last executing test programs:

17m11.679755376s ago: executing program 32 (id=8):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000a00)='rd_', 0x3)

16m50.308802488s ago: executing program 33 (id=97):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000001180)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)

16m5.264005167s ago: executing program 34 (id=354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}], 0x1, 0x40000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)

16m5.1042119s ago: executing program 35 (id=357):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x18}, @void, @eth={@random="d06d0b76b77d", @multicast, @val={@val={0x88a8, 0x0, 0x0, 0xc}}, {@generic={0x8906, "1b17"}}}}, 0x1c)

15m9.217777018s ago: executing program 36 (id=720):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "8029335287b7a081"}}}}}}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x1, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}])

15m9.179300419s ago: executing program 37 (id=723):
r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r2, 0x3, 0x0)
getdents64(r2, 0x0, 0x22)

14m33.975227082s ago: executing program 38 (id=907):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f00000002c0)=""/153, 0x99)

14m27.974348546s ago: executing program 39 (id=945):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0xf27}, &(0x7f0000000080)=0x90)

13m51.541099068s ago: executing program 40 (id=1107):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1\n', 0x2)

12m28.439312458s ago: executing program 41 (id=1637):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x20}}, 0x0)
write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000f50400000007"], 0x11)

10m19.763694769s ago: executing program 42 (id=2314):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_emit_ethernet(0x6e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@hopopts]}}}}}}}, 0x0)

9m43.359870041s ago: executing program 2 (id=2438):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b0800"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x1, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000004ecb1f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

9m42.659764808s ago: executing program 2 (id=2439):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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")
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
waitid(0x2, r1, 0x0, 0x4, 0x0)

9m39.372157006s ago: executing program 2 (id=2447):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
close(0x3)
r2 = userfaultfd(0x801)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_dev$MSR(&(0x7f0000002800), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

9m38.356557181s ago: executing program 2 (id=2448):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x800714, &(0x7f0000000140), 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
chdir(&(0x7f0000000380)='./file0\x00')
chdir(&(0x7f00000001c0)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

9m37.53912593s ago: executing program 43 (id=2399):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

9m37.522647311s ago: executing program 2 (id=2451):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0)
r1 = timerfd_create(0x8, 0x800)
timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

9m34.562730831s ago: executing program 2 (id=2463):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
close(r2)

9m34.015310825s ago: executing program 44 (id=2463):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
close(r2)

7m25.470294247s ago: executing program 9 (id=2899):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4)
getdents64(r2, &(0x7f0000000000)=""/49, 0x31)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

7m25.208242224s ago: executing program 9 (id=2901):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
socket(0x2000000015, 0x80005, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x121000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4, 0x1000002, 0x234}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40050001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x2, 0xf7ffffff, 0x0, r2}}], 0x1, 0x0, 0x0)

7m24.633266918s ago: executing program 9 (id=2903):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)

7m24.188202798s ago: executing program 9 (id=2906):
socket$inet(0x2, 0x4000000000000001, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100), 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2804c0e, &(0x7f0000000cc0)={[{@debug}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x3}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

7m23.348441128s ago: executing program 9 (id=2911):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000340)={0x0, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc)
close(r3)

7m17.81013123s ago: executing program 9 (id=2924):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="000501080000ec"], 0x0, 0x0, 0x0, 0x0})

7m16.54729766s ago: executing program 45 (id=2924):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="000501080000ec"], 0x0, 0x0, 0x0, 0x0})

4m27.745711513s ago: executing program 7 (id=3436):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)
tee(r1, r3, 0x60000000000, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x80)

4m24.007775202s ago: executing program 7 (id=3445):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d2d2dff7170fd51617a", 0xc6, 0xfffffffffffffffe)

4m22.821573991s ago: executing program 7 (id=3450):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x43c, &(0x7f0000000200)="$eJzs3MtrXFUYAPDv3knS1rZmLPXRhxqtYvCRNGmtBd0oCi4UBF3UZUzSEjttpIlgS9AoUpdScC8uBf8CV7oRdSW41b0UimTT2tXInbmTTKYzk2SaZKLz+8FNzrkPzvnm3DNzzj2ZBNCzhrIfScS+iPgjIgar2dUnDFV/3VpamPxnaWEyiXL57b+Tynk3lxYma6fWrttbyxQj0s+TONKk3LnLV85PlErTl/L86PyFD0bnLl95bubCxLnpc9MXx0+fPnli7IVT489vSpxZXDcPfzx79NDr7157c/LMtfd++S6pxd8Qx4akLY8MtbvsyXK5o+J2qv116aRvJbnGZeXWLx/boRARWXP1V/r/YBRipfEG47XPulo5YEsNtD+8WAb+x7LRPNCLah/02fy3tm3DsGPHuPFydQKUxX0r36pH+pan9v0N89vNNBQRZxZvf51tcTfPIQAA1umHbPzzbLPxXxoP1J13b76GUoyI+yLiQEScioiDEXF/ROXcByPioQ2W37hIcuf4J73eUWDrlI3/XsrXtlaP/5ZXJoqFPLe/En9/cnamNH08f02Go39Xlh9rU8aPr/7+Zatj9eO/bMvKr40F83pc79u1+pqpifmJu4m53o1PIw73NYs/WV4JSCLiUEQc7rCMmae/Pdrq2Nrxb63yNxFPVdt/MRrir0nar0+O7o7S9PHR2l1xp19/u/pWq/K7HX/W/hG7m7Z/rpjUr9fObbyMq39+0XJO0+n9P5C8s2rfRxPz85fGIgaSN6qVrt8/3nDe+Mr5WfzDx5r3/wOx8kociYjsJn44Ih6JiEfzuj8WEY9HxLE28f/8yhPvdx7/1srin4qI2/nzgLXbfyUxEI17micK53/6flWhxY3En7X/yUpqON+znve/Nev1Ytrh3QwAAAD/PWlE7IskHVlOp+nISPVv+A/GPWlpdm7+mbOzH16cqn5HoBj9ae1J12Dd89CxfFpfy4835E/kz42/Kuyp5EcmZ0tT3Q4eetzeFv0/81eh27UDtlxftysAdI3+D71L/4fepf9D72rS//d0ox7A9qv0/4Z/1fRJl+oCbK+Gz3/LftBDzP+hd+n/0Lv0f+hJc3ui/Zf3JSSaJiLdEdWQ2KJEt9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANse/AQAA///EqOWp")
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000140), 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x2, 0x9ff, 0x2, 0x100, 0x8}}, {0x4}}]}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0xc3c, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x81, 0x8, 0x5}})
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000000c0)=""/141)

4m21.711507207s ago: executing program 7 (id=3456):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
unlink(&(0x7f0000000180)='./file1\x00')

4m18.824088605s ago: executing program 7 (id=3463):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888)

4m18.373766776s ago: executing program 7 (id=3464):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='1', 0x1)

4m17.871094658s ago: executing program 46 (id=3464):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='1', 0x1)

3m2.650669687s ago: executing program 5 (id=3635):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x70)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x8000, 0x4, {<r1=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0x10000})
prlimit64(r1, 0xd, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0403001904"], 0x7)
landlock_restrict_self(0xffffffffffffffff, 0x8)

2m56.310884658s ago: executing program 5 (id=3646):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
gettimeofday(&(0x7f0000000040), 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m47.935357707s ago: executing program 5 (id=3662):
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4044004)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x10000e, 0x1000013e, 0x89, 0x2, 0x6})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0xfffffffffffffffd)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="c421f81731663e650f3066ba2000b81c3d0000ef360f011c7c64430f353406f3446fb931060000b8004800000f30", 0x36}], 0x0, 0x9, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
setpriority(0x2, 0x0, 0xb842)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)=@vmx={0x6, 0x0, 0x2080, {0x26000, 0xdddd1000, {0x2}, 0x1, 0x5}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f3874000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000001a49000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b6e6f1b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}})
ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f0000000180))

2m42.600379713s ago: executing program 5 (id=3675):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)

2m42.218880942s ago: executing program 5 (id=3677):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

2m41.118215359s ago: executing program 5 (id=3678):
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
execveat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={[0x0]}, 0x0, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0)
read(r1, &(0x7f00000002c0)=""/10, 0x5b)

2m25.10288765s ago: executing program 47 (id=3678):
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
connect(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
execveat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={[0x0]}, 0x0, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0)
read(r1, &(0x7f00000002c0)=""/10, 0x5b)

2m23.40685335s ago: executing program 1 (id=3707):
syz_genetlink_get_family_id$smc(&(0x7f0000000680), 0xffffffffffffffff)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8)

2m16.431884735s ago: executing program 1 (id=3726):
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = dup(r2)
syz_ublk_setup_queues(r4, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2m14.686738357s ago: executing program 1 (id=3720):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

2m13.901568466s ago: executing program 1 (id=3722):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c)
listen(r3, 0x6f6)
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_create(0x100)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8)

2m8.632010241s ago: executing program 1 (id=3729):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)

2m5.930826995s ago: executing program 1 (id=3731):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

1m50.539916441s ago: executing program 48 (id=3731):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

24.267863173s ago: executing program 4 (id=3867):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x20004800)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)

22.043570746s ago: executing program 4 (id=3869):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000180)={0x1a, 0x9, 0x1, 'queue0\x00', 0x8})

20.488479283s ago: executing program 4 (id=3870):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
listen(r3, 0x5)
close_range(r3, 0xffffffffffffffff, 0x0)

15.786758124s ago: executing program 4 (id=3881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r3 = open(0x0, 0x167842, 0x1fb)
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000300012800b00010067656e65766500002000028014001200fc0100000000000000000000000000000800011504000000"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000040)=0xf, 0x4)

14.791847918s ago: executing program 3 (id=3882):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)

14.788833058s ago: executing program 6 (id=3883):
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
open(0x0, 0x84242, 0x1df2a23c5997fad6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

13.636165015s ago: executing program 3 (id=3885):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

13.543371608s ago: executing program 6 (id=3887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)

12.373566725s ago: executing program 6 (id=3888):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x8)
sendto$inet(r0, &(0x7f0000000240), 0x0, 0x4040000, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x5, 0x0, 0x200005, 0x4, 0x8001, 0xfffffffffffffffb, 0x9e9, 0x4, 0x3f, 0x6000, 0x5, 0xffffffffffffffff, 0xee01, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.18132665s ago: executing program 3 (id=3890):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
prlimit64(0x0, 0xe, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1342}], 0x1, 0x0, 0x0, 0x0)

12.074438612s ago: executing program 6 (id=3891):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

12.040613203s ago: executing program 0 (id=3892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
listen(r3, 0x5)
close_range(r3, 0xffffffffffffffff, 0x0)

8.791735721s ago: executing program 6 (id=3893):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
io_setup(0x1, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80010142, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

8.79098399s ago: executing program 3 (id=3902):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
wait4(0x0, 0x0, 0x0, 0x0)

