr_set_size
[  601.956317][ T8364] loop4: detected capacity change from 0 to 512
[  602.050328][ T8364] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  602.132515][ T8364] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  602.162317][ T8364] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.842: Failed to acquire dquot type 1
[  602.249362][ T8364] EXT4-fs (loop4): 1 truncate cleaned up
[  602.341888][ T8364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  602.382270][ T8364] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  602.458023][ T8376] loop6: detected capacity change from 0 to 256
[  602.485274][ T8373] loop0: detected capacity change from 0 to 128
[  602.513294][ T8376] exfat: Deprecated parameter 'utf8'
[  602.518693][ T8376] exfat: Deprecated parameter 'namecase'
[  602.562235][ T8376] exfat: Deprecated parameter 'namecase'
[  602.619425][ T8376] exfat: Deprecated parameter 'utf8'
[  602.896292][ T8373] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  603.005887][ T8376] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  603.042542][ T8309] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  603.595664][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  603.621001][ T8373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  603.858803][ T8391] loop4: detected capacity change from 0 to 512
[  603.879480][ T8391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  603.969151][ T8391] EXT4-fs (loop4): 1 truncate cleaned up
[  604.038346][ T8391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  604.093887][ T8391] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  604.119847][ T8391] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.846: Abort forced by user
[  604.161329][ T8391] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  604.246791][ T8389] loop5: detected capacity change from 0 to 8192
[  604.334289][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  604.420746][ T8405] loop6: detected capacity change from 0 to 256
[  604.528188][ T8405] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  605.707285][ T8430] loop4: detected capacity change from 0 to 64
[  605.935863][ T8406] device syzkaller0 entered promiscuous mode
[  606.026167][ T8432] loop6: detected capacity change from 0 to 4096
[  606.081310][ T8432] ntfs3: Unknown parameter 'windows_names'
[  606.474649][ T8438] loop4: detected capacity change from 0 to 512
[  606.522733][ T8438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  606.607900][ T8438] EXT4-fs (loop4): 1 truncate cleaned up
[  606.619508][ T8438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  606.734775][ T8414] loop5: detected capacity change from 0 to 32768
[  606.852995][ T8414] XFS (loop5): Mounting V5 Filesystem
[  606.920217][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  606.925680][ T8414] XFS (loop5): Ending clean mount
[  606.945449][ T8452] loop6: detected capacity change from 0 to 2048
[  607.106408][ T8452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  607.237335][ T8465] loop4: detected capacity change from 0 to 1024
[  607.292946][   T26] audit: type=1800 audit(1789061300.828:5): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.864" name="file1" dev="loop6" ino=15 res=0 errno=0
[  607.298295][ T8452] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  607.407967][ T7473] XFS (loop5): Unmounting Filesystem
[  607.441813][ T8452] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  607.491675][ T8452] EXT4-fs (loop6): This should not happen!! Data will be lost
[  607.491675][ T8452] 
[  607.578135][ T8452] EXT4-fs (loop6): Total free blocks count 0
[  607.620534][ T8452] EXT4-fs (loop6): Free/Dirty block details
[  607.674374][ T8452] EXT4-fs (loop6): free_blocks=2415919504
[  607.680398][ T8452] EXT4-fs (loop6): dirty_blocks=16
[  607.730511][ T8452] EXT4-fs (loop6): Block reservation details
[  607.747469][ T8452] EXT4-fs (loop6): i_reserved_data_blocks=1
[  608.080193][ T4388] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  608.279616][ T8484] loop5: detected capacity change from 0 to 256
[  608.380429][ T8484] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  610.020697][ T8502] loop5: detected capacity change from 0 to 4096
[  610.055369][ T8502] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  610.133282][ T8497] loop6: detected capacity change from 0 to 32768
[  610.193582][ T8497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.871 (8497)
[  610.281726][   T26] audit: type=1800 audit(1789061303.808:6): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.873" name="file1" dev="loop5" ino=30 res=0 errno=0
[  610.292565][ T8497] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  610.364690][ T8497] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  610.381963][ T8497] BTRFS info (device loop6): setting nodatasum
[  610.388729][ T8497] BTRFS info (device loop6): force zlib compression, level 3
[  610.417466][ T8497] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  610.442207][ T8497] BTRFS info (device loop6): use lzo compression, level 0
[  610.457668][ T8497] BTRFS info (device loop6): turning on flush-on-commit
[  610.465532][ T8497] BTRFS info (device loop6): enabling auto defrag
[  610.480384][ T7473] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22.
[  610.488087][ T8497] BTRFS info (device loop6): max_inline at 0
[  610.511654][ T8497] BTRFS info (device loop6): using free space tree
[  610.518426][ T7473] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  610.557172][ T7473] ntfs3: loop5: ntfs_set_state r=3 failed, -22.
