last executing test programs:

12m58.508217355s ago: executing program 3 (id=322):
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)

12m57.137730939s ago: executing program 3 (id=324):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x201, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x0)
socket$inet(0x2, 0x2, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x60}}}}}, 0x0)
syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
write$tcp_mem(r0, &(0x7f0000000100)={0x0, 0x2d, 0xeaffffff, 0xa, 0x0, 0x2c}, 0x48)
open(&(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x4000, 0x106)

12m54.710614249s ago: executing program 3 (id=339):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040)
syz_clone3(0x0, 0x0)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)

12m53.400543792s ago: executing program 3 (id=345):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x1000003, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7a1a, 0x2000, 0x3, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

12m51.711201384s ago: executing program 3 (id=354):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)

12m51.10437423s ago: executing program 3 (id=357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(r2, r2)
socket$inet6(0xa, 0x3, 0x9)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0xaaaaaaaaaaaad33, 0x58, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12m50.750586389s ago: executing program 32 (id=357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(r2, r2)
socket$inet6(0xa, 0x3, 0x9)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0xaaaaaaaaaaaad33, 0x58, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11m11.530597854s ago: executing program 5 (id=872):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r0, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_setup(0x4, &(0x7f00000001c0))
recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}, 0x2000000}], 0x40000000000013c, 0x700, 0x0)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x9, 0x1}}, 0x3, 0xa, &(0x7f0000000080)="823135"})
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0xa0, 0x1a4, &(0x7f0000000fc0)="$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")
sendfile(r1, r0, 0x0, 0x578410eb)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x902, 0x81)
truncate(0x0, 0x2fffffd)

11m9.930529844s ago: executing program 5 (id=882):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f000000a0c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1000, @mcast1, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@flowinfo={{0x10, 0x29, 0xb, 0x10000}}], 0x10}}], 0x1, 0x24010001)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000b80), 0x0, 0x8004)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0xd}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084)

11m9.572698173s ago: executing program 5 (id=885):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000300)="89", 0x1)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x101})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)

11m9.228275402s ago: executing program 5 (id=886):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000600)=ANY=[@ANYBLOB='quiet,dir_umask=00000000000000000000007,iocharset=koi8-ru,codepage=koi8-ru,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030313236342c63726561746f723d8c10b0812c66696c655f756d61736b3d3030303030303030303030303030322c00", @ANYRES64, @ANYRES16=0x0], 0x2, 0x379, &(0x7f0000000700)="$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")
write(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdir(&(0x7f0000000400)='./file0\x00', 0xa2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0x0, 0xfffffffffffff8, 0x800, 0x0, 0x0, {0x0, 0x3, 0x1000000000000002, 0x0, 0x7, 0x46, 0x1, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50)
rename(&(0x7f00000001c0)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

11m7.743737519s ago: executing program 5 (id=890):
syz_mount_image$ext4(&(0x7f0000002580)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@discard}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nolazytime}, {@quota}, {@lazytime}, {@errors_remount}, {@mblk_io_submit}, {@noblock_validity}, {@errors_remount}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
setgroups(0x24, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = timerfd_create(0x7, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000002c0)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffff8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)

11m7.361180678s ago: executing program 0 (id=896):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x2000000, &(0x7f0000000600)=""/4})

11m7.2799951s ago: executing program 5 (id=897):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000080)=0xa9e)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x11008, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1, 0x6c8, &(0x7f0000000540)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m7.034996506s ago: executing program 33 (id=897):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000080)=0xa9e)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x11008, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1, 0x6c8, &(0x7f0000000540)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m6.988243968s ago: executing program 0 (id=900):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000008e)
accept4(r3, 0x0, &(0x7f0000000f40), 0x800)
unshare(0x40000000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}]}, 0xff, 0x569, &(0x7f0000000f40)="$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")

11m4.524189309s ago: executing program 0 (id=905):
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002480), &(0x7f0000002500)=0x8)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

11m4.214019317s ago: executing program 0 (id=909):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000001000)='./bus\x00')
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = syz_create_resource$binfmt(0x0)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d809}, 0x0)
listxattr(&(0x7f0000003d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

11m3.744987938s ago: executing program 0 (id=913):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)