8.701088913s ago: executing program 0 (id=3894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getuid()
r3 = io_uring_setup(0x409, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x6, &(0x7f0000003f00)=[{0x0, 0xf0ff1f00000000}], 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)

7.55490339s ago: executing program 0 (id=3895):
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)

7.194834858s ago: executing program 0 (id=3896):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

7.11750849s ago: executing program 8 (id=3753):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
r3 = inotify_init1(0x80800)
inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x20000000)
r4 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
lseek(r2, 0x100, 0x0)
getdents(r2, &(0x7f0000000680)=""/160, 0xa0)

7.11233585s ago: executing program 4 (id=3897):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/kvm/exits\x00', 0x0, 0x0)
read(r4, 0x0, 0x0)

5.524741838s ago: executing program 4 (id=3898):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)

5.334304823s ago: executing program 8 (id=3899):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)

4.20815728s ago: executing program 8 (id=3900):
socket$netlink(0x10, 0x3, 0x0)
userfaultfd(0x801)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000600)=@secondary)

4.152068731s ago: executing program 0 (id=3901):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_open_dev$media(0x0, 0x4, 0x10000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)

3.078829326s ago: executing program 8 (id=3903):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
listen(r3, 0x5)
close_range(r3, 0xffffffffffffffff, 0x0)

2.632202437s ago: executing program 0 (id=3904):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x20004800)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)

1.339075648s ago: executing program 3 (id=3905):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x6, 0x0, 0xfa}, {}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pipe2(&(0x7f0000000040), 0x800)
r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

1.330266278s ago: executing program 8 (id=3906):
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)

1.23028762s ago: executing program 6 (id=3907):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_procfs(0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
sendto(r1, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)

134.936026ms ago: executing program 8 (id=3908):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

0s ago: executing program 3 (id=3909):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = msgget$private(0x0, 0x208)
msgsnd(r3, &(0x7f00000000c0)={0x2}, 0x8, 0x0)
msgrcv(r3, 0x0, 0x0, 0x835597a199ab43be, 0x4800)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10)
ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000100)={0x11, 0x148, 0xe81, 0x7, 0x5})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @sint={0x8, 0x86}}]})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r4, &(0x7f0000000000)="2e000000010002", 0x7)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000800)={0x1, 0x1})

kernel console output (not intermixed with test programs):