[  610.953532][ T8497] BTRFS info (device loop6): enabling ssd optimizations
[  611.068324][   T26] audit: type=1800 audit(1789061304.598:7): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.871" name="file2" dev="loop6" ino=261 res=0 errno=0
[  611.175442][ T7894] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  611.503108][ T5312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop6 scanned by udevd (5312)
[  611.728378][ T8524] loop5: detected capacity change from 0 to 32768
[  611.755986][ T8524] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  612.081910][ T4278] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  612.164657][ T8538] loop6: detected capacity change from 0 to 1024
[  613.665792][ T8550] loop6: detected capacity change from 0 to 128
[  613.711844][ T8544] loop5: detected capacity change from 0 to 32768
[  613.733932][ T8544] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.882 (8544)
[  613.735883][ T8550] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  613.815695][ T8544] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  613.829996][ T8550] loop6: detected capacity change from 0 to 512
[  613.843667][ T8544] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  613.868602][ T8544] BTRFS info (device loop5): enabling ssd optimizations
[  613.876139][ T8544] BTRFS info (device loop5): not using ssd optimizations
[  613.887334][ T8544] BTRFS info (device loop5): turning off barriers
[  613.894152][ T8544] BTRFS info (device loop5): use no compression
[  613.901542][ T8544] BTRFS info (device loop5): using free space tree
[  613.948016][ T8550] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.884: inode #1: comm syz.6.884: iget: illegal inode #
[  613.982481][ T8550] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.884: error while reading EA inode 1 err=-117
[  614.005082][ T8550] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.884: inode #1: comm syz.6.884: iget: illegal inode #
[  614.021042][ T8550] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.884: error while reading EA inode 1 err=-117
[  614.074056][ T8550] EXT4-fs (loop6): 1 orphan inode deleted
[  614.080017][ T8550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  614.235285][ T7894] EXT4-fs (loop6): unmounting filesystem.
[  614.518143][ T7473] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  614.608893][ T8572] loop6: detected capacity change from 0 to 4096
[  614.767078][ T4278] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop5 scanned by udevd (4278)
[  615.052264][ T8581] ntfs3: loop6: ino=9, attr_set_size
[  615.252081][ T8583] loop5: detected capacity change from 0 to 256
[  615.371232][ T8585] loop6: detected capacity change from 0 to 512
[  615.385359][ T8585] EXT4-fs: Ignoring removed oldalloc option
[  615.474452][ T8585] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  615.580468][   T26] audit: type=1800 audit(1789061309.108:8): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.888" name="file1" dev="loop6" ino=15 res=0 errno=0
[  615.699601][ T7473] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  615.746353][ T7473] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  616.347295][ T7894] EXT4-fs (loop6): unmounting filesystem.
[  616.473575][ T8592] loop6: detected capacity change from 0 to 1024
[  616.650095][ T8594] loop6: detected capacity change from 0 to 256
[  616.663203][ T8594] exfat: Unknown parameter 'zero_size_dir'
[  616.927270][ T8598] loop6: detected capacity change from 0 to 2048
[  616.980618][ T8599] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  617.236805][ T8601] loop6: detected capacity change from 0 to 512
[  617.375575][ T8601] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  617.414004][ T8601] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.575031][ T8601] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:337: inode #15: comm syz.6.894: verity file corrupted; can't find descriptor
[  617.662256][ T8601] EXT4-fs (loop6): Remounting filesystem read-only
[  617.679509][ T8601] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size
[  617.810605][ T7894] EXT4-fs (loop6): unmounting filesystem.
[  618.223375][ T8617] loop6: detected capacity change from 0 to 128
[  618.318906][ T8617] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  618.379778][ T8608] loop0: detected capacity change from 0 to 32768
[  618.432808][ T8608] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.896 (8608)
[  618.508913][ T8608] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  618.561282][ T8608] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  618.591479][ T8608] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  618.620964][ T8608] BTRFS info (device loop0): use zstd compression, level 3
[  618.645874][ T8608] BTRFS info (device loop0): using free space tree
[  618.883332][ T8630] loop6: detected capacity change from 0 to 16
[  619.010083][ T8630] erofs: (device loop6): z_erofs_load_lz4_config: invalid lz4 cfgs, size=9
[  619.038901][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  619.050133][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  619.061487][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  619.073183][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  619.080935][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  619.091126][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  619.092121][ T5312] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  619.123663][ T8608] BTRFS info (device loop0): enabling ssd optimizations
[  619.584550][ T4274] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  620.178347][ T8630] loop6: detected capacity change from 0 to 32768
[  620.245099][ T8630] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  620.261307][ T8630] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  620.313125][ T8630] BTRFS warning (device loop6): excessive commit interval 3581
[  620.320823][ T8630] BTRFS info (device loop6): force zlib compression, level 3
[  620.360585][ T8630] BTRFS info (device loop6): metadata ratio 107050
[  620.370625][ T8630] BTRFS info (device loop6): turning on flush-on-commit
[  620.389488][ T8630] BTRFS info (device loop6): max_inline at 4096
[  620.405686][ T8630] BTRFS info (device loop6): using free space tree
[  621.071543][ T8630] BTRFS info (device loop6): enabling ssd optimizations
[  621.142655][ T4292] Bluetooth: hci0: command 0x0409 tx timeout
[  621.614543][ T7894] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  622.502441][ T8684] loop6: detected capacity change from 0 to 4096
[  622.527543][ T8684] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  622.600282][ T8684] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  622.689444][ T8678] loop0: detected capacity change from 0 to 32768
[  622.747419][ T8678] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  623.200167][ T4278] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  623.247665][ T4292] Bluetooth: hci0: command 0x041b tx timeout
[  623.524433][ T8687] loop0: detected capacity change from 0 to 4096
[  623.753320][ T8687] ntfs3: Unknown parameter 'windows_names'
[  624.347356][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.353805][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.634211][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  624.652842][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  624.662315][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  624.670217][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  624.690619][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  624.698367][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  624.888647][ T8715] loop0: detected capacity change from 0 to 512
[  624.917400][ T8715] EXT4-fs: Ignoring removed oldalloc option
[  625.050455][ T8715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  625.302451][ T4292] Bluetooth: hci0: command 0x040f tx timeout
[  625.565405][ T5195] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX)
[  625.627429][ T8710] ceph: No mds server is up or the cluster is laggy
[  625.892931][   T26] audit: type=1800 audit(1789061319.378:9): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.926" name="file1" dev="loop0" ino=19 res=0 errno=0
[  625.925230][ T5195] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  626.743225][ T4292] Bluetooth: hci5: command 0x0409 tx timeout
[  626.770504][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  627.382086][ T4292] Bluetooth: hci0: command 0x0419 tx timeout
[  628.215462][   T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.276414][ T8705] wlan0 speed is unknown, defaulting to 1000
[  628.315215][ T8638] wlan0 speed is unknown, defaulting to 1000
[  628.419881][   T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.694474][   T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.822400][ T4292] Bluetooth: hci5: command 0x041b tx timeout
[  628.858103][ T8749] loop0: detected capacity change from 0 to 32768
[  629.402756][   T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.451050][ T8749] XFS (loop0): Mounting V5 Filesystem
[  629.624498][ T8749] XFS (loop0): Starting recovery (logdev: internal)
[  629.904244][ T8749] XFS (loop0): Ending recovery (logdev: internal)