10m55.612428131s ago: executing program 0 (id=931):
unshare(0x4020400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76e1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f00000003c0)}, 0x10)

10m54.989455797s ago: executing program 34 (id=931):
unshare(0x4020400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76e1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f00000003c0)}, 0x10)

10m43.696373629s ago: executing program 4 (id=969):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

10m42.502464209s ago: executing program 4 (id=973):
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = getpgrp(0x0)
r2 = gettid()
rt_tgsigqueueinfo(r1, r2, 0x15, &(0x7f00000003c0)={0x2a, 0xfffffffe, 0x5})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={[0x9]}, 0x8})

10m42.191755106s ago: executing program 4 (id=974):
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x1, 0x81, r2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
close(r2)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20)

10m41.730620058s ago: executing program 4 (id=976):
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
getpid()
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)

10m39.285893419s ago: executing program 4 (id=985):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0)

10m34.480246539s ago: executing program 4 (id=999):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00222200000096010006010003000000002ab0a0753883c83e25031bdae040703a0c689329", @ANYBLOB], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000080)='mnt\x00', 0x1100404, &(0x7f0000000200)={[{@nobarrier}]}, 0x0, 0x262, &(0x7f0000000d40)="$eJzs3TFoHXUcB/Df3XsvMclDoy6CoIKIaCDETXCJi0IghCAiqBARcVESISa45Tm5OOiskskliJtRnCRLcGkpdErbDOlSaEOHhg7t8MrlEpI0r03bS9+Vd58PPPLu7v+/3/+4fP+XIXcXQGUNR8R4RNQiYiQiGhGRHG7wSv4Z3ltcHlifiWi3P7ie7LbLl3P7/YYiohURb0fEWprEV/WIxdVPtm5uvP/6jwuN135f/Xigqwe5Z3trc3Lnt6kf/pp4a/Hs+atTSYxH88hxnb6kw7p6EvHc4yj2hEjqZY+ABzH93Z8Xstw/HxGv7ua/EWnkJ++n+b61Rrz56736/nzt3IvdHCtw+trtRnYNbLWBykkjohlJOhoR+fc0HR3N/4a/WBtMv56b/3bky7mF2S/KnqmA09KM2Hzvn/6/h+7K/5Vann+gd2X5/3B65VL2fadW9miAbsryP/LZ0hsh/1A5HfKflj0moDtc/6G65B96Taf/NutM/qG65B960jMnN+mTf+gNTz1KJ/mH6pJ/qC75h+o6nH8AoFra/WXfgQyUpez5BwAAAAAAAAAAAAAAAAAAOG55YH1m//PwvZNWx9Xt+z+K+P9fIrbfjYh6p/q1vReS5Y83HbyRZM0OKubdCvn05YI7KOiPUu6+Pnhc7NOXy6h/4MxL5dZfmo1ofR8RY/X68d+/pPAL8Z49YXvj84IFCnrno3Lr314pt/7ERsR/2fwz1mn+SeOF3Z9H559/J/Otzez8Faz/za2COwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBr7gQAAP//H7tv5w==")
syz_emit_ethernet(0x374, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x33e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x4, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b1"}]}}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
recvfrom(r2, 0x0, 0x0, 0x10000, 0x0, 0x0)
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/221)

10m33.757567066s ago: executing program 35 (id=999):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00222200000096010006010003000000002ab0a0753883c83e25031bdae040703a0c689329", @ANYBLOB], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000080)='mnt\x00', 0x1100404, &(0x7f0000000200)={[{@nobarrier}]}, 0x0, 0x262, &(0x7f0000000d40)="$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")
syz_emit_ethernet(0x374, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x33e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x4, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b1"}]}}}}}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
recvfrom(r2, 0x0, 0x0, 0x10000, 0x0, 0x0)
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/221)

7m23.127880843s ago: executing program 7 (id=1657):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x80, 0x0)

7m22.0559761s ago: executing program 7 (id=1662):
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425", @ANYRES32=0x0, @ANYBLOB="030000000000000028"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000680)=0xffff, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7m21.443816896s ago: executing program 7 (id=1669):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x8000654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m19.923004223s ago: executing program 7 (id=1675):
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0xff, 0x9, 0x1, 0xfffd}, 0x20)
setreuid(0x0, 0xee01)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
fcntl$setlease(r0, 0x400, 0x1)
setresuid(0xee01, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r1, 0x0, 0x0)