27] usb 8-1: Product: syz
[  732.546153][ T8409] device hsr_slave_1 left promiscuous mode
[  732.552911][   T27] usb 8-1: Manufacturer: syz
[  732.565139][   T27] usb 8-1: SerialNumber: syz
[  732.592478][T16957] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  734.017727][ T8409] bond1 (unregistering): Released all slaves
[  736.190654][T17024] ISOFS: Unable to identify CD-ROM format.
[  738.500778][ T8409] bond0 (unregistering): Released all slaves
[  738.642890][T17016] wlan0 speed is unknown, defaulting to 1000
[  738.749692][   T27] usb 8-1: USB disconnect, device number 12
[  738.760169][T17035] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  738.791537][T17016] wlan0 speed is unknown, defaulting to 1000
[  738.838082][T17016] wlan0 speed is unknown, defaulting to 1000
[  738.945034][T17016] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  739.090491][T17016] wlan0 speed is unknown, defaulting to 1000
[  739.129048][T17016] wlan0 speed is unknown, defaulting to 1000
[  739.145200][T17016] wlan0 speed is unknown, defaulting to 1000
[  739.161720][T17016] wlan0 speed is unknown, defaulting to 1000
[  739.181878][T17016] wlan0 speed is unknown, defaulting to 1000
[  739.200155][T17016] wlan0 speed is unknown, defaulting to 1000
[  740.178961][T17062] loop4: detected capacity change from 0 to 2048
[  740.261054][T17062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  741.666168][T17081] batman_adv: batadv0: Adding interface: veth0
[  741.715153][T17081] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  741.756794][T17081] batman_adv: batadv0: Interface activated: veth0
[  741.809584][T17084] loop1: detected capacity change from 0 to 64
[  742.452038][T17106] netlink: 'syz.1.3071': attribute type 1 has an invalid length.
[  743.292238][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3073'.
[  743.837861][T17132] batman_adv: batadv0: Interface deactivated: veth0
[  743.852793][T17132] batman_adv: batadv0: Removing interface: veth0
[  744.032789][T17138] loop4: detected capacity change from 0 to 256
[  745.664699][T17160] loop4: detected capacity change from 0 to 512
[  745.767790][T17160] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  745.830854][T17160] System zones: 0-2, 18-18, 34-35
[  745.861405][T17160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  745.944935][T17171] loop1: detected capacity change from 0 to 256
[  746.102332][ T7983] EXT4-fs (loop4): unmounting filesystem.
[  746.463672][T17184] loop4: detected capacity change from 0 to 512
[  746.576238][T17184] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  746.612036][T17182] device bond_slave_0 entered promiscuous mode
[  746.619422][T17182] device bond_slave_1 entered promiscuous mode
[  746.651930][T17184] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  746.687599][T17184] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  746.707555][T17182] device bond_slave_0 left promiscuous mode
[  746.713646][T17182] device bond_slave_1 left promiscuous mode
[  746.728750][T17184] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)!
[  746.760297][T17182] bond1: (slave vlan3): making interface the new active one
[  746.768986][T17184] EXT4-fs (loop4): group descriptors corrupted!
[  746.787344][T17182] device bond_slave_0 entered promiscuous mode
[  746.793664][T17182] device bond_slave_1 entered promiscuous mode
[  746.821545][T17182] bond1: (slave vlan3): Enslaving as an active interface with an up link
[  747.052910][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.059320][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  747.069601][ T1279] net_ratelimit: 6725 callbacks suppressed
[  747.069621][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  747.633398][T17214] Bluetooth: MGMT ver 1.22
[  750.628570][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  750.721370][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  750.754028][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  751.104570][T17257] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  751.166413][T17257] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  751.214266][T17257] bond2: (slave veth0_to_bond): Releasing active interface
[  751.233492][T17257] bond1: (slave veth9): Releasing active interface
[  751.257756][T17257] bond1: (slave veth9): the permanent HWaddr of slave - 16:aa:f9:18:fc:70 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  751.292788][ T6760] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  751.312218][T17257] device batadv1 entered promiscuous mode
[  751.351952][T17257] bond1: (slave batadv1): Releasing active interface
[  751.371681][T17257] device batadv1 left promiscuous mode
[  751.396828][T17257] bond3: (slave gretap3): Releasing active interface
[  751.421271][T17257] bond6: (slave ip6gretap1): Releasing active interface
[  751.475133][ T4315] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  751.492747][ T6760] usb 5-1: Using ep0 maxpacket: 16
[  751.510054][T17257] bond8: (slave geneve2): Releasing active interface
[  751.520049][ T6760] usb 5-1: config index 0 descriptor too short (expected 37359, got 202)
[  751.549075][ T6760] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  751.569614][ T6760] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  751.595335][ T6760] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95
[  751.613129][T17257] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  751.622892][T17257] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  751.632479][ T6760] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  751.650595][ T6760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.653676][T17257] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  751.674192][ T6760] usb 5-1: Product: syz
[  751.682799][ T4315] usb 8-1: Using ep0 maxpacket: 16
[  751.686191][ T6760] usb 5-1: Manufacturer: syz
[  751.692514][ T4315] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  751.692772][ T4315] usb 8-1: config 0 interface 0 has no altsetting 0
[  751.729315][T17257] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  751.733201][ T6760] usb 5-1: SerialNumber: syz
[  751.748245][ T4315] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  751.778116][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.818015][ T4315] usb 8-1: config 0 descriptor??
[  751.866279][T17258] team0: Mode changed to "activebackup"
[  751.994781][ T6760] usb 5-1: 0:2 : does not exist
[  752.017955][ T6760] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  752.091823][ T6760] usb 5-1: USB disconnect, device number 6
[  752.254209][ T4315] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0
[  752.394130][T16677] udevd[16677]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  752.599587][T17281] device team0 entered promiscuous mode
[  752.675883][ T4315] usb 8-1: USB disconnect, device number 13
[  752.704835][T17281] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  752.786688][T17281] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  752.815189][T17278] fido_id[17278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  752.915795][T17287] bridge0: port 1(vlan0) entered blocking state
[  752.969054][T17287] bridge0: port 1(vlan0) entered disabled state
[  752.997789][T17287] device vlan0 entered promiscuous mode
[  753.021967][T17287] device bond0 entered promiscuous mode
[  753.039493][T17287] device macvlan0 entered promiscuous mode
[  753.463930][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3123'.
[  753.631308][T17315] netlink: 'syz.5.3124': attribute type 1 has an invalid length.
[  754.373339][T17315] 8021q: adding VLAN 0 to HW filter on device bond9
[  754.590405][T17315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.682804][T17315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.691674][T17315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.760490][T17315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.802349][T17315] bond9: (slave geneve3): making interface the new active one
[  754.860717][T17315] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  754.930020][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  755.179026][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3130'.
[  755.202771][T17336] device bridge_slave_1 left promiscuous mode
[  755.229924][T17336] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.276194][T17336] device bridge_slave_0 left promiscuous mode
[  755.303428][T17336] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.732985][ T6760] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  755.912405][T17350] x_tables: duplicate underflow at hook 4
[  755.926048][ T6760] usb 8-1: config 0 interface 0 has no altsetting 0
[  755.942711][ T6760] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  755.960469][T17350] sctp: [Deprecated]: syz.5.3134 (pid 17350) Use of int in maxseg socket option.
[  755.960469][T17350] Use struct sctp_assoc_value instead
[  755.975392][ T6760] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.036291][ T6760] usb 8-1: config 0 descriptor??
[  756.156107][T17355] loop4: detected capacity change from 0 to 512
[  756.197453][T17355] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  756.252818][T17355] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  756.307022][T17344] xt_TCPMSS: Only works on TCP SYN packets
[  756.381498][T17355] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  756.482843][T17355] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  756.534260][T17355] EXT4-fs (loop4): failed to initialize system zone (-117)
[  756.545217][T17355] EXT4-fs (loop4): mount failed
[  756.685435][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3139'.
[  756.843612][T17373] device bond10 entered promiscuous mode
[  757.126641][ T6760] usbhid 8-1:0.0: can't add hid device: -71
[  757.152810][ T6760] usbhid: probe of 8-1:0.0 failed with error -71
[  757.171053][ T6760] usb 8-1: USB disconnect, device number 14
[  757.450993][T17382] binder_alloc: 17380: binder_alloc_buf, no vma
[  758.183780][T17353] lo speed is unknown, defaulting to 1000
[  758.191423][T17353] wlan0 speed is unknown, defaulting to 1000
[  758.913428][T17406] device syzkaller0 entered promiscuous mode
[  759.512951][T17416] netlink: 'syz.6.3149': attribute type 1 has an invalid length.
[  759.717637][T17416] 8021q: adding VLAN 0 to HW filter on device bond5
[  759.928259][T17422] device gretap1 entered promiscuous mode
[  759.977403][T17422] bond5: (slave gretap1): making interface the new active one
[  760.019584][T17422] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  760.082361][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  760.285046][T17428] sctp: [Deprecated]: syz.5.3152 (pid 17428) Use of struct sctp_assoc_value in delayed_ack socket option.
[  760.285046][T17428] Use struct sctp_sack_info instead
[  760.386354][T17430] netlink: 'syz.4.3153': attribute type 8 has an invalid length.
[  760.431611][T17430] device macvlan2 left promiscuous mode
[  760.547439][T17433] loop1: detected capacity change from 0 to 256
[  760.636350][T17433] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  763.893044][   T26] audit: type=1326 audit(44519.783:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17490 comm="syz.5.3170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ea279e0d9 code=0x0
[  763.977916][T17493] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3171'.
[  764.999529][ T3934] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  765.018884][ T3934] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  765.064841][ T3934] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  765.100773][ T3934] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  765.134671][ T3934] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  765.169493][ T3934] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  765.183341][T17523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  765.201764][ T3934] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  765.229371][ T3934] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  765.258752][ T3934] netdevsim netdevsim8 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  765.281777][T17523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  765.292705][ T3934] netdevsim netdevsim8 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  765.326650][ T3934] netdevsim netdevsim8 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  765.356809][ T3934] netdevsim netdevsim8 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  765.365307][T17523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  765.394035][ T3934] netdevsim netdevsim2 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  765.418416][ T3934] netdevsim netdevsim2 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  765.427563][ T3934] netdevsim netdevsim2 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  765.439993][ T3934] netdevsim netdevsim2 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  765.770374][T17533] netlink: 'syz.4.3183': attribute type 2 has an invalid length.
[  766.327472][T17538] loop1: detected capacity change from 0 to 512
[  766.971264][T17549] smc: net device lo applied user defined pnetid SYZ0
[  768.112883][T17556] device syzkaller0 entered promiscuous mode
[  768.263100][T17560] input: syz1 as /devices/virtual/input/input9
[  770.709516][T17575] loop7: detected capacity change from 0 to 4096
[  770.723396][T17594] netlink: 'syz.6.3200': attribute type 2 has an invalid length.
[  770.851285][T17575] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  770.877348][T17598] netlink: 'syz.5.3201': attribute type 1 has an invalid length.
[  770.976628][T16790] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  771.082745][T17604] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3201'.
[  771.187042][T14254] EXT4-fs (loop7): unmounting filesystem.
[  771.204586][T16790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  771.229182][T17604] bond11: (slave veth13): Enslaving as an active interface with a down link
[  771.232906][T16790] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7
[  771.272440][T17606] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  771.289798][T17611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3201'.
[  771.301021][T16790] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40
[  771.335694][T16790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.348818][T16790] usb 2-1: Product: syz
[  771.358694][T16790] usb 2-1: Manufacturer: syz
[  771.367456][T17611] 8021q: adding VLAN 0 to HW filter on device bond11
[  771.381749][T16790] usb 2-1: SerialNumber: syz
[  771.586822][T17619] netlink: 'syz.5.3204': attribute type 1 has an invalid length.
[  771.691598][T16790] usb 2-1: Can't get UAC3 power state for id 10
[  771.701040][T17619] device bond12 entered promiscuous mode
[  771.716315][T16790] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  771.724238][T17619] 8021q: adding VLAN 0 to HW filter on device bond12
[  771.747451][T16790] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  771.968801][T17619] bond12: (slave bridge4): making interface the new active one
[  772.002448][T16790] snd-usb-audio: probe of 2-1:1.0 failed with error -71
[  772.017767][T17619] device bridge4 entered promiscuous mode
[  772.048959][T17632] loop4: detected capacity change from 0 to 512
[  772.086706][T16790] usb 2-1: USB disconnect, device number 2
[  772.100033][T17619] bond12: (slave bridge4): Enslaving as an active interface with an up link
[  772.177850][T17632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  772.213060][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready
[  772.383624][T17634] udevd[17634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  772.723439][   T26] audit: type=1326 audit(44528.603:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  772.776640][T17645] syz.1.3210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  772.829181][   T26] audit: type=1326 audit(44528.603:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  772.923475][   T26] audit: type=1326 audit(44528.663:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  773.032013][   T26] audit: type=1326 audit(44528.693:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  773.060264][ T7983] EXT4-fs (loop4): unmounting filesystem.
[  773.109486][   T26] audit: type=1326 audit(44528.693:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  773.218490][   T26] audit: type=1326 audit(44528.703:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  773.416715][   T26] audit: type=1326 audit(44528.703:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  773.629352][   T26] audit: type=1326 audit(44528.703:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  773.949141][   T26] audit: type=1326 audit(44528.703:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  774.403778][   T26] audit: type=1326 audit(44528.703:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.1.3210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc9ce79e0d9 code=0x7ffc0000
[  776.203276][T17696] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  776.723999][T17712] device syzkaller0 entered promiscuous mode
[  776.871457][T17712] tipc: Started in network mode
[  776.877122][T17712] tipc: Node identity 128ad31b3c98, cluster identity 4711
[  777.155285][T17712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  777.225928][T17711] tipc: Resetting bearer <eth:syzkaller0>
[  778.440756][T17711] tipc: Disabling bearer <eth:syzkaller0>
[  778.973121][ T6432] tipc: Node number set to 772985627
[  779.025991][T17721] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3230'.
[  779.180156][T17721] team0 (unregistering): Port device vlan0 removed
[  779.223173][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3232'.