[  630.259762][ T8749] overlayfs: './file0' not a directory
[  630.464887][ T8705] chnl_net:caif_netlink_parms(): no params data found
[  630.726438][ T4274] XFS (loop0): Unmounting Filesystem
[  630.902110][ T4292] Bluetooth: hci5: command 0x040f tx timeout
[  631.060045][ T8802] device hsr_slave_0 left promiscuous mode
[  631.078985][ T8802] device hsr_slave_1 left promiscuous mode
[  631.312324][ T8638] chnl_net:caif_netlink_parms(): no params data found
[  631.428833][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.439678][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.459635][ T8705] device bridge_slave_0 entered promiscuous mode
[  631.703922][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.711098][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.719909][ T8705] device bridge_slave_1 entered promiscuous mode
[  632.390639][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807cd5ec00: rx timeout, send abort
[  632.495788][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.554566][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cd5ec00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  632.583830][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  632.645597][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.672926][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.685643][ T8638] device bridge_slave_0 entered promiscuous mode
[  632.804850][ T8831] Bluetooth: ISO socket layer initialized
[  632.817765][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.832575][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.840886][ T8638] device bridge_slave_1 entered promiscuous mode
[  632.943613][ T8705] team0: Port device team_slave_0 added
[  632.981277][ T8705] team0: Port device team_slave_1 added
[  632.992139][ T4292] Bluetooth: hci5: command 0x0419 tx timeout
[  633.169926][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.275210][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  633.545824][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  633.574305][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.626441][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.417088][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.437010][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.463710][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.479412][ T8638] team0: Port device team_slave_0 added
[  634.557144][ T8638] team0: Port device team_slave_1 added
[  634.748189][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.748586][ T8865] loop6: detected capacity change from 0 to 4096
[  634.762566][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.791331][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.815471][ T8865] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  634.844691][ T8865] NILFS (loop6): mounting unchecked fs
[  634.893529][ T8705] device hsr_slave_0 entered promiscuous mode
[  634.907905][ T8705] device hsr_slave_1 entered promiscuous mode
[  634.922437][ T8865] NILFS (loop6): recovery complete
[  634.931916][ T8705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  634.942397][ T8875] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  634.960055][ T8705] Cannot create hsr debugfs directory
[  634.961885][ T5312] udevd[5312]: incorrect nilfs2 checksum on /dev/loop6
[  634.983623][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.990635][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.036658][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.062282][ T4292] Bluetooth: hci5: command 0x0405 tx timeout
[  635.194201][   T47] device hsr_slave_0 left promiscuous mode
[  635.211935][   T47] device hsr_slave_1 left promiscuous mode
[  635.238286][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.249219][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  635.266669][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.280732][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.294064][   T47] device bridge_slave_1 left promiscuous mode
[  635.307822][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.324338][   T47] device bridge_slave_0 left promiscuous mode
[  635.337059][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.388623][   T47] device veth1_macvtap left promiscuous mode
[  635.399905][   T47] device veth0_macvtap left promiscuous mode
[  635.408888][   T47] device veth1_vlan left promiscuous mode
[  635.525714][   T47] device veth0_vlan left promiscuous mode
[  637.055539][ T8896] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  637.255814][   T47] team0 (unregistering): Port device team_slave_1 removed
[  637.307159][   T47] team0 (unregistering): Port device team_slave_0 removed
[  637.360805][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  637.426255][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  637.805907][   T47] bond0 (unregistering): Released all slaves
[  637.908878][ T8871] wlan0 speed is unknown, defaulting to 1000
[  637.927815][ T8638] device hsr_slave_0 entered promiscuous mode
[  637.936124][ T8638] device hsr_slave_1 entered promiscuous mode
[  637.944183][ T8638] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  637.951784][ T8638] Cannot create hsr debugfs directory
[  638.193496][ T8899] loop6: detected capacity change from 0 to 256
[  638.267719][ T8899] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  638.399603][   T26] audit: type=1800 audit(1789061331.928:10): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.972" name="file1" dev="loop6" ino=1048623 res=0 errno=0
[  638.703589][ T8705] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  638.752935][ T8705] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  638.780018][ T8705] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  638.813029][ T8705] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  639.150101][   T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.996227][   T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.361047][   T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.315985][ T8638] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  641.422583][ T8638] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  641.480862][ T8638] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  641.576801][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.592394][ T8638] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  641.651246][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  641.675171][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  641.729554][ T8705] 8021q: adding VLAN 0 to HW filter on device team0
[  641.797477][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  641.833478][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  641.882924][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.890124][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  642.034475][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  642.078330][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  642.118165][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  642.171796][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.179133][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.256712][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  642.327617][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  642.393235][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  642.480150][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  642.829113][   T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.077514][ T8952] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  643.148632][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  643.446353][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  643.487256][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  643.515707][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  643.553584][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  643.571726][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  643.601162][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  643.684940][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0
[  643.708831][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  643.803529][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  643.811526][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  643.863464][ T8638] 8021q: adding VLAN 0 to HW filter on device team0
[  643.958705][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  643.997666][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  644.023065][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.030229][ T7938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.076815][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  644.092621][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  644.106027][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  644.116149][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.123324][ T7938] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.139334][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  644.148895][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  644.211926][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  644.259606][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  644.312668][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  644.338734][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  644.371454][ T8638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  644.392607][ T8638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  644.422196][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  644.441931][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  644.476418][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  644.508685][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  644.537394][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  644.561680][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  644.700649][ T8985] wlan0 speed is unknown, defaulting to 1000