7m19.575149992s ago: executing program 7 (id=1676):
mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x300000a, 0x11, 0xffffffffffffffff, 0x82397a24)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/147, &(0x7f0000000280)=0x93)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000007000/0x2000)=nil)

7m19.077933084s ago: executing program 7 (id=1678):
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)

7m4.01612678s ago: executing program 36 (id=1678):
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)

1m38.647668209s ago: executing program 8 (id=2612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820)

1m36.237439129s ago: executing program 8 (id=2618):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c40)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r9, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="0e5c07", 0x3}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045)

1m35.40961676s ago: executing program 8 (id=2619):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0500330002000000080032"], 0x44}}, 0x80)

1m34.244933518s ago: executing program 8 (id=2622):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x6, 0x0, 0xfa}, {}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pipe2(&(0x7f0000000040), 0x800)
r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

1m33.257175573s ago: executing program 8 (id=2624):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r1, 0x0, 0x100000000)

1m33.038585989s ago: executing program 8 (id=2627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040410e203040000102030109026e000301"], 0x0)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m17.598095034s ago: executing program 37 (id=2627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040410e203040000102030109026e000301"], 0x0)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

57.514471055s ago: executing program 2 (id=2707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_init(0xef0, 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

53.444998907s ago: executing program 2 (id=2713):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18)

51.794747698s ago: executing program 2 (id=2716):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sigaltstack(&(0x7f0000000000)={0x0, 0x80000002}, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0xa00})
r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
fsmount(0xffffffffffffffff, 0x0, 0x8e)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40))
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

51.440057467s ago: executing program 2 (id=2717):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0x2007ffc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0xc)
listen(r3, 0x0)

50.006943163s ago: executing program 2 (id=2719):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))

48.876097871s ago: executing program 2 (id=2721):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)

33.748880408s ago: executing program 38 (id=2721):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)

14.740247452s ago: executing program 6 (id=2795):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r4, 0x0, 0x0, 0x800)

12.258929245s ago: executing program 1 (id=2800):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x39000, 0x0)

12.169572346s ago: executing program 6 (id=2801):
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000000101040000000014b16b4d97000010240001801400018008000100e000000108000200e00000010c0002800500010000000000040002800800074000000001"], 0x44}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)

9.257898499s ago: executing program 6 (id=2805):
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000040)={0x1, 0x3, [0x54b, 0x72, 0x331, 0x6ed]})
socket$inet(0xa, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgget(0x1, 0x213)
msgget(0x1, 0x501)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")

8.958011127s ago: executing program 1 (id=2806):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

8.189285386s ago: executing program 6 (id=2808):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x230400, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

6.859457409s ago: executing program 1 (id=2810):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2016})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in=@local, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0x8, 0x40000000000000}, {0x5}, {0x8}, 0x70bd26, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x0)

5.676623629s ago: executing program 1 (id=2812):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
inotify_init1(0x180c00)
write$cgroup_devices(r1, 0x0, 0x9)

5.676002969s ago: executing program 9 (id=2814):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket(0x11, 0x3, 0x0)
syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0xd2ba, 0x0, 0x3, 0x55}, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r0)
socket$kcm(0x1e, 0x4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4094, 0xffe}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r2], 0xfe33)

5.400055856s ago: executing program 6 (id=2815):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x39000, 0x0)

5.196256441s ago: executing program 9 (id=2816):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)=ANY=[@ANYBLOB="7472616e733d72646d612c706f95743d307830303030342c00"/36])
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4.079270938s ago: executing program 9 (id=2817):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8)
r3 = gettid()
tkill(r3, 0x12)
io_setup(0x401, &(0x7f00000001c0)=<r4=>0x0)
io_pgetevents(r4, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8})
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
timerfd_create(0x8, 0x800)

2.82412981s ago: executing program 9 (id=2818):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
listen(r2, 0xfffffffd)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
listen(r4, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