[  779.545292][T17742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  779.554571][T17742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  779.562093][T17742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  779.655963][T17742] device bridge_slave_0 left promiscuous mode
[  779.662271][T17742] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.682924][T17742] device bridge_slave_1 left promiscuous mode
[  779.689217][T17742] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.701193][T17742] .`: (slave bond_slave_0): Releasing backup interface
[  779.729216][T17742] .`: (slave bond_slave_1): Releasing backup interface
[  779.790942][T17742] team0: Port device team_slave_1 removed
[  779.797815][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  779.805406][T17742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  779.850900][T17742] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  779.858919][T17742] batman_adv: batadv0: Removing interface: batadv_slave_1
[  779.881558][ T6760] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  780.031000][T17742] .`: (slave netdevsim0): Releasing backup interface
[  780.055624][T17742] bond0: (slave bridge1): Releasing backup interface
[  780.089444][ T6760] usb 5-1: config 0 has no interfaces?
[  780.108155][ T6760] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  780.152282][ T6760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.202513][ T6760] usb 5-1: config 0 descriptor??
[  780.438724][ T6760] usb 5-1: USB disconnect, device number 7
[  780.912456][T17734] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3222'.
[  781.604332][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  781.604348][   T26] audit: type=1800 audit(44537.493:1112): pid=17761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3238" name="bus" dev="ramfs" ino=91348 res=0 errno=0
[  784.137392][T17823] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3253'.
[  786.875254][T17861] loop1: detected capacity change from 0 to 16
[  787.040403][T17861] loop1: detected capacity change from 0 to 512
[  790.895967][T17900] netlink: 'syz.6.3274': attribute type 30 has an invalid length.
[  790.946629][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3274'.
[  793.223580][T17937] xt_cgroup: path and classid specified
[  793.305950][T17940] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3282'.
[  793.402818][ T4315] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  793.505078][T17942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3283'.
[  793.635781][ T4315] usb 8-1: Using ep0 maxpacket: 32
[  793.647752][ T4315] usb 8-1: unable to get BOS descriptor or descriptor too short
[  793.670457][ T4315] usb 8-1: config 254 has an invalid interface number: 103 but max is 0
[  793.699527][ T4315] usb 8-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  793.862390][ T4315] usb 8-1: config 254 has no interface number 0
[  794.577712][ T4315] usb 8-1: config 254 interface 103 has no altsetting 0
[  795.886064][ T4315] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b
[  795.898110][ T4315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.907585][ T4315] usb 8-1: Product: syz
[  795.911831][ T4315] usb 8-1: Manufacturer: syz
[  795.916990][ T4315] usb 8-1: SerialNumber: syz
[  796.175060][ T4315] usbserial_generic 8-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  796.218298][ T4315] usbserial_generic 8-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  796.309609][ T4315] usbserial_generic 8-1:254.103: device has no bulk endpoints
[  796.400172][ T4315] usb 8-1: USB disconnect, device number 15
[  797.322278][T17976] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3287'.
[  798.460369][   T26] audit: type=1800 audit(44554.343:1113): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3290" name="addr_trtype" dev="configfs" ino=91677 res=0 errno=0
[  798.493211][T17980] nvmet_tcp: malformed ip/port passed: :8009
[  798.535973][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'.
[  798.567297][   T26] audit: type=1800 audit(44554.373:1114): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3290" name="addr_trsvcid" dev="configfs" ino=91678 res=0 errno=0
[  798.802780][   T26] audit: type=1800 audit(44554.373:1115): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3290" name="addr_adrfam" dev="configfs" ino=91679 res=0 errno=0
[  799.207537][T18004] device syzkaller0 entered promiscuous mode
[  802.631507][T18034] loop7: detected capacity change from 0 to 512
[  802.689362][T18034] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  802.791171][T18034] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  802.822359][T18034] EXT4-fs (loop7): 1 truncate cleaned up
[  802.828293][T18034] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  802.847970][T18032] EXT4-fs error (device loop7) in ext4_setattr:5695: error 28
[  804.814204][T14254] EXT4-fs (loop7): unmounting filesystem.
[  804.893696][T18053] ip_tables: iptables: counters copy to user failed while replacing table
[  808.012202][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.051553][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.071790][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.092030][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.122693][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.140393][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.153260][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.167539][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.197160][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.222467][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.264437][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.292237][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.328585][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.356711][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.384771][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.415372][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.445726][ T4737] hid-generic 0006:0008:0001.0008: unknown main item tag 0x0
[  808.488090][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  808.498163][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  808.506745][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  808.629462][ T4737] hid-generic 0006:0008:0001.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  808.952975][T18111] fido_id[18111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  809.174694][T18119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  809.244117][T18119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  809.276070][T18119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  809.350892][T18119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  809.386842][T18119] device geneve3 entered promiscuous mode
[  810.738871][ T4280] Bluetooth: hci2: command 0x0406 tx timeout
[  811.088488][T18130] netlink: 'syz.6.3326': attribute type 1 has an invalid length.
[  811.186652][T18133] Bluetooth: MGMT ver 1.22
[  811.439641][   T26] audit: type=1326 audit(44567.323:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.465494][   T26] audit: type=1326 audit(44567.353:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.492451][   T26] audit: type=1326 audit(44567.363:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.519489][   T26] audit: type=1326 audit(44567.363:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.549653][   T26] audit: type=1326 audit(44567.373:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.576041][   T26] audit: type=1326 audit(44567.373:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.605044][   T26] audit: type=1326 audit(44567.373:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.629606][   T26] audit: type=1326 audit(44567.373:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.662109][   T26] audit: type=1326 audit(44567.373:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  811.747815][   T26] audit: type=1326 audit(44567.373:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.4.3329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  812.095957][T18150] loop4: detected capacity change from 0 to 2048
[  812.199941][T18150] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  812.262211][T18150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  813.970029][ T8419] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.243134][ T8419] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.266982][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'.
[  814.303026][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'.
[  814.335048][T18182] loop4: detected capacity change from 0 to 256
[  814.340952][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'.
[  814.504324][ T8419] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.752234][ T8419] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.857592][T18186] bond2: (slave bridge2): Releasing backup interface
[  814.865905][T18186] device bridge2 left promiscuous mode
[  814.880749][T18186] bond3: (slave geneve2): Releasing active interface
[  814.928890][T18186] batman_adv: batadv0: Removing interface: gretap1
[  815.040933][T18186] bond4: (slave veth9): Releasing backup interface
[  815.132178][T18186] bond5: (slave bridge3): Releasing backup interface
[  815.154960][T18186] bridge0: port 1(macvlan2) entered disabled state
[  815.203418][T18199] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  815.245986][T18190] team0: Port device xfrm0 added
[  815.252731][T18192] tipc: Started in network mode
[  815.264267][T18192] tipc: Node identity 4e4e127c8bb3, cluster identity 4711
[  815.271810][T18192] tipc: Enabled bearer <eth:team0>, priority 0
[  815.280761][T18199] CIFS: Attempting to mount \\127.0.0.1\share
[  815.319464][T18201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  815.440414][ T8419] netdevsim netdevsim9 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[  815.491275][ T8419] netdevsim netdevsim9 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  815.576332][ T8419] netdevsim netdevsim9 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[  815.611720][ T8419] netdevsim netdevsim9 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  815.654736][T18210] exfat: Deprecated parameter 'debug'
[  815.660815][T18210] /dev/loop6: Can't open blockdev
[  815.704956][ T8419] netdevsim netdevsim9 eth15: set [0, 0] type 1 family 0 port 8472 - 0
[  815.784789][ T8419] netdevsim netdevsim9 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  815.835688][ T8419] netdevsim netdevsim9 eth16: set [0, 0] type 1 family 0 port 8472 - 0
[  815.886062][ T8419] netdevsim netdevsim9 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  816.018726][T18211] loop1: detected capacity change from 0 to 32768
[  816.046568][T18211] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  816.055575][T18211] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  816.089519][T18199] CIFS: VFS: cifs_mount failed w/return code = -112
[  816.157052][T18211] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  816.219862][ T6754] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  816.238033][ T6754] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  817.112958][ T6754] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 874ms
[  817.122577][T16790] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  817.132322][ T6754] gfs2: fsid=syz:syz.0: jid=0: Done
[  817.140719][T18211] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  817.402406][ T4737] tipc: Node number set to 3321696892
[  817.408984][ T4315] tipc: Node number set to 346015937
[  817.526656][T16790] usb 5-1: config 0 has an invalid interface number: 11 but max is 0
[  818.119765][T16790] usb 5-1: config 0 has no interface number 0
[  818.169218][T18211] gfs2: fsid=syz:syz.0: found 1 quota changes
[  818.207738][T16790] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  818.279725][T16790] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  818.307728][T16790] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0
[  818.331680][T16790] usb 5-1: config 0 interface 11 has no altsetting 0
[  818.349309][T16790] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  818.360075][T16790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.445272][T16790] usb 5-1: config 0 descriptor??
[  818.610930][T16790] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected
[  818.682234][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81
[  818.763405][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82
[  818.920891][T18241] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  818.954206][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1
[  819.038376][T18241] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  819.038423][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2
[  819.074152][T18241] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  819.285446][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85
[  819.295465][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5
[  819.333038][T16790] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  819.341609][T18241] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  819.353866][T18241] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  819.384471][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83
[  819.392338][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84
[  819.513600][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3
[  819.521384][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4
[  819.577392][T18250] loop7: detected capacity change from 0 to 256
[  819.593695][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86
[  819.607078][T18250] FAT-fs (loop7): Unrecognized mount option "00000000000000000000003" or missing value
[  819.623052][T16790] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6
[  819.661861][T16790] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  819.724705][T16790] usb 5-1: USB disconnect, device number 8
[  819.787754][T16790] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  819.858715][T16790] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  819.901866][T16790] keyspan 5-1:0.11: device disconnected
[  820.109481][T16439] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  820.124978][T16439] CPU: 1 PID: 16439 Comm: syz-executor Not tainted syzkaller #0
[  820.132681][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  820.142792][T16439] Call Trace:
[  820.146109][T16439]  <TASK>
[  820.149080][T16439]  dump_stack_lvl+0x188/0x24e
[  820.153888][T16439]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  820.160213][T16439]  ? show_regs_print_info+0x12/0x12
[  820.165437][T16439]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  820.171638][T16439]  ? gfs2_assert_warn_i+0x178/0x2c0
[  820.176927][T16439]  gfs2_assert_warn_i+0x187/0x2c0
[  820.181987][T16439]  gfs2_quota_cleanup+0x48c/0x670
[  820.187033][T16439]  gfs2_make_fs_ro+0x3e0/0x4c0
[  820.191837][T16439]  ? gfs2_dinode_out+0xb00/0xb00
[  820.196796][T16439]  ? do_raw_spin_lock+0x128/0x2f0
[  820.201885][T16439]  ? __rwlock_init+0x140/0x140
[  820.206685][T16439]  ? do_raw_spin_unlock+0x11d/0x230
[  820.211912][T16439]  gfs2_put_super+0x220/0x920
[  820.216634][T16439]  ? gfs2_evict_inode+0x1290/0x1290
[  820.221860][T16439]  generic_shutdown_super+0x130/0x340
[  820.227328][T16439]  kill_block_super+0x7c/0xe0
[  820.232034][T16439]  deactivate_locked_super+0x93/0xf0
[  820.237362][T16439]  cleanup_mnt+0x471/0x4f0
[  820.241887][T16439]  task_work_run+0x1d0/0x260
[  820.246564][T16439]  ? task_work_cancel+0x220/0x220
[  820.251628][T16439]  ? exit_to_user_mode_loop+0x3b/0x110
[  820.257189][T16439]  exit_to_user_mode_loop+0xe6/0x110
[  820.262526][T16439]  exit_to_user_mode_prepare+0xee/0x180
[  820.268115][T16439]  syscall_exit_to_user_mode+0x16/0x40
[  820.273607][T16439]  do_syscall_64+0x58/0xa0
[  820.278060][T16439]  ? clear_bhb_loop+0x60/0xb0
[  820.282777][T16439]  ? clear_bhb_loop+0x60/0xb0
[  820.287493][T16439]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  820.293452][T16439] RIP: 0033:0x7fc9ce79f317
[  820.297903][T16439] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  820.317536][T16439] RSP: 002b:00007ffd649e8cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  820.325982][T16439] RAX: 0000000000000000 RBX: 00007fc9ce834474 RCX: 00007fc9ce79f317
[  820.333981][T16439] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd649e8d80
[  820.341992][T16439] RBP: 00007ffd649e8d80 R08: 00007ffd649e9d80 R09: 00000000ffffffff
[  820.349988][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd649e9e10
[  820.357982][T16439] R13: 00007fc9ce834474 R14: 00000000000c80e4 R15: 00007ffd649e9e50
[  820.366091][T16439]  </TASK>
[  822.033098][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3362'.
[  822.108167][T18280] bond7: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  822.149516][T18280] bond7: (slave ip_vti0): Error -95 calling set_mac_address
[  822.207902][T18278] bond7 (unregistering): Released all slaves
[  822.720902][T18305] xt_CONNSECMARK: invalid mode: 0
[  823.601780][T18317] IPVS: set_ctl: invalid protocol: 47 172.20.20.24:20003
[  823.618998][ T4737] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  823.821889][ T4737] usb 8-1: config 0 has no interfaces?
[  823.830804][ T4737] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  823.860713][ T4737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.928283][ T4737] usb 8-1: config 0 descriptor??
[  824.687538][T16790] usb 8-1: USB disconnect, device number 16
[  825.926956][T18330] binder_alloc: 18329: pid 18329 spamming oneway? 2 buffers allocated for a total size of 5120
[  825.954451][T18330] binder_alloc: 18329: pid 18329 spamming oneway? 3 buffers allocated for a total size of 5128
[  827.564636][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3380'.
[  828.517076][T18371] loop4: detected capacity change from 0 to 2048