[  644.712364][ T8968] ceph: No mds server is up or the cluster is laggy
[  644.720771][ T4325] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_HELLO)
[  645.763265][ T8999] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  645.849216][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  645.867728][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  645.903072][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.348787][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  646.366253][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  646.398100][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.060951][ T9038] Bluetooth: MGMT ver 1.22
[  647.289856][   T47] device hsr_slave_0 left promiscuous mode
[  647.549708][   T47] device hsr_slave_1 left promiscuous mode
[  648.062927][   T47] device veth1_macvtap left promiscuous mode
[  648.069042][   T47] device veth0_macvtap left promiscuous mode
[  648.119314][   T47] device veth1_vlan left promiscuous mode
[  648.141371][   T47] device veth0_vlan left promiscuous mode
[  648.180192][ T9052] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  648.433737][ T9062] loop0: detected capacity change from 0 to 256
[  648.484796][ T9062] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  648.529344][   T26] audit: type=1800 audit(1789061342.058:11): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1004" name="file1" dev="loop0" ino=1048624 res=0 errno=0
[  648.642194][   T26] audit: type=1800 audit(1789061342.158:12): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1004" name="bus" dev="loop0" ino=1048625 res=0 errno=0
[  649.884987][   T47] bond0 (unregistering): Released all slaves
[  650.055410][ T9072] wlan0 speed is unknown, defaulting to 1000
[  650.071000][ T8705] device veth0_vlan entered promiscuous mode
[  650.089292][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  650.104418][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  650.133341][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  650.152249][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  650.168332][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  650.178115][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  650.211844][ T8705] device veth1_vlan entered promiscuous mode
[  650.333917][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  650.363114][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  650.393201][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  650.409141][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  650.441524][ T8705] device veth0_macvtap entered promiscuous mode
[  650.487996][ T8705] device veth1_macvtap entered promiscuous mode
[  650.554344][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  650.583817][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  650.609735][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  650.641077][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  650.687032][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  650.717170][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.737605][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  650.766703][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.778506][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.832439][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  650.841901][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  650.886713][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  650.903362][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  650.925077][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  650.942648][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  650.966025][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  650.992295][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.030863][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  651.093083][ T8638] device veth0_vlan entered promiscuous mode
[  651.106361][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  651.116158][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  651.132956][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  651.153248][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  651.173527][ T8705] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.217287][ T8705] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.279406][ T8705] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.481922][ T8705] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  651.805023][ T8638] device veth1_vlan entered promiscuous mode
[  652.130887][ T8638] device veth0_macvtap entered promiscuous mode
[  652.174765][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  652.194172][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  652.224779][ T8638] device veth1_macvtap entered promiscuous mode
[  652.274308][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  652.327466][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.354696][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.368389][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.412766][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.432249][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.447364][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.459903][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.480303][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  652.503824][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  652.543680][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.582187][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.601486][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.612342][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.632075][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  652.652442][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.683785][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.705741][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.730718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  652.752899][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.767223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  652.786795][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  652.841691][ T8638] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.883090][ T8638] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.912160][ T8638] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.920916][ T8638] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.972426][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.980308][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.023782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  654.100731][ T4630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.129237][ T4630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.206266][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  654.224761][ T5131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.245009][ T9146] loop6: detected capacity change from 0 to 256
[  654.257352][ T5131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.269961][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  654.321749][ T9145] loop8: detected capacity change from 0 to 2048
[  654.331129][ T9146] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  654.378435][   T26] audit: type=1800 audit(1789061347.908:13): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1029" name="file1" dev="loop6" ino=1048629 res=0 errno=0
[  654.418491][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1032'.
[  654.435115][ T9145]  loop8: p1 < > p4
[  654.435115][ T9145]  p4: <solaris:  cannot handle version -1 vtoc>
[  654.472146][ T9145] loop8: p4 size 722688 extends beyond EOD, truncated
[  654.482518][   T26] audit: type=1800 audit(1789061347.988:14): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1029" name="bus" dev="loop6" ino=1048633 res=0 errno=0
[  656.754626][ T5312] udevd[5312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  656.777534][ T4278] udevd[4278]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  657.039762][ T9185] wlan0 speed is unknown, defaulting to 1000
[  657.742332][   T26] audit: type=1800 audit(1789061351.258:15): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1040" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0
[  657.824163][   T26] audit: type=1800 audit(1789061351.308:16): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1040" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0
[  657.968316][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1045'.