2.42119241s ago: executing program 9 (id=2819):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.58044934s ago: executing program 1 (id=2820):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
setns(0xc9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\X', &(0x7f0000000880)='R\x8d\xe9\x1a\xe0\x04\x00\x00\x00\x00\x00\x00\x00s\x03l\x8c\x11kSg\x03\x14 \'_\v/\xe0\xb0A\rx\x19\xe8\xf6sU\xfe<\xef\xc9\x12\xc25\xf8A\t\xdb\xb7\x88\xeeT\x80\x00\x00\x00=-\xe0\xf9\xff\xd2/x\x86i9\xcb@\xfa-\x19Q\x00\x90\x04\'J\xf8\xdfs\xad\xe6dS\x98\xeb\x89p\xd6)\xe8\x94d\x9dv.3\x9b\x81\x8e\x10\xca\xbc\x888', 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

1.571570481s ago: executing program 6 (id=2821):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
listen(r4, 0x5)

720.734592ms ago: executing program 9 (id=2822):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x4, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x700000000000000, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b2c, &(0x7f0000000040))
sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x2006c802)
mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=2823):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$rtc(0x0, 0x0, 0x400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000480)={0x1, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)

kernel console output (not intermixed with test programs):

egistering): Released all slaves
[  338.860626][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'.
[  338.880871][ T8916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1209'.
[  338.938285][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'.
[  338.965238][ T8916] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1209'.
[  338.988412][ T8916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1209'.
[  339.013072][ T8372] usb 7-1: unit 0 not found!
[  339.032135][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'.
[  339.066024][ T8372] usb 7-1: USB disconnect, device number 3
[  339.083214][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  339.115839][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  339.115856][   T26] audit: type=1804 audit(2000000012.260:307): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1214" name="bus" dev="ramfs" ino=50122 res=1 errno=0
[  339.162752][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  339.190481][   T26] audit: type=1804 audit(2000000012.310:308): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1214" name="bus" dev="ramfs" ino=50122 res=1 errno=0
[  339.208589][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  339.239524][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  339.330298][ T8627] udevd[8627]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  341.245162][ T8375] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  342.182562][ T8977] device wlan0 entered promiscuous mode
[  342.196907][ T8375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.222811][ T8375] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.258221][ T8375] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  342.313904][ T8375] usb 9-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  342.353353][ T8375] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.380267][ T8375] usb 9-1: config 0 descriptor??
[  342.561684][ T8987] loop7: detected capacity change from 0 to 1024
[  342.584197][ T8987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  342.710947][ T8987] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  342.821357][ T8375] wacom 0003:056A:002A.0004: ignoring exceeding usage max
[  342.838354][ T8375] wacom 0003:056A:002A.0004: Unknown device_type for 'HID 056a:002a'. Assuming pen.
[  342.850649][ T8375] wacom 0003:056A:002A.0004: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.8-1/input0
[  342.864881][ T8375] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:002A.0004/input/input8
[  342.900779][ T8987] EXT4-fs (loop7): unmounting filesystem.
[  343.354399][ T4262] usb 9-1: USB disconnect, device number 2
[  344.162902][ T9001] fido_id[9001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  344.233170][ T9016] loop1: detected capacity change from 0 to 128
[  345.165962][ T9036] __vm_enough_memory: pid: 9036, comm: syz.6.1238, no enough memory for the allocation
[  345.705817][ T9037] FAULT_INJECTION: forcing a failure.
[  345.705817][ T9037] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  345.738761][ T9037] CPU: 1 PID: 9037 Comm: syz.7.1240 Not tainted syzkaller #0
[  345.746411][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  345.756975][ T9037] Call Trace:
[  345.760388][ T9037]  <TASK>
[  345.764285][ T9037]  dump_stack_lvl+0x188/0x24e
[  345.769045][ T9037]  ? show_regs_print_info+0x12/0x12
[  345.774311][ T9037]  ? load_image+0x410/0x410
[  345.778883][ T9037]  ? __lock_acquire+0x7ea0/0x7ea0
[  345.783988][ T9037]  should_fail_ex+0x390/0x4c0
[  345.788723][ T9037]  _copy_from_iter+0x1c0/0x1130