[  829.135159][T18371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  829.326126][ T8419] device hsr_slave_0 left promiscuous mode
[  829.418896][ T8419] device hsr_slave_1 left promiscuous mode
[  829.496443][ T8419] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.526343][ T8419] batman_adv: batadv0: Removing interface: batadv_slave_1
[  829.552797][ T6432] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  829.589973][ T8419] batman_adv: batadv0: Removing interface: bond1
[  829.630911][ T8419] device bridge_slave_1 left promiscuous mode
[  829.677225][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.726242][ T8419] device bridge_slave_0 left promiscuous mode
[  829.759684][ T6432] usb 2-1: not running at top speed; connect to a high speed hub
[  829.799966][ T6432] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  829.814772][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state
[  830.150069][ T6432] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  830.255195][ T6432] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  830.270685][ T6432] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  830.409834][ T7983] EXT4-fs (loop4): unmounting filesystem.
[  830.520053][ T6432] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  830.529247][ T6432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.539331][ T6432] usb 2-1: Product: syz
[  830.543994][ T6432] usb 2-1: Manufacturer: syz
[  830.548671][ T6432] usb 2-1: SerialNumber: syz
[  832.168927][ T8419] bond2 (unregistering): (slave geneve2): Releasing active interface
[  832.311495][ T6432] usb 2-1: 0:2 : does not exist
[  832.425056][ T6432] usb 2-1: USB disconnect, device number 3
[  832.835830][T17634] udevd[17634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  832.929251][T18426] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3393'.
[  834.604717][ T8419] bond2 (unregistering): Released all slaves
[  834.624636][ T8419] bond1 (unregistering): Released all slaves
[  834.918781][T18448] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  836.948833][ T8419] team0 (unregistering): Port device team_slave_1 removed
[  837.042960][ T8419] team0 (unregistering): Port device team_slave_0 removed
[  837.149266][ T8419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  837.353262][ T8419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  838.099169][ T8419] bond0 (unregistering): Released all slaves
[  838.518429][T18466] loop1: detected capacity change from 0 to 512
[  838.569523][T18466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  838.616114][T18466] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.3401: iget: bad i_size value: 38620345925642
[  838.653538][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3402'.
[  838.665982][T18466] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3401: couldn't read orphan inode 15 (err -117)
[  838.762745][T18466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  840.038072][T16439] EXT4-fs (loop1): unmounting filesystem.
[  844.377086][T18523] xt_CT: No such helper "netbios-ns"
[  844.547394][T18529] loop4: detected capacity change from 0 to 256
[  844.609556][T18529] exfat: Deprecated parameter 'utf8'
[  844.643251][T18529] exfat: Deprecated parameter 'utf8'
[  844.685846][T18529] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  847.796531][   T26] kauditd_printk_skb: 55 callbacks suppressed
[  847.796548][   T26] audit: type=1326 audit(44603.683:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  847.826697][    C0] vkms_vblank_simulate: vblank timer overrun
[  848.901061][   T26] audit: type=1326 audit(44603.723:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  848.924891][    C0] vkms_vblank_simulate: vblank timer overrun
[  848.958783][   T26] audit: type=1326 audit(44603.723:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  848.990221][   T26] audit: type=1326 audit(44603.743:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  849.014999][   T26] audit: type=1326 audit(44603.743:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  849.041444][   T26] audit: type=1326 audit(44603.743:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  849.267454][   T26] audit: type=1326 audit(44603.803:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  849.291279][    C0] vkms_vblank_simulate: vblank timer overrun
[  849.550876][   T26] audit: type=1326 audit(44603.803:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  849.574824][    C0] vkms_vblank_simulate: vblank timer overrun
[  849.732677][   T26] audit: type=1326 audit(44603.833:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  849.872564][   T26] audit: type=1326 audit(44603.833:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18584 comm="syz.6.3424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f379e0d9 code=0x7ffc0000
[  852.902428][T18621] device dummy0 entered promiscuous mode
[  852.933213][T18621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  853.964320][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  853.964338][   T26] audit: type=1326 audit(44609.853:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.118466][T18648] loop4: detected capacity change from 0 to 512
[  854.148205][   T26] audit: type=1326 audit(44609.883:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.181088][T18648] EXT4-fs: Ignoring removed bh option
[  854.233823][T18648] EXT4-fs: inline encryption not supported
[  854.281173][T18648] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  854.325694][   T26] audit: type=1326 audit(44609.883:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.421212][   T26] audit: type=1326 audit(44609.893:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.473989][   T26] audit: type=1326 audit(44609.893:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.500394][   T26] audit: type=1326 audit(44609.893:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.527721][   T26] audit: type=1326 audit(44609.893:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.547117][T18648] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  854.595505][   T26] audit: type=1326 audit(44609.893:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.682620][   T26] audit: type=1326 audit(44609.893:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.4.3440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ac959e0d9 code=0x7ffc0000
[  854.723073][T18648] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3440: bg 0: block 248: padding at end of block bitmap is not set
[  854.961859][T18648] Quota error (device loop4): write_blk: dquota write failed
[  855.042418][T18648] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.3440: Failed to acquire dquot type 1
[  855.111969][T18667] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  855.989408][T18648] EXT4-fs (loop4): 1 truncate cleaned up
[  856.637244][T18672] MPTCP: addr_signal error, add_addr=2, echo=1
[  856.643843][    C1] MPTCP: addr_signal error, add_addr=2, echo=1
[  856.650655][T18648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  856.902696][ T7983] EXT4-fs (loop4): unmounting filesystem.
[  857.896287][T18691] device syzkaller0 entered promiscuous mode
[  857.938792][T18691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  858.015158][T18689] tipc: Resetting bearer <eth:syzkaller0>
[  858.160197][T18695] loop7: detected capacity change from 0 to 512
[  858.180783][T18689] tipc: Disabling bearer <eth:syzkaller0>
[  858.198312][T18695] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  858.226429][T18697] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3451'.
[  858.294551][T18695] EXT4-fs error (device loop7): ext4_init_orphan_info:621: comm syz.7.3450: orphan file block 0: bad magic
[  858.395203][T18695] EXT4-fs (loop7): mount failed
[  858.572999][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3450'.
[  858.884571][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3454'.
[  859.298689][T18722] loop7: detected capacity change from 0 to 2048
[  859.336886][T18722] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  859.533127][T18722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  861.600179][T18738] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  861.950515][T14254] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  862.010421][T14254] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  864.253681][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'.
[  864.846936][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  864.865972][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  864.877203][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  864.886358][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  864.894099][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  864.901724][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  865.509399][T18772] lo speed is unknown, defaulting to 1000
[  865.523675][T18772] wlan0 speed is unknown, defaulting to 1000
[  866.632330][T18793] device syzkaller0 entered promiscuous mode
[  866.705388][T18793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  866.714759][T18792] tipc: Resetting bearer <eth:syzkaller0>
[  867.520796][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  867.608285][T18792] tipc: Disabling bearer <eth:syzkaller0>
[  867.649884][T18806] PKCS8: Unsupported PKCS#8 version
[  867.954131][T18772] chnl_net:caif_netlink_parms(): no params data found
[  868.820480][T18772] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.858032][T18772] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.926272][T18772] device bridge_slave_0 entered promiscuous mode
[  869.070308][T18772] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.188745][T18772] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.358304][T18772] device bridge_slave_1 entered promiscuous mode
[  869.592853][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[  869.734473][T18772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  869.773317][T18772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  869.892087][T18772] team0: Port device team_slave_0 added
[  869.918364][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3481'.
[  869.930079][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  869.936454][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  869.944571][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  869.980640][T18828] netlink: 'syz.6.3480': attribute type 4 has an invalid length.
[  870.050458][T18830] bridge4: port 1(veth11) entered blocking state
[  870.072963][T18830] bridge4: port 1(veth11) entered disabled state
[  870.095118][T18830] device veth11 entered promiscuous mode
[  870.150648][T18772] team0: Port device team_slave_1 added
[  870.183816][T18827] bridge4: port 2(veth13) entered blocking state
[  870.210661][T18827] bridge4: port 2(veth13) entered disabled state
[  870.218798][T18827] device veth13 entered promiscuous mode
[  870.472812][T18837] loop1: detected capacity change from 0 to 256
[  870.497030][T18837] FAT-fs (loop1): bogus sectors per cluster 0
[  870.515519][T18837] FAT-fs (loop1): Can't find a valid FAT filesystem
[  870.752038][T18772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  870.830574][T18772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  871.301382][T18772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.365953][T18772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.405331][T18772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  871.458508][T18772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.672654][ T4274] Bluetooth: hci3: command 0x040f tx timeout
[  871.981184][T18772] device hsr_slave_0 entered promiscuous mode
[  871.990650][T18772] device hsr_slave_1 entered promiscuous mode
[  872.001443][T18772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  872.722813][T18772] Cannot create hsr debugfs directory
[  874.477377][ T4274] Bluetooth: hci3: command 0x0419 tx timeout
[  875.803554][T18772] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  875.824224][T18772] netdevsim netdevsim3 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.234085][T18772] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  877.283001][T18772] netdevsim netdevsim3 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.875896][T18772] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  877.896489][T18772] netdevsim netdevsim3 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.119313][T18887] mac80211_hwsim hwsim12 wlan99: renamed from wlan0
[  878.213089][T18902] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[16439] was attempted by ""[18902]
[  879.394813][T18772] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  879.422864][T18772] netdevsim netdevsim3 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.456878][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'.
[  879.474003][T18912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  880.425642][T18912] batman_adv: batadv0: Removing interface: batadv_slave_1
[  880.598665][T18922] netlink: 'syz.6.3501': attribute type 1 has an invalid length.
[  880.620051][T18922] netlink: 'syz.6.3501': attribute type 7 has an invalid length.
[  880.670312][T18922] netlink: 'syz.6.3501': attribute type 8 has an invalid length.
[  881.051705][T18772] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  881.286841][T18936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3502'.
[  881.701743][T18772] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  881.834976][T18772] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  881.908054][T18772] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  883.011301][T18772] 8021q: adding VLAN 0 to HW filter on device bond0
[  883.067358][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  883.081171][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  883.112131][T18772] 8021q: adding VLAN 0 to HW filter on device team0
[  883.136757][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  883.166196][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  883.206735][T16631] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.213952][T16631] bridge0: port 1(bridge_slave_0) entered forwarding state
[  883.267247][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  883.314810][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  883.334730][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  883.359587][T16631] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.366804][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  883.393839][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  883.415081][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  883.440434][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  883.463832][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  883.473211][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  883.500585][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  883.515576][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  883.555031][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  883.564862][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  883.583506][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  883.604627][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  883.615488][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  884.480642][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  884.522759][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  884.703902][T18772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  885.116617][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  885.153718][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  885.186503][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  885.223975][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  885.263491][T18993] netlink: 'syz.1.3515': attribute type 13 has an invalid length.
[  885.431035][T18993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  885.515986][T18993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  885.535280][T18993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  885.576873][T18999] loop4: detected capacity change from 0 to 4096
[  885.610920][T18999] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  885.673830][T18999] ntfs3: loop4: Failed to load $Extend.
[  885.937072][T18772] device veth0_vlan entered promiscuous mode
[  885.978584][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  885.987738][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  886.055868][T18772] device veth1_vlan entered promiscuous mode
[  886.304596][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  886.333609][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  886.364495][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  886.380108][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  886.440919][T18772] device veth0_macvtap entered promiscuous mode
[  886.482107][T18772] device veth1_macvtap entered promiscuous mode
[  886.547758][T18772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.572744][T18772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.602375][T18772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.620368][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  886.640371][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  886.670327][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  886.721431][T18772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  886.740275][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  886.754717][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  886.771323][T18772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  886.785078][T18772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  886.797401][T18772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  886.856134][T18772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.159330][ T8437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.182699][ T8437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.212399][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  887.250822][ T8442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.262197][ T8442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.291961][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  887.342774][T19027] fuse: Unknown parameter 'group_i'