[  658.045227][ T9209] loop6: detected capacity change from 0 to 256
[  658.097719][ T9209] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  658.161500][   T26] audit: type=1800 audit(1789061351.688:17): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1046" name="file1" dev="loop6" ino=1048634 res=0 errno=0
[  658.242458][   T26] audit: type=1800 audit(1789061351.758:18): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1046" name="bus" dev="loop6" ino=1048635 res=0 errno=0
[  658.888941][ T9235] loop6: detected capacity change from 0 to 512
[  658.961681][ T9234] nvmet_tcp: enabling port 1 (127.0.0.1:4420)
[  658.983413][ T9235] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  659.207435][ T9237] wlan0 speed is unknown, defaulting to 1000
[  659.640618][ T9231] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  660.802482][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  660.863129][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_0
[  660.918406][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  660.965316][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.069851][   T26] audit: type=1800 audit(1789061354.588:19): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1057" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0
[  661.151876][   T26] audit: type=1800 audit(1789061354.628:20): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1057" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0
[  661.426751][ T4323] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  661.699576][ T4323] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  662.475060][ T9274] ceph: No mds server is up or the cluster is laggy
[  662.606477][   T22] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  662.650397][ T8573] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  662.790529][ T9298] loop8: detected capacity change from 0 to 256
[  662.812305][   T22] usb 8-1: Using ep0 maxpacket: 16
[  662.821401][   T22] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[  662.860414][   T22] usb 8-1: config 0 has no interface number 0
[  662.864173][ T9298] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  662.882080][   T22] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  662.899009][ T9303] loop0: detected capacity change from 0 to 512
[  662.927227][   T22] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  662.957170][   T26] audit: type=1800 audit(1789061356.488:21): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1073" name="file1" dev="loop8" ino=1048636 res=0 errno=0
[  662.967045][   T22] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  663.001642][ T9303] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  663.041260][   T26] audit: type=1800 audit(1789061356.538:22): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1073" name="bus" dev="loop8" ino=1048637 res=0 errno=0
[  663.050475][   T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.111120][   T22] usb 8-1: Product: syz
[  663.157813][   T22] usb 8-1: Manufacturer: syz
[  663.204893][   T22] usb 8-1: SerialNumber: syz
[  663.230064][   T22] usb 8-1: config 0 descriptor??
[  663.256602][ T9293] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  663.302264][ T9293] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  665.599458][   T22] asix: probe of 8-1:0.34 failed with error -71
[  665.635676][   T22] usb 8-1: USB disconnect, device number 2
[  665.832106][ T8953] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  666.022331][ T8953] usb 1-1: Using ep0 maxpacket: 16
[  666.039769][ T8953] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  666.150866][ T8953] usb 1-1: config 0 has no interface number 0
[  666.356833][ T8953] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  666.421040][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880792e4800: rx timeout, send abort
[  666.605044][ T8953] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  666.880227][ T8953] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  666.921897][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880792e5000: rx timeout, send abort
[  666.942171][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880792e4800: abort rx timeout. Force session deactivation
[  666.977780][ T8953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.042070][ T8953] usb 1-1: Product: syz
[  667.046308][ T8953] usb 1-1: Manufacturer: syz
[  667.089895][ T8953] usb 1-1: SerialNumber: syz
[  667.110969][ T8953] usb 1-1: config 0 descriptor??
[  667.132651][ T9340] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  667.160504][ T9340] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  667.391208][ T9340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.417142][ T9340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.432221][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880792e5000: abort rx timeout. Force session deactivation
[  667.616174][ T9385] loop7: detected capacity change from 0 to 512
[  667.657654][ T9385] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  668.501001][ T8953] asix: probe of 1-1:0.34 failed with error -71
[  668.582987][ T8953] usb 1-1: USB disconnect, device number 3
[  669.265787][   T22] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  669.427073][ T9400] wlan0 speed is unknown, defaulting to 1000
[  669.448495][ T9410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  669.993188][ T9401] ceph: No mds server is up or the cluster is laggy
[  670.003736][ T9410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  670.016542][   T22] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  670.057419][ T4292] Bluetooth: hci5: command 0x0407 tx timeout
[  670.874271][ T9435] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1105'.
[  671.179805][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1108'.
[  671.216645][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1108'.
[  671.239302][ T9443] netlink: 'syz.8.1108': attribute type 3 has an invalid length.
[  673.982919][ T9468] ceph: No mds server is up or the cluster is laggy
[  673.993090][ T5195] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX)
[  674.844213][ T9491] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.919594][ T9491] netdevsim netdevsim100 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  675.051471][ T9501] MTRR 1 not used
[  676.265231][ T9516] wlan0 speed is unknown, defaulting to 1000
[  676.278574][ T9522] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1130'.
[  676.822514][ T4292] Bluetooth: hci5: command 0x0428 tx timeout
[  677.676613][ T4323] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  677.863578][ T9561] MTRR 1 not used
[  678.429412][ T9552] ceph: No mds server is up or the cluster is laggy
[  678.604359][ T8573] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  679.006936][ T9579] loop6: detected capacity change from 0 to 256
[  679.253755][ T9579] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  679.498703][ T9565] ceph: No mds server is up or the cluster is laggy
[  679.670903][ T9584] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1146'.
[  679.848320][   T26] audit: type=1800 audit(1789061373.378:23): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1145" name="file1" dev="loop6" ino=1048638 res=0 errno=0
[  679.967142][   T26] audit: type=1800 audit(1789061373.468:24): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1145" name="bus" dev="loop6" ino=1048639 res=0 errno=0
[  680.715099][ T9610] MTRR 1 not used
[  681.318862][ T9604] wlan0 speed is unknown, defaulting to 1000
[  681.650521][ T9620] loop6: detected capacity change from 0 to 512
[  681.664105][ T9620] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  684.297290][   T14] libceph: connect (1)255.255.255.255:6789 error -101
[  684.333445][   T14] libceph: mon0 (1)255.255.255.255:6789 connect error
[  684.348411][ T9644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  684.395943][ T9644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.607168][   T14] libceph: connect (1)255.255.255.255:6789 error -101
[  684.626710][   T14] libceph: mon0 (1)255.255.255.255:6789 connect error
[  685.098855][ T9637] ceph: No mds server is up or the cluster is laggy
[  685.266075][ T4325] libceph: connect (1)255.255.255.255:6789 error -101
[  685.398673][ T4325] libceph: mon0 (1)255.255.255.255:6789 connect error
[  685.784746][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.790814][ T9664] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1171'.