[  345.793681][ T9037]  ? __lock_acquire+0x7ea0/0x7ea0
[  345.798776][ T9037]  ? rcu_is_watching+0x11/0xa0
[  345.803693][ T9037]  ? __alloc_pages+0x290/0x4f0
[  345.808556][ T9037]  ? copyout_mc+0x110/0x110
[  345.813094][ T9037]  ? __virt_addr_valid+0x188/0x540
[  345.818304][ T9037]  ? __virt_addr_valid+0x188/0x540
[  345.823448][ T9037]  ? __virt_addr_valid+0x467/0x540
[  345.828601][ T9037]  ? __phys_addr_symbol+0x2b/0x70
[  345.833657][ T9037]  ? __check_object_size+0x4f6/0xa70
[  345.839044][ T9037]  af_alg_sendmsg+0x13cb/0x1fa0
[  345.843994][ T9037]  ? af_alg_wait_for_data+0x6c0/0x6c0
[  345.849398][ T9037]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  345.855877][ T9037]  ? wait_woken+0x1c0/0x1c0
[  345.860487][ T9037]  ? apparmor_socket_sendmsg+0x8a/0x330
[  345.866088][ T9037]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  345.871407][ T9037]  ? skcipher_sendmsg+0x22/0xe0
[  345.876321][ T9037]  sock_write_iter+0x2d5/0x3e0
[  345.881297][ T9037]  ? sock_read_iter+0x3a0/0x3a0
[  345.886294][ T9037]  ? common_file_perm+0x171/0x1c0
[  345.891364][ T9037]  vfs_write+0x482/0x9a0
[  345.895742][ T9037]  ? file_end_write+0x250/0x250
[  345.900639][ T9037]  ? __fget_files+0x3fc/0x460
[  345.905360][ T9037]  ? __fdget_pos+0x1d4/0x360
[  345.909982][ T9037]  ? ksys_write+0x70/0x260
[  345.914451][ T9037]  ksys_write+0x14d/0x260
[  345.918830][ T9037]  ? __ia32_sys_read+0x80/0x80
[  345.923646][ T9037]  ? lockdep_hardirqs_on+0x94/0x140
[  345.929010][ T9037]  do_syscall_64+0x4c/0xa0
[  345.933557][ T9037]  ? clear_bhb_loop+0x60/0xb0
[  345.938446][ T9037]  ? clear_bhb_loop+0x60/0xb0
[  345.943339][ T9037]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.949443][ T9037] RIP: 0033:0x7f44b8d9e199
[  345.953893][ T9037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.974833][ T9037] RSP: 002b:00007f44b9d4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  345.983999][ T9037] RAX: ffffffffffffffda RBX: 00007f44b9025fa0 RCX: 00007f44b8d9e199
[  345.992330][ T9037] RDX: 00000000fffffdef RSI: 0000200000000080 RDI: 0000000000000007
[  346.000347][ T9037] RBP: 00007f44b8e358e0 R08: 0000000000000000 R09: 0000000000000000
[  346.008349][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.016359][ T9037] R13: 00007f44b9026038 R14: 00007f44b9025fa0 R15: 00007ffcd2cfae38
[  346.024384][ T9037]  </TASK>
[  346.594300][ T9066] loop7: detected capacity change from 0 to 512
[  346.634228][ T9066] FAT-fs (loop7): Unrecognized mount option "ÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value
[  346.836708][ T9072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.932307][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.026231][ T9072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.076280][ T9066] loop7: detected capacity change from 0 to 4096
[  347.107136][ T9066] EXT4-fs: Ignoring removed orlov option
[  347.110926][ T9072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.129187][ T9066] ext4: Unknown parameter 'func'
[  347.942820][ T9094] loop7: detected capacity change from 0 to 512
[  348.012529][ T9094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  348.102176][ T9094] System zones: 1-12
[  348.163169][ T9094] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1255: missing EA_INODE flag
[  348.186276][ T9094] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1255: error while reading EA inode 12 err=-117
[  348.220483][ T9094] EXT4-fs (loop7): 1 orphan inode deleted
[  348.255631][ T9094] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  348.767274][ T4291] Bluetooth: hci4: command 0x2016 tx timeout
[  348.886597][ T7710] EXT4-fs (loop7): unmounting filesystem.
[  349.933290][ T9109] loop1: detected capacity change from 0 to 512
[  349.962089][ T9109] UDF-fs: bad mount option "session500000000000000000005" or missing value
[  350.576325][    T7] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  350.867728][ T4291] Bluetooth: hci4: command 0x0406 tx timeout
[  350.888028][    T7] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  350.942618][    T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.960015][    T7] usb 9-1: Product: syz
[  350.973438][    T7] usb 9-1: Manufacturer: syz
[  350.984997][    T7] usb 9-1: SerialNumber: syz
[  351.407169][ T4290] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  352.231644][ T9156] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1268'.
[  352.898394][    T7] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  353.005483][    T7] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  353.099595][    T7] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  353.177093][    T7] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  353.224373][    T7] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  353.308047][    T7] lan78xx: probe of 9-1:1.0 failed with error -71
[  353.394589][    T7] usb 9-1: USB disconnect, device number 3
[  354.447204][ T9202] loop6: detected capacity change from 0 to 128