[  891.480592][ T6754] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  891.520563][ T4737] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  891.722692][ T4737] usb 4-1: Using ep0 maxpacket: 32
[  891.734940][ T4737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  891.798592][ T4737] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  891.832238][ T6754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.876228][ T4737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.004132][ T4737] usb 4-1: config 0 descriptor??
[  892.118273][ T4737] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  892.528676][ T6754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  892.538749][ T6754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  892.552126][ T6754] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  892.561586][ T6754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.572242][ T6754] usb 5-1: config 0 descriptor??
[  892.991074][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  892.999942][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.016771][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.030623][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.046777][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.060803][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.081942][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.112540][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.131488][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.152356][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.185368][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.272991][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.280565][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.292971][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.314280][ T6754] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  893.342025][ T6754] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  893.360846][ T4274] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11
[  893.879701][ T6754] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  894.186078][ T6754] usb 4-1: USB disconnect, device number 8
[  895.077007][T19102] loop3: detected capacity change from 0 to 2048
[  895.230617][T19102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  895.299196][T16790] usb 5-1: USB disconnect, device number 9
[  895.381184][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3537'.
[  895.665369][T18772] EXT4-fs (loop3): unmounting filesystem.
[  897.204478][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880563d4000: rx timeout, send abort
[  897.716185][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880563d4000: abort rx timeout. Force session deactivation
[  898.114266][T19131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  898.691612][T19136] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  901.417079][T19196] device syzkaller0 entered promiscuous mode
[  901.472907][T19191] xt_CT: No such helper "netbios-ns"
[  903.469861][T19225] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3558'.
[  903.534884][T19225] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  904.012817][ T1542] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  904.368174][ T1542] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  904.398400][ T1542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.455529][ T1542] usb 4-1: Product: syz
[  904.479723][ T1542] usb 4-1: Manufacturer: syz
[  904.512790][ T1542] usb 4-1: SerialNumber: syz
[  904.573490][ T1542] usb 4-1: config 0 descriptor??
[  904.674581][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'.
[  905.928642][ T1542] usb 4-1: USB disconnect, device number 9
[  906.025575][T17634] udevd[17634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  907.887187][T19280] netlink: 'syz.1.3571': attribute type 1 has an invalid length.
[  908.039537][T19280] 8021q: adding VLAN 0 to HW filter on device bond2
[  908.130800][T19281] bond2: (slave veth3): Enslaving as an active interface with a down link
[  908.263547][T19285] device bond2 entered promiscuous mode
[  908.297954][T19287] device macvlan2 entered promiscuous mode
[  908.323461][T19287] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  908.366606][T19298] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  908.457399][T19288] netlink: 'syz.3.3572': attribute type 13 has an invalid length.
[  908.547320][T19288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  908.692646][T19288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  908.701388][T19288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  913.994731][T19348] bond1: option mode: unable to set because the bond device has slaves
[  914.233501][T19350] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  914.438581][T19350] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  914.891747][T19354] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  914.910666][T19354] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  915.838367][T19373] loop1: detected capacity change from 0 to 8
[  917.248427][T19373] SQUASHFS error: zlib decompression failed, data probably corrupt
[  917.256505][T19373] SQUASHFS error: Failed to read block 0x9b: -5
[  917.262837][T19373] SQUASHFS error: Unable to read metadata cache entry [99]
[  917.270073][T19373] SQUASHFS error: Unable to read inode 0x127
[  917.285329][T19349] syz.3.3582 (19349): drop_caches: 2
[  917.685230][T19382] loop3: detected capacity change from 0 to 1024
[  917.723149][T19382] EXT4-fs: Ignoring removed bh option
[  917.785725][T19385] loop1: detected capacity change from 0 to 1024
[  917.841485][T19382] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  917.871345][T19385] EXT4-fs: Ignoring removed bh option
[  918.010007][T19385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  918.124733][T19385] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  918.184122][T19385] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  918.945873][T18772] EXT4-fs (loop3): unmounting filesystem.
[  919.577923][T19425] futex_wake_op: syz.3.3597 tries to shift op by 144; fix this program
[  920.247297][T19385] EXT4-fs (loop1): failed to open journal device unknown-block(0,5) -6
[  920.697230][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3592'.
[  921.162203][T19441] loop3: detected capacity change from 0 to 1764
[  927.596916][T19500] IPVS: set_ctl: invalid protocol: 47 172.20.20.24:20003
[  930.870028][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'.
[  931.137371][T19518] device bridge0 entered promiscuous mode
[  931.148497][T19518] device macvtap1 entered promiscuous mode
[  931.357603][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  931.364118][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  931.372221][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  931.872307][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'.
[  932.245999][ T4274] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15
[  936.170320][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880582c4800: rx timeout, send abort
[  936.678822][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880582c4800: abort rx timeout. Force session deactivation
[  943.038949][T19624] loop1: detected capacity change from 0 to 1024
[  944.483262][T19638] device syzkaller0 entered promiscuous mode
[  944.564270][T19625] Process accounting resumed
[  944.987014][T19645] fuse: Bad value for 'fd'
[  946.644041][T16790] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  946.823407][T19657] netlink: 'syz.4.3649': attribute type 1 has an invalid length.
[  946.847499][T16790] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  946.887492][T16790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.917967][T16790] usb 4-1: Product: syz
[  946.922211][T16790] usb 4-1: Manufacturer: syz
[  946.990348][T16790] usb 4-1: SerialNumber: syz
[  947.017987][T16790] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  948.046406][ T4316] usb 4-1: USB disconnect, device number 10
[  948.086288][T16790] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  948.163061][ T4316] usb 4-1: ath9k_htc: USB layer deinitialized
[  953.602232][T19721] kvm [19720]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1
[  953.618097][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.640400][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.681442][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.718909][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.755600][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.790443][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.819375][T19726] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  953.829464][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.880624][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  953.948609][T19721] kvm [19720]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1
[  954.247426][T19732] binder: 19730:19732 ioctl c00c6211 0 returned -14
[  958.035086][   T26] kauditd_printk_skb: 74 callbacks suppressed
[  958.035110][   T26] audit: type=1800 audit(44713.923:1301): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3669" name="bus" dev="ramfs" ino=98035 res=0 errno=0
[  958.478576][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3675'.
[  962.132766][   T26] audit: type=1800 audit(44718.023:1302): pid=19801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3682" name="/" dev="fuse" ino=1 res=0 errno=0
[  973.475436][T19868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.848704][   T26] audit: type=1800 audit(2147528382.733:1303): pid=19913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3711" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  979.124785][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  979.137739][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  979.147338][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  979.156774][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  979.192199][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  979.200410][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  980.121407][T19924] No such timeout policy "syz1"
[  981.523973][ T4280] Bluetooth: hci5: command 0x0409 tx timeout
[  983.592761][ T4280] Bluetooth: hci5: command 0x041b tx timeout
[  983.864360][T19914] lo speed is unknown, defaulting to 1000
[  984.443683][T19914] wlan0 speed is unknown, defaulting to 1000
[  985.672596][ T4274] Bluetooth: hci5: command 0x040f tx timeout
[  985.867589][T19961] loop4: detected capacity change from 0 to 4096
[  985.902236][T19961] ntfs3: loop4: failed to replay log file. Can't mount rw!
[  986.067806][T19531] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  986.296341][T19964] netlink: 'syz.1.3720': attribute type 11 has an invalid length.
[  986.361150][T19967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  986.471128][T19967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  986.752846][T19914] chnl_net:caif_netlink_parms(): no params data found
[  987.752586][ T4274] Bluetooth: hci5: command 0x0419 tx timeout
[  990.531479][ T4274] Bluetooth: hci3: command 0x0406 tx timeout
[  992.279039][T19914] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.286479][T19914] bridge0: port 1(bridge_slave_0) entered disabled state
[  992.306861][T19914] device bridge_slave_0 entered promiscuous mode
[  992.317205][T19914] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.325798][T19914] bridge0: port 2(bridge_slave_1) entered disabled state
[  992.335694][T19914] device bridge_slave_1 entered promiscuous mode
[  992.356953][T20001] loop1: detected capacity change from 0 to 2048
[  992.372174][T19914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  992.385562][T19914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  992.478612][T19914] team0: Port device team_slave_0 added
[  992.507918][T20001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  992.519198][T19914] team0: Port device team_slave_1 added
[  994.828801][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  994.835191][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  994.844726][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  995.070982][T20009] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  995.088787][T20009] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28
[  995.101018][T20009] EXT4-fs (loop1): This should not happen!! Data will be lost
[  995.101018][T20009] 
[  995.110725][T20009] EXT4-fs (loop1): Total free blocks count 0
[  995.116828][T20009] EXT4-fs (loop1): Free/Dirty block details
[  995.122770][T20009] EXT4-fs (loop1): free_blocks=2415919504
[  995.128499][T20009] EXT4-fs (loop1): dirty_blocks=39760
[  995.133914][T20009] EXT4-fs (loop1): Block reservation details
[  995.139900][T20009] EXT4-fs (loop1): i_reserved_data_blocks=2485
[  995.250593][T19914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  995.299621][T19914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  995.412576][T19914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  995.470470][T19914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  995.485458][T19914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  995.868722][T19914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.506608][T19914] device hsr_slave_0 entered promiscuous mode
[  996.584240][T19914] device hsr_slave_1 entered promiscuous mode
[  996.632808][T19914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  996.640454][T19914] Cannot create hsr debugfs directory
[ 1000.350585][T19914] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1000.395508][T19914] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.494793][T19914] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1002.555162][T19914] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.814864][T19914] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1005.892810][T19914] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.051428][T16439] EXT4-fs (loop1): unmounting filesystem.
[ 1011.551629][ T4280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1011.700591][ T4280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1011.713652][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1011.721878][ T4280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1011.730205][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1011.741034][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1012.379177][T19914] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1012.405015][T19914] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.431990][T20119] smc: net device lo applied user defined pnetid SYZ0
[ 1012.453604][T20122] syz.3.3752 (20122) used obsolete PPPIOCDETACH ioctl
[ 1013.951868][T20151] device syzkaller0 entered promiscuous mode
[ 1014.082739][ T4274] Bluetooth: hci6: command 0x0409 tx timeout
[ 1014.565062][T20132] lo speed is unknown, defaulting to 1000
[ 1014.870757][T20132] wlan0 speed is unknown, defaulting to 1000
[ 1015.343528][T19914] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1015.975200][T19914] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1016.152959][T19914] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1016.162911][ T4274] Bluetooth: hci6: command 0x041b tx timeout
[ 1016.236165][T19914] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1018.242690][ T4274] Bluetooth: hci6: command 0x040f tx timeout
[ 1018.322022][   T26] audit: type=1326 audit(2147528422.203:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.334774][T19914] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.377809][   T26] audit: type=1326 audit(2147528422.243:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.413176][   T26] audit: type=1326 audit(2147528422.243:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.479424][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1018.507636][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1018.522510][   T26] audit: type=1326 audit(2147528422.243:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0de35e90e code=0x7ffc0000
[ 1018.554504][T19914] 8021q: adding VLAN 0 to HW filter on device team0
[ 1018.580581][T20132] chnl_net:caif_netlink_parms(): no params data found
[ 1018.584491][   T26] audit: type=1326 audit(2147528422.243:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.641625][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1018.660895][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1018.673629][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.680832][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1018.701656][   T26] audit: type=1326 audit(2147528422.243:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.768724][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1018.802835][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1018.811664][   T26] audit: type=1326 audit(2147528422.243:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.845932][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1018.857148][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.864342][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1018.872344][   T26] audit: type=1326 audit(2147528422.243:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.899745][   T26] audit: type=1326 audit(2147528422.243:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1018.987906][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1019.010240][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1019.029250][   T26] audit: type=1326 audit(2147528422.243:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20187 comm="syz.3.3770" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0de39e0d9 code=0x7ffc0000