[  685.791221][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  685.823265][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  685.986066][ T9670] loop6: detected capacity change from 0 to 512
[  686.004744][ T9666] batman_adv: batadv0: Removing interface: batadv_slave_0
[  686.016793][ T9670] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  687.149260][ T9681] loop8: detected capacity change from 0 to 256
[  688.011480][ T9681] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  688.758007][   T26] audit: type=1800 audit(1789061382.288:25): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1176" name="file1" dev="loop8" ino=1048640 res=0 errno=0
[  688.881025][   T26] audit: type=1800 audit(1789061382.368:26): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1176" name="bus" dev="loop8" ino=1048641 res=0 errno=0
[  688.917651][ T9693] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  690.227852][ T8529] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  690.444636][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024df0800: rx timeout, send abort
[  690.453238][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024df0800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session.
[  690.502727][ T8529] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  690.596121][ T9725] loop0: detected capacity change from 0 to 512
[  690.627791][ T9725] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  691.163235][ T9713] ceph: No mds server is up or the cluster is laggy
[  691.980621][   T14] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  692.002912][ T9718] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  692.842159][ T9720] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  692.908095][ T9723] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  692.974547][ T4325] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  693.222116][ T4292] Bluetooth: hci2: command 0x0406 tx timeout
[  693.377418][ T9749] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  693.421096][ T9740] netdevsim netdevsim100 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.793269][ T9740] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.100636][ T4325] libceph: connect (1)192.0.2.1:6789 error -101
[  695.107459][ T4325] libceph: mon0 (1)192.0.2.1:6789 connect error
[  695.929649][ T9778] ceph: No mds server is up or the cluster is laggy
[  695.998927][ T4325] libceph: connect (1)192.0.2.1:6789 error -101
[  696.019973][ T4325] libceph: mon0 (1)192.0.2.1:6789 connect error
[  696.188992][ T9792] loop0: detected capacity change from 0 to 512
[  696.218198][ T9792] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  696.465556][ T9796] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  698.729109][ T8953] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  698.810267][ T9817] ceph: No mds server is up or the cluster is laggy
[  700.469908][ T9855] loop7: detected capacity change from 0 to 512
[  700.478059][ T9857] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  700.515952][ T9854] MTRR 1 not used
[  700.521778][ T9855] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  703.827665][ T9885] wlan0 speed is unknown, defaulting to 1000
[  705.357626][    C0] vcan0: j1939_tp_rxtimer: 0xffff888058195c00: rx timeout, send abort
[  706.964958][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058195c00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session.
[  707.953566][ T9944] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  707.968302][ T9945] MTRR 1 not used
[  709.459652][ T9979] wlan0 speed is unknown, defaulting to 1000
[  710.797356][   T22] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_CONNECT_MSG)
[  710.831858][ T9991] ceph: No mds server is up or the cluster is laggy
[  711.907967][T10021] loop8: detected capacity change from 0 to 256
[  712.008932][T10021] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  712.050090][ T5195] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  712.059262][   T26] audit: type=1800 audit(1789061405.588:27): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1264" name="file1" dev="loop8" ino=1048643 res=0 errno=0
[  712.146632][   T26] audit: type=1800 audit(1789061405.618:28): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1264" name="bus" dev="loop8" ino=1048644 res=0 errno=0
[  712.344947][   T41] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  712.464133][T10033] loop6: detected capacity change from 0 to 512
[  712.497608][T10033] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  712.834406][T10023] ceph: No mds server is up or the cluster is laggy
[  712.891636][   T41] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  714.320928][T10057] MTRR 1 not used
[  714.456999][T10054] wlan0 speed is unknown, defaulting to 1000
[  714.519848][T10067] loop7: detected capacity change from 0 to 256
[  714.602113][T10067] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  714.730109][   T26] audit: type=1800 audit(1789061408.258:29): pid=10074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1276" name="bus" dev="loop7" ino=1048646 res=0 errno=0
[  714.808187][   T26] audit: type=1800 audit(1789061408.288:30): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1276" name="file1" dev="loop7" ino=1048645 res=0 errno=0
[  714.894925][ T8953] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  714.940186][ T8953] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  715.253018][   T41] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  715.282297][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1282'.
[  715.662202][T10077] ceph: No mds server is up or the cluster is laggy
[  715.700408][T10098] loop0: detected capacity change from 0 to 512
[  715.784037][   T41] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  715.828644][T10098] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  717.220194][T10118] loop6: detected capacity change from 0 to 256
[  717.317138][T10118] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  717.405504][   T26] audit: type=1800 audit(1789061410.938:31): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1292" name="file1" dev="loop6" ino=1048647 res=0 errno=0
[  717.479363][   T26] audit: type=1800 audit(1789061410.968:32): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1292" name="bus" dev="loop6" ino=1048648 res=0 errno=0
[  717.595872][T10127] wlan0 speed is unknown, defaulting to 1000
[  717.603951][T10132] MTRR 1 not used
[  718.288870][T10146] loop8: detected capacity change from 0 to 512
[  718.371874][T10146] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  719.862096][ T4292] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  720.929780][T10169] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1313'.
[  721.180761][T10176] loop6: detected capacity change from 0 to 256
[  721.250873][T10176] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  721.340166][   T26] audit: type=1800 audit(1789061414.868:33): pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1310" name="bus" dev="loop6" ino=1048649 res=0 errno=0
[  722.781474][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'.
[  723.087879][T10198] wlan0 speed is unknown, defaulting to 1000
[  723.323000][T10207] MTRR 1 not used
[  723.588108][T10212] loop7: detected capacity change from 0 to 512
[  723.630443][T10212] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  723.655641][T10214] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1327'.