[  354.716276][ T9207] syz.6.1279: attempt to access beyond end of device
[  354.716276][ T9207] loop6: rw=2049, sector=145, nr_sectors = 160 limit=128
[  354.901630][ T9202] syz.6.1279: attempt to access beyond end of device
[  354.901630][ T9202] loop6: rw=524288, sector=145, nr_sectors = 160 limit=128
[  355.457056][ T9217] CIFS mount error: No usable UNC path provided in device string!
[  355.457056][ T9217] 
[  355.467683][ T9217] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  355.792058][ T9202] syz.6.1279: attempt to access beyond end of device
[  355.792058][ T9202] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[  355.813405][ T9202] syz.6.1279: attempt to access beyond end of device
[  355.813405][ T9202] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[  355.827225][ T9202] syz.6.1279: attempt to access beyond end of device
[  355.827225][ T9202] loop6: rw=0, sector=145, nr_sectors = 8 limit=128
[  356.286054][ T9231] loop8: detected capacity change from 0 to 512
[  356.423204][ T9231] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1285'.
[  356.551878][ T9231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.560201][ T9231] IPv6: NLM_F_CREATE should be set when creating new route
[  356.667144][ T9246] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  357.163387][ T9253] xt_CT: No such helper "pptp"
[  357.193767][ T9258] 9pnet_fd: Insufficient options for proto=fd
[  357.431924][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  357.482936][ T9267] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1296'.
[  359.335477][ T8375] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  359.550120][ T8375] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  359.586882][ T8375] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[  359.629529][ T8375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  359.675790][ T8375] usb 2-1: Product: syz
[  359.695427][ T8375] usb 2-1: Manufacturer: syz
[  359.894137][ T8375] hso 2-1:1.0: Can't find INT IN endpoint
[  360.132931][ T8375] usb 2-1: USB disconnect, device number 5
[  360.155530][ T9322] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.349520][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1309'.
[  360.369663][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1309'.
[  360.389664][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1309'.
[  360.612935][   T26] audit: type=1326 audit(2000000033.760:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  360.675233][   T26] audit: type=1326 audit(2000000033.800:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  360.806462][   T26] audit: type=1326 audit(2000000033.800:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  360.934823][   T26] audit: type=1326 audit(2000000033.800:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  361.036271][   T26] audit: type=1326 audit(2000000033.800:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  361.195237][   T26] audit: type=1326 audit(2000000033.800:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  361.222766][   T26] audit: type=1326 audit(2000000033.800:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  361.249583][   T26] audit: type=1326 audit(2000000033.800:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  361.274322][   T26] audit: type=1326 audit(2000000033.800:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  361.298720][   T26] audit: type=1326 audit(2000000033.800:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.8.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  361.331655][ T9344] loop1: detected capacity change from 0 to 4096
[  362.577041][ T8627] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  362.623815][ T9359] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1319'.
[  363.544161][ T9371] loop6: detected capacity change from 0 to 136
[  363.642945][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1321'.
[  363.699737][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1321'.
[  364.027051][ T9383] loop7: detected capacity change from 0 to 1024
[  364.906389][ T9393] hfsplus: cannot replace xattr
[  365.076965][ T9383] hfsplus: b-tree write err: -5, ino 8
[  365.151830][ T9402] loop8: detected capacity change from 0 to 128
[  365.221405][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1330'.
[  365.241068][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1330'.
[  365.267197][ T9406] device ip6gretap0 entered promiscuous mode
[  365.285489][ T9406] device syz_tun entered promiscuous mode
[  365.296092][ T9406] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  365.316925][ T5249] hfsplus: b-tree write err: -5, ino 8
[  365.353590][ T9406] Cannot create hsr debugfs directory
[  365.436554][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  366.427268][ T9402] syz.8.1328: attempt to access beyond end of device
[  366.427268][ T9402] loop8: rw=2049, sector=145, nr_sectors = 184 limit=128