[ 1019.092016][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1019.158815][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1019.233676][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1019.293362][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1019.316777][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1019.366495][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1019.388005][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1019.653816][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1019.673616][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1019.728556][T19914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1019.886079][T20132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.934954][T20132] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1019.993491][T20132] device bridge_slave_0 entered promiscuous mode
[ 1020.067694][T20132] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1020.102888][T20132] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1020.111703][T20132] device bridge_slave_1 entered promiscuous mode
[ 1020.362762][ T4274] Bluetooth: hci6: command 0x0419 tx timeout
[ 1021.157795][T20132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1021.170730][T20132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1025.958115][T20132] team0: Port device team_slave_0 added
[ 1026.364861][T20132] team0: Port device team_slave_1 added
[ 1026.479277][T20132] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1026.572549][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.698192][T20132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.749004][T20132] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1026.783765][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.888973][T20132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1026.927817][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1026.942879][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1026.968084][T20246] netlink: 'syz.6.3780': attribute type 13 has an invalid length.
[ 1026.985337][T20246] bond0: option fail_over_mac: unable to set because the bond device has slaves
[ 1027.030600][T19914] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1027.415183][T20132] device hsr_slave_0 entered promiscuous mode
[ 1027.627665][T20132] device hsr_slave_1 entered promiscuous mode
[ 1027.689661][T20132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1027.716801][T20132] Cannot create hsr debugfs directory
[ 1027.743989][T15000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1027.761062][T15000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1027.899635][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1027.917265][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1027.943107][T19914] device veth0_vlan entered promiscuous mode
[ 1027.966821][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1027.989937][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1028.105637][T19914] device veth1_vlan entered promiscuous mode
[ 1028.288421][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1028.308001][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1028.360633][T19914] device veth0_macvtap entered promiscuous mode
[ 1028.883326][   T26] kauditd_printk_skb: 61 callbacks suppressed
[ 1028.883433][   T26] audit: type=1800 audit(2147528432.753:1375): pid=20261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3776" name="bus" dev="ramfs" ino=99208 res=0 errno=0
[ 1029.450814][T20132] netdevsim netdevsim8 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1029.512918][T20132] netdevsim netdevsim8 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1029.623587][T20282] loop3: detected capacity change from 0 to 256
[ 1029.841960][T19914] device veth1_macvtap entered promiscuous mode
[ 1029.879610][T19914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1029.901298][T19914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.914812][T19914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1029.941045][T19914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1029.976263][T19914] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1030.548212][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1030.591164][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1030.603398][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1030.616019][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1030.647422][T19090] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1030.876999][T20132] netdevsim netdevsim8 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1030.887155][T20132] netdevsim netdevsim8 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1030.921909][T19914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1030.952497][T19914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1031.045271][T19914] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1031.575889][T19090] usb 5-1: Using ep0 maxpacket: 32
[ 1031.589572][T19090] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1031.622825][T19090] usb 5-1: config 0 has no interface number 0
[ 1031.659631][T19090] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1031.682087][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1031.805349][T19090] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1031.814107][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1031.845836][T19090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.862693][T19090] usb 5-1: Product: syz
[ 1031.867046][T19090] usb 5-1: Manufacturer: syz
[ 1031.871844][T19090] usb 5-1: SerialNumber: syz
[ 1031.907967][T19090] usb 5-1: config 0 descriptor??
[ 1032.757124][T19914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.789636][T19914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.939504][T19914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.215258][T19914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1035.330789][T19090] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[ 1035.372825][T19090] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1035.380252][T19090] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1035.452640][T19090] f81534: probe of 5-1:0.12 failed with error -71
[ 1035.511130][T19090] usb 5-1: USB disconnect, device number 10
[ 1035.799712][T20132] netdevsim netdevsim8 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1035.846816][T20132] netdevsim netdevsim8 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1036.774764][T20132] netdevsim netdevsim8 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1037.563429][T20132] netdevsim netdevsim8 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.310923][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1038.336394][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1038.348421][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1038.382180][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1038.406334][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1038.413757][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1040.155020][T20354] loop4: detected capacity change from 0 to 32768
[ 1040.278756][T20354] XFS (loop4): Mounting V5 Filesystem
[ 1040.323877][T20354] XFS (loop4): Ending clean mount
[ 1040.336190][T20354] XFS (loop4): Quotacheck needed: Please wait.
[ 1040.472929][ T4274] Bluetooth: hci0: command 0x0409 tx timeout
[ 1040.623787][T20354] XFS (loop4): Quotacheck: Done.
[ 1041.328718][T20347] lo speed is unknown, defaulting to 1000
[ 1041.381031][T20347] wlan0 speed is unknown, defaulting to 1000
[ 1041.538224][ T7983] XFS (loop4): Unmounting Filesystem
[ 1041.598113][T20132] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1041.635116][T20132] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1041.861111][T20132] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1042.345851][   T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.455902][T20132] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1042.563511][ T4287] Bluetooth: hci0: command 0x041b tx timeout
[ 1042.735314][   T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1043.183247][   T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.306178][   T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.528092][T20347] chnl_net:caif_netlink_parms(): no params data found
[ 1044.587164][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3803'.
[ 1044.633929][ T4287] Bluetooth: hci0: command 0x040f tx timeout
[ 1044.813287][T20400] bond6: (slave ip_vti0): The slave device specified does not support setting the MAC address
[ 1044.911973][T20400] bond6: (slave ip_vti0): Error -95 calling set_mac_address
[ 1045.147314][T20402] bond6 (unregistering): Released all slaves
[ 1045.302090][T20132] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1045.423893][   T30] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1045.500772][   T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.630246][   T30] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1045.862627][   T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.712789][ T4287] Bluetooth: hci0: command 0x0419 tx timeout
[ 1046.732282][T20132] 8021q: adding VLAN 0 to HW filter on device team0
[ 1046.828185][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1046.873716][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1046.886286][   T30] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1046.894946][   T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.909489][   T30] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[ 1046.918326][   T30] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.068647][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1047.097171][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1047.146644][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.153902][ T8429] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1047.249397][T20347] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.266656][T20347] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.334288][T20347] device bridge_slave_0 entered promiscuous mode
[ 1047.397909][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1047.443871][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1047.467736][ T8429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1048.475681][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.482924][ T8429] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.666715][T20432] device syzkaller0 entered promiscuous mode
[ 1048.707268][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1048.755367][T20347] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.783835][T20347] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.824678][T20347] device bridge_slave_1 entered promiscuous mode
[ 1057.800073][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'.
[ 1059.461036][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.467582][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.490107][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1059.505278][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'.
[ 1060.667432][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1060.687977][T20347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1060.732732][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1060.767611][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1060.804243][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1060.832110][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1060.896106][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1060.934005][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1060.953482][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1060.975211][T20347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1061.849028][T20132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1061.887568][T20132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1061.945024][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1061.973674][T16635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1062.212729][T20347] team0: Port device team_slave_0 added
[ 1062.232836][T20347] team0: Port device team_slave_1 added
[ 1063.528751][T20487] Bluetooth: MGMT ver 1.22
[ 1063.573100][T20347] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1063.580125][T20347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1063.622226][T20347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1063.888767][T20347] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1063.927105][T20347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.135620][T20347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1064.400917][T20347] device hsr_slave_0 entered promiscuous mode
[ 1064.416920][T20347] device hsr_slave_1 entered promiscuous mode
[ 1065.453900][T20347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1065.461694][T20347] Cannot create hsr debugfs directory
[ 1065.477537][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1065.504179][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1065.530431][T20132] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1065.915056][   T30] device hsr_slave_0 left promiscuous mode
[ 1065.973225][   T30] device hsr_slave_1 left promiscuous mode
[ 1065.983626][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1065.991163][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1066.086783][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1066.103754][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1066.123981][   T30] device bridge_slave_1 left promiscuous mode
[ 1066.130317][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.198244][   T30] device bridge_slave_0 left promiscuous mode
[ 1066.261858][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.450922][   T30] device veth1_macvtap left promiscuous mode
[ 1066.496645][   T30] device veth0_macvtap left promiscuous mode
[ 1066.540229][   T30] device veth1_vlan left promiscuous mode
[ 1066.575171][   T30] device veth0_vlan left promiscuous mode
[ 1071.164011][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1071.178361][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1071.188129][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1071.196473][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1071.235483][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1071.243069][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1071.730617][   T30] team0 (unregistering): Port device team_slave_1 removed
[ 1071.875275][   T30] team0 (unregistering): Port device team_slave_0 removed
[ 1072.139542][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1072.303899][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1073.361766][ T4274] Bluetooth: hci2: command 0x0409 tx timeout
[ 1073.535885][   T30] bond0 (unregistering): Released all slaves
[ 1073.951626][T20578] device syzkaller0 entered promiscuous mode
[ 1074.265856][T20347] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1074.337505][T20347] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.679577][T20562] lo speed is unknown, defaulting to 1000
[ 1074.812559][T20347] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1075.030400][T20347] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1075.363052][T20562] wlan0 speed is unknown, defaulting to 1000
[ 1075.452817][ T4274] Bluetooth: hci2: command 0x041b tx timeout
[ 1075.584112][T20347] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1075.631233][T20347] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.205077][T20347] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1076.374226][T20347] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.954573][T20595] syz.4.3842 (20595): drop_caches: 2
[ 1077.514090][ T4274] Bluetooth: hci2: command 0x040f tx timeout
[ 1078.101354][T20562] chnl_net:caif_netlink_parms(): no params data found
[ 1079.659693][ T4274] Bluetooth: hci2: command 0x0419 tx timeout
[ 1080.811505][T20347] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1080.957974][T20347] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1081.135396][T20630] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1081.143518][T20630] UDF-fs: Scanning with blocksize 512 failed
[ 1081.154378][T20630] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1081.162276][T20630] UDF-fs: Scanning with blocksize 1024 failed
[ 1081.171723][T20630] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1081.179991][T20630] UDF-fs: Scanning with blocksize 2048 failed
[ 1081.191216][T20630] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1081.199498][T20630] UDF-fs: Scanning with blocksize 4096 failed
[ 1081.695717][   T26] audit: type=1804 audit(2147528485.583:1376): pid=20631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3848" name="bus" dev="ramfs" ino=102115 res=1 errno=0
[ 1081.830068][   T26] audit: type=1804 audit(2147528485.603:1377): pid=20631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3848" name="bus" dev="ramfs" ino=102115 res=1 errno=0
[ 1081.901817][T20347] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1081.943977][T20562] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1082.012676][T20562] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1082.052712][T20562] device bridge_slave_0 entered promiscuous mode
[ 1082.157462][T20635] dummy_hcd dummy_hcd.0: remove, state 1
[ 1082.203250][T20635] usb usb1: USB disconnect, device number 1
[ 1082.245176][T20635] usb 1-1: USB disconnect, device number 8
[ 1082.257202][T20347] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1082.281494][T20635] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device