[  726.856007][T10241] MTRR 1 not used
[  727.055954][T10248] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1340'.
[  728.870411][T10263] wlan0 speed is unknown, defaulting to 1000
[  730.349072][T10288] MTRR 1 not used
[  730.387224][T10290] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1353'.
[  730.709929][T10304] loop8: detected capacity change from 0 to 512
[  730.739938][T10304] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  730.922215][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055c2f400: rx timeout, send abort
[  730.930842][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055c2f400: 0x00100: (3) A timeout occurred and this is the connection abort to close the session.
[  732.281900][T10316] wlan0 speed is unknown, defaulting to 1000
[  732.606873][T10325] MTRR 1 not used
[  733.785052][T10333] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1367'.
[  734.001571][T10336] loop7: detected capacity change from 0 to 256
[  734.084034][T10336] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  734.177502][   T26] audit: type=1800 audit(1789061427.708:34): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1369" name="bus" dev="loop7" ino=1048650 res=0 errno=0
[  734.850568][   T41] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX)
[  734.859979][T10338] ceph: No mds server is up or the cluster is laggy
[  735.203845][T10358] MTRR 1 not used
[  735.423190][T10363] loop8: detected capacity change from 0 to 512
[  735.460918][T10363] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  736.087284][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880581b7800: rx timeout, send abort
[  736.588380][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880581b5000: rx timeout, send abort
[  736.602192][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880581b7800: abort rx timeout. Force session deactivation
[  736.657005][T10368] wlan0 speed is unknown, defaulting to 1000
[  736.664291][T10376] loop0: detected capacity change from 0 to 256
[  736.705234][T10376] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  736.775751][   T26] audit: type=1800 audit(1789061430.308:35): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1384" name="bus" dev="loop0" ino=1048651 res=0 errno=0
[  737.096682][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880581b5000: abort rx timeout. Force session deactivation
[  737.422276][T10391] MTRR 1 not used
[  738.963300][T10406] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1395'.
[  739.840921][T10428] netlink: 'syz.2.1405': attribute type 1 has an invalid length.
[  739.868015][T10428] device bond1 entered promiscuous mode
[  739.874450][T10428] 8021q: adding VLAN 0 to HW filter on device bond1
[  739.911100][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1405'.
[  739.997250][T10428] bond1: (slave bridge1): making interface the new active one
[  740.044686][T10428] device bridge1 entered promiscuous mode
[  740.078458][T10428] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  740.098059][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  741.287715][T10440] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1409'.
[  741.330943][T10438] wlan0 speed is unknown, defaulting to 1000
[  741.342291][T10444] loop6: detected capacity change from 0 to 256
[  741.391044][T10444] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  741.459039][   T26] audit: type=1800 audit(1789061434.988:36): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1411" name="bus" dev="loop6" ino=1048652 res=0 errno=0
[  743.218771][T10473] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1422'.
[  743.384148][ T4323] ------------[ cut here ]------------
[  743.389978][ T4323] WARNING: CPU: 0 PID: 4323 at net/ceph/messenger_v2.c:2940 ceph_con_v2_try_read+0x71c6/0x7330
[  743.400843][ T4323] Modules linked in:
[  743.404816][ T4323] CPU: 0 PID: 4323 Comm: kworker/0:4 Not tainted syzkaller #0
[  743.412345][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  743.422469][ T4323] Workqueue: ceph-msgr ceph_con_workfn
[  743.428032][ T4323] RIP: 0010:ceph_con_v2_try_read+0x71c6/0x7330
[  743.434274][ T4323] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 35 89 8e f7 48 c7 c7 a0 97 ad 8b 44 89 f6 e8 76 10 5a f7 0f 0b e9 45 ff ff ff e8 1a 89 8e f7 <0f> 0b 41 bd c3 ff ff ff e9 39 ff ff ff e8 08 89 8e f7 0f 0b 41 bd
[  743.453985][ T4323] RSP: 0018:ffffc900040a76c0 EFLAGS: 00010293
[  743.460552][ T4323] RAX: ffffffff89f3b876 RBX: dffffc0000000000 RCX: ffff88802d84da00
[  743.468600][ T4323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  743.476649][ T4323] RBP: ffffc900040a7bb8 R08: 0000000000000000 R09: 0000000000000002
[  743.484700][ T4323] R10: 0000000000000006 R11: 0000000000000000 R12: fffff52000814f24
[  743.492740][ T4323] R13: 1ffff1100f3230e7 R14: 0000000000000000 R15: ffff8880799186c0
[  743.500766][ T4323] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  743.509895][ T4323] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  743.516561][ T4323] CR2: 00007f867c3eb840 CR3: 0000000027f8d000 CR4: 00000000003506f0