[ 1082.301961][T20562] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1082.322301][T20562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.369828][T20562] device bridge_slave_1 entered promiscuous mode
[ 1083.188678][T20562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1083.276272][T20562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1083.381297][T20635] dummy_hcd dummy_hcd.0: stopped
[ 1083.395494][T20635] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[ 1083.508198][T20562] team0: Port device team_slave_0 added
[ 1083.585016][T15002] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1083.626535][T15002] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.654262][T20562] team0: Port device team_slave_1 added
[ 1083.700686][T15002] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1083.728578][T15002] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.832035][T15002] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1083.859861][T15002] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.886937][T20562] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1083.895356][T20562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1083.935311][T20562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1083.961223][T15002] netdevsim netdevsim8 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[ 1083.980311][T15002] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.998919][T20562] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1084.006629][T20562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1084.033597][T20562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.317497][T20347] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1085.482492][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1085.501253][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1087.590045][T20347] 8021q: adding VLAN 0 to HW filter on device team0
[ 1087.944608][T20562] device hsr_slave_0 entered promiscuous mode
[ 1088.013613][T20562] device hsr_slave_1 entered promiscuous mode
[ 1088.042809][T20562] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1088.057149][T20562] Cannot create hsr debugfs directory
[ 1088.208648][T20677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1088.229941][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1088.265208][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1088.433097][T16631] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.440327][T16631] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.452981][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1088.489251][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1089.383453][T16631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.390677][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1089.463935][T20677] tipc: Resetting bearer <eth:syzkaller0>
[ 1089.562038][T20672] tipc: Disabling bearer <eth:syzkaller0>
[ 1089.594566][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1089.633253][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1089.664221][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1089.778304][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1089.808885][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1089.871283][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1089.974789][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1090.053003][T14999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1090.163895][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1090.204372][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1090.348437][T20347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1090.381251][T20347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1090.410074][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1090.419027][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1090.633323][T20562] netdevsim netdevsim8 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.644875][T20562] netdevsim netdevsim8 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.732890][T20562] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.743581][T20562] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.851353][T20562] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.861780][T20562] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.957957][T20562] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.989200][T20562] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.026455][T15002] device hsr_slave_0 left promiscuous mode
[ 1091.041339][T15002] device hsr_slave_1 left promiscuous mode
[ 1091.048696][T15002] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1091.073344][T15002] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1091.087743][T15002] device bridge_slave_1 left promiscuous mode
[ 1091.095087][T15002] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.104515][T15002] device bridge_slave_0 left promiscuous mode
[ 1091.110782][T15002] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.486784][T15002] team0 (unregistering): Port device team_slave_1 removed
[ 1091.560365][T15002] team0 (unregistering): Port device team_slave_0 removed
[ 1091.628866][T15002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1091.692936][T15002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1092.147094][T15002] bond0 (unregistering): Released all slaves
[ 1092.304878][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1092.328762][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1092.345677][T20347] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1092.425557][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1092.445257][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1092.503506][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1092.512649][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1092.523795][T20347] device veth0_vlan entered promiscuous mode
[ 1092.609290][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1092.617799][T16637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1092.675381][T20347] device veth1_vlan entered promiscuous mode
[ 1092.765090][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1092.783303][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1092.792103][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1092.801297][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1092.810643][T20562] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1092.841048][T20347] device veth0_macvtap entered promiscuous mode
[ 1092.852625][T20562] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1092.864361][T20347] device veth1_macvtap entered promiscuous mode
[ 1092.883256][T20562] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1092.900467][T20562] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1092.915650][T20347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.950069][T20347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.960426][T20347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.971222][T20347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.983698][T20347] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1093.004403][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1093.019771][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1093.029234][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1093.039325][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1093.056300][T20347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1093.067859][T20347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.088925][T20347] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1093.112752][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1093.130193][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1093.149295][T20347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.158440][T20347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.168310][T20347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.177378][T20347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.373973][T20562] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1093.435070][T20562] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.451586][ T8409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.459957][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1093.470856][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1093.487527][ T8409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.512960][T15002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.520840][T15002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.527999][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1093.537192][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1093.547135][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1093.556173][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.563341][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1093.572221][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1093.583307][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1093.592268][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1093.601399][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.608574][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1093.617550][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1093.649185][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1093.660577][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1093.678157][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1093.706629][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1093.768272][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1093.797051][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1094.753541][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1095.642585][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1095.651217][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1095.712368][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1095.731835][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1096.484208][T20562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1100.848680][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1100.874246][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1100.886823][T20562] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1102.131000][T20775] syz.0.3866 (20775): drop_caches: 2
[ 1102.728716][T20782] MPTCP: kernel_bind error, err=-99
[ 1105.315697][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1105.332271][ T8412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1106.049920][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1106.109712][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1106.164027][T20562] device veth0_vlan entered promiscuous mode
[ 1106.255223][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1106.267429][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1106.479978][T20562] device veth1_vlan entered promiscuous mode
[ 1107.367961][T20562] device veth0_macvtap entered promiscuous mode
[ 1107.406127][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1107.433615][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1107.474776][T20562] device veth1_macvtap entered promiscuous mode
[ 1107.483825][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1107.517314][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1107.861422][T20562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.322661][T20562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.440913][T20562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.482598][T20562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.514603][T20562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.572841][T20562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.615821][T20562] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1108.640385][T20842] fuse: Bad value for 'fd'
[ 1108.684147][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1108.716796][T14461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1110.241334][T20562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1110.302438][T20562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.574053][T20562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.990766][T20562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1112.093409][T20562] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1112.136189][T16639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1112.179284][T16639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1112.206683][T20562] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.238443][T20562] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.472138][T20562] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.502569][T20562] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.361250][T14999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.391960][T14999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.451018][T15002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1113.559851][T14999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.568489][T14999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.581155][ T8431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1120.796400][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.802909][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1120.810944][ T1279] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1120.821553][ T1279] general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN
[ 1120.833327][ T1279] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057]
[ 1120.841782][ T1279] CPU: 1 PID: 1279 Comm: aoe_tx0 Not tainted syzkaller #0
[ 1120.848918][ T1279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1120.858999][ T1279] RIP: 0010:dummy_queue+0x1a3/0x8c0
[ 1120.864292][ T1279] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 66 85 53 fb 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 ea 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[ 1120.883933][ T1279] RSP: 0018:ffffc90005a57858 EFLAGS: 00010206
[ 1120.890026][ T1279] RAX: 000000000000000a RBX: ffff8880585f1410 RCX: dffffc0000000000
[ 1120.898016][ T1279] RDX: ffff888027861e00 RSI: 0000000000000003 RDI: 0000000000000005
[ 1120.906010][ T1279] RBP: ffff8880585f1400 R08: ffffffff90b10307 R09: 1ffffffff2162060
[ 1120.914007][ T1279] R10: dffffc0000000000 R11: fffffbfff2162061 R12: 0000000000000050
[ 1120.922031][ T1279] R13: 1ffff1100b0be280 R14: ffff888144e9c0e0 R15: ffff888144e9cc00
[ 1120.930027][ T1279] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1120.939001][ T1279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1120.945612][ T1279] CR2: 00007fc0de5ef2f8 CR3: 0000000035f68000 CR4: 00000000003506e0
[ 1120.953614][ T1279] Call Trace:
[ 1120.956917][ T1279]  <TASK>
[ 1120.959867][ T1279]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1120.965789][ T1279]  ? _raw_spin_unlock+0x40/0x40
[ 1120.970663][ T1279]  ? rndis_add_header+0x35/0x50
[ 1120.975608][ T1279]  usb_ep_queue+0xde/0x3d0
[ 1120.980083][ T1279]  eth_start_xmit+0x8b2/0xe70
[ 1120.984816][ T1279]  dev_hard_start_xmit+0x292/0x8b0
[ 1120.990001][ T1279]  ? __rwlock_init+0x140/0x140
[ 1120.994795][ T1279]  sch_direct_xmit+0x24d/0x4a0
[ 1120.999624][ T1279]  ? do_raw_spin_lock+0x2f0/0x2f0
[ 1121.004675][ T1279]  ? mrp_pdu_append_vecattr_event+0x1670/0x1670
[ 1121.010953][ T1279]  __dev_queue_xmit+0x180d/0x3810
[ 1121.016011][ T1279]  ? __dev_queue_xmit+0x281/0x3810
[ 1121.021151][ T1279]  ? skb_dequeue+0x120/0x150
[ 1121.025765][ T1279]  ? netdev_core_pick_tx+0x360/0x360
[ 1121.031074][ T1279]  ? do_raw_spin_unlock+0x11d/0x230
[ 1121.036295][ T1279]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1121.042299][ T1279]  ? __lock_acquire+0x7c40/0x7c40
[ 1121.047354][ T1279]  ? lock_chain_count+0x20/0x20
[ 1121.052245][ T1279]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1121.057307][ T1279]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1121.062534][ T1279]  ? lockdep_hardirqs_on+0x94/0x140
[ 1121.067755][ T1279]  tx+0x67/0x170
[ 1121.071353][ T1279]  ? aoenet_xmit+0x190/0x190
[ 1121.075983][ T1279]  kthread+0x1d7/0x3d0
[ 1121.080080][ T1279]  ? aoe_ktstart+0x130/0x130
[ 1121.084688][ T1279]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1121.090610][ T1279]  ? do_task_dead+0xd0/0xd0
[ 1121.095222][ T1279]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1121.101138][ T1279]  ? __kthread_parkme+0x71/0x1c0
[ 1121.106110][ T1279]  ? __kthread_parkme+0x15b/0x1c0
[ 1121.111168][ T1279]  kthread+0x29d/0x330
[ 1121.115259][ T1279]  ? aoe_ktstart+0x130/0x130
[ 1121.119867][ T1279]  ? kthread_blkcg+0xd0/0xd0
[ 1121.124480][ T1279]  ret_from_fork+0x1f/0x30
[ 1121.128954][ T1279]  </TASK>
[ 1121.132018][ T1279] Modules linked in:
[ 1121.136019][ T1279] ---[ end trace 0000000000000000 ]---
[ 1121.141515][ T1279] RIP: 0010:dummy_queue+0x1a3/0x8c0
[ 1121.146790][ T1279] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 66 85 53 fb 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 ea 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[ 1121.166472][ T1279] RSP: 0018:ffffc90005a57858 EFLAGS: 00010206
[ 1121.172564][ T1279] RAX: 000000000000000a RBX: ffff8880585f1410 RCX: dffffc0000000000
[ 1121.180539][ T1279] RDX: ffff888027861e00 RSI: 0000000000000003 RDI: 0000000000000005
[ 1121.188526][ T1279] RBP: ffff8880585f1400 R08: ffffffff90b10307 R09: 1ffffffff2162060
[ 1121.196514][ T1279] R10: dffffc0000000000 R11: fffffbfff2162061 R12: 0000000000000050
[ 1121.204530][ T1279] R13: 1ffff1100b0be280 R14: ffff888144e9c0e0 R15: ffff888144e9cc00
[ 1121.212550][ T1279] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1121.221499][ T1279] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1121.228127][ T1279] CR2: 00007fc0de5ef2f8 CR3: 0000000035f68000 CR4: 00000000003506e0
[ 1121.236158][ T1279] Kernel panic - not syncing: Fatal exception in interrupt
[ 1121.243944][ T1279] Kernel Offset: disabled
[ 1121.248277][ T1279] Rebooting in 86400 seconds..