[  743.524615][ T4323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  743.532659][ T4323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  743.540676][ T4323] Call Trace:
[  743.544114][ T4323]  <TASK>
[  743.547153][ T4323]  ? prepare_write_message_footer+0x4b0/0x4b0
[  743.553319][ T4323]  ? __mutex_trylock_common+0x15c/0x260
[  743.558915][ T4323]  ? trace_raw_output_contention_end+0xd0/0xd0
[  743.565150][ T4323]  ? rcu_is_watching+0x11/0xa0
[  743.570030][ T4323]  ? trace_contention_end+0x5f/0x170
[  743.575395][ T4323]  ? __mutex_lock+0x1ab/0xae0
[  743.580154][ T4323]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  743.586237][ T4323]  ? __lock_acquire+0x7c40/0x7c40
[  743.591313][ T4323]  ceph_con_workfn+0x1ed/0x1110
[  743.596273][ T4323]  ? _raw_spin_unlock_irq+0x1f/0x40
[  743.601521][ T4323]  ? process_one_work+0x7b4/0x1160
[  743.606774][ T4323]  process_one_work+0x8ab/0x1160
[  743.611783][ T4323]  ? worker_detach_from_pool+0x240/0x240
[  743.617511][ T4323]  ? _raw_spin_lock_irq+0xb7/0xf0
[  743.622613][ T4323]  ? _raw_spin_lock_irqsave+0x100/0x100
[  743.628209][ T4323]  ? wq_worker_running+0x97/0x190
[  743.633382][ T4323]  worker_thread+0xaf5/0x12a0
[  743.638122][ T4323]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  743.644131][ T4323]  kthread+0x29d/0x330
[  743.648287][ T4323]  ? worker_clr_flags+0x1a0/0x1a0
[  743.653394][ T4323]  ? kthread_blkcg+0xd0/0xd0
[  743.658026][ T4323]  ret_from_fork+0x1f/0x30
[  743.662559][ T4323]  </TASK>
[  743.665611][ T4323] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  743.672927][ T4323] CPU: 0 PID: 4323 Comm: kworker/0:4 Not tainted syzkaller #0
[  743.680416][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  743.690503][ T4323] Workqueue: ceph-msgr ceph_con_workfn
[  743.696191][ T4323] Call Trace:
[  743.699496][ T4323]  <TASK>
[  743.702454][ T4323]  dump_stack_lvl+0x188/0x24e
[  743.707183][ T4323]  ? memcpy+0x3c/0x60
[  743.711217][ T4323]  ? show_regs_print_info+0x12/0x12
[  743.716472][ T4323]  ? load_image+0x410/0x410
[  743.721040][ T4323]  panic+0x2d3/0x710
[  743.724974][ T4323]  ? bpf_jit_dump+0xd0/0xd0
[  743.729525][ T4323]  ? ret_from_fork+0x1f/0x30
[  743.732118][T10472] ceph: No mds server is up or the cluster is laggy
[  743.740752][ T4323]  __warn+0x2f8/0x4f0
[  743.744775][ T4323]  ? ceph_con_v2_try_read+0x71c6/0x7330
[  743.750366][ T4323]  ? ceph_con_v2_try_read+0x71c6/0x7330
[  743.755948][ T4323]  report_bug+0x2ba/0x4f0
[  743.760379][ T4323]  ? ceph_con_v2_try_read+0x71c6/0x7330
[  743.765964][ T4323]  handle_bug+0x3a/0x70
[  743.770162][ T4323]  exc_invalid_op+0x16/0x40
[  743.774710][ T4323]  asm_exc_invalid_op+0x16/0x20
[  743.779608][ T4323] RIP: 0010:ceph_con_v2_try_read+0x71c6/0x7330
[  743.785902][ T4323] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 35 89 8e f7 48 c7 c7 a0 97 ad 8b 44 89 f6 e8 76 10 5a f7 0f 0b e9 45 ff ff ff e8 1a 89 8e f7 <0f> 0b 41 bd c3 ff ff ff e9 39 ff ff ff e8 08 89 8e f7 0f 0b 41 bd
[  743.805634][ T4323] RSP: 0018:ffffc900040a76c0 EFLAGS: 00010293
[  743.811762][ T4323] RAX: ffffffff89f3b876 RBX: dffffc0000000000 RCX: ffff88802d84da00
[  743.819767][ T4323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  743.827773][ T4323] RBP: ffffc900040a7bb8 R08: 0000000000000000 R09: 0000000000000002
[  743.835807][ T4323] R10: 0000000000000006 R11: 0000000000000000 R12: fffff52000814f24
[  743.843810][ T4323] R13: 1ffff1100f3230e7 R14: 0000000000000000 R15: ffff8880799186c0
[  743.851827][ T4323]  ? ceph_con_v2_try_read+0x71c6/0x7330
[  743.857498][ T4323]  ? prepare_write_message_footer+0x4b0/0x4b0
[  743.863627][ T4323]  ? __mutex_trylock_common+0x15c/0x260
[  743.869256][ T4323]  ? trace_raw_output_contention_end+0xd0/0xd0
[  743.875452][ T4323]  ? rcu_is_watching+0x11/0xa0
[  743.880260][ T4323]  ? trace_contention_end+0x5f/0x170
[  743.885592][ T4323]  ? __mutex_lock+0x1ab/0xae0
[  743.890321][ T4323]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  743.896345][ T4323]  ? __lock_acquire+0x7c40/0x7c40
[  743.901421][ T4323]  ceph_con_workfn+0x1ed/0x1110
[  743.906331][ T4323]  ? _raw_spin_unlock_irq+0x1f/0x40
[  743.911624][ T4323]  ? process_one_work+0x7b4/0x1160
[  743.916788][ T4323]  process_one_work+0x8ab/0x1160
[  743.921784][ T4323]  ? worker_detach_from_pool+0x240/0x240
[  743.927465][ T4323]  ? _raw_spin_lock_irq+0xb7/0xf0
[  743.932527][ T4323]  ? _raw_spin_lock_irqsave+0x100/0x100
[  743.938117][ T4323]  ? wq_worker_running+0x97/0x190
[  743.943236][ T4323]  worker_thread+0xaf5/0x12a0
[  743.947979][ T4323]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  743.953934][ T4323]  kthread+0x29d/0x330
[  743.958040][ T4323]  ? worker_clr_flags+0x1a0/0x1a0
[  743.963098][ T4323]  ? kthread_blkcg+0xd0/0xd0
[  743.967725][ T4323]  ret_from_fork+0x1f/0x30
[  743.972195][ T4323]  </TASK>
[  743.975561][ T4323] Kernel Offset: disabled
[  743.979962][ T4323] Rebooting in 86400 seconds..