[  366.488910][ T9410] syz.8.1328: attempt to access beyond end of device
[  366.488910][ T9410] loop8: rw=524288, sector=145, nr_sectors = 184 limit=128
[  366.503209][ T9410] syz.8.1328: attempt to access beyond end of device
[  366.503209][ T9410] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  366.518548][ T9410] syz.8.1328: attempt to access beyond end of device
[  366.518548][ T9410] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  366.533812][ T9410] syz.8.1328: attempt to access beyond end of device
[  366.533812][ T9410] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  366.559755][ T9410] syz.8.1328: attempt to access beyond end of device
[  366.559755][ T9410] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  366.674042][ T9420] loop1: detected capacity change from 0 to 1024
[  366.706433][ T9420] hfsplus: unable to parse mount options
[  366.783539][ T9420] using random self ethernet address
[  366.826892][ T9420] using random host ethernet address
[  368.031971][ T9436] loop6: detected capacity change from 0 to 256
[  368.128212][   T26] kauditd_printk_skb: 45 callbacks suppressed
[  368.128230][   T26] audit: type=1326 audit(2000000041.280:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.260757][   T26] audit: type=1326 audit(2000000041.330:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.287390][ T9444] netlink: 'syz.8.1340': attribute type 12 has an invalid length.
[  368.371566][   T26] audit: type=1326 audit(2000000041.330:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.438540][   T26] audit: type=1326 audit(2000000041.330:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.520220][   T26] audit: type=1326 audit(2000000041.330:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.605898][   T26] audit: type=1326 audit(2000000041.330:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.664156][   T26] audit: type=1326 audit(2000000041.330:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.737654][   T26] audit: type=1326 audit(2000000041.330:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.806273][   T26] audit: type=1326 audit(2000000041.330:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.884293][ T9460] device syzkaller0 entered promiscuous mode
[  368.892547][   T26] audit: type=1326 audit(2000000041.330:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.1.1339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  368.935834][ T9460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.951093][ T9459] tipc: Resetting bearer <eth:syzkaller0>
[  369.053413][ T9459] tipc: Disabling bearer <eth:syzkaller0>
[  369.516918][ T9475] device syzkaller0 entered promiscuous mode
[  369.826729][ T9484] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  370.017398][ T9489] device syzkaller0 entered promiscuous mode
[  373.702820][ T9533] xt_socket: unknown flags 0x4
[  374.082327][ T9538] loop1: detected capacity change from 0 to 512
[  374.175275][ T9538] EXT4-fs (loop1): orphan cleanup on readonly fs
[  374.196915][ T9538] __quota_error: 21 callbacks suppressed
[  374.196935][ T9538] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144).
[  374.234509][ T9538] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  374.333935][ T9538] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  374.381773][ T9538] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1363: couldn't read orphan inode 26 (err -116)
[  374.483438][ T9538] EXT4-fs (loop1): Remounting filesystem read-only
[  374.495334][ T9538] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  374.628549][   T26] audit: type=1326 audit(2000000047.780:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  374.693819][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  374.708923][   T26] audit: type=1326 audit(2000000047.780:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  374.852599][   T26] audit: type=1326 audit(2000000047.820:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  374.933353][   T26] audit: type=1326 audit(2000000047.820:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  375.048526][   T26] audit: type=1326 audit(2000000047.820:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  375.114135][ T9561] device ip6gre1 entered promiscuous mode
[  375.137289][ T9562] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  375.164866][   T26] audit: type=1326 audit(2000000047.840:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  375.232634][ T8372] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  375.273445][ T8372] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  375.337107][ T4321] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  375.349250][   T26] audit: type=1326 audit(2000000047.840:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  375.405311][ T4291] Bluetooth: hci0: command 0x0406 tx timeout
[  375.439839][   T26] audit: type=1326 audit(2000000047.840:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  375.551457][   T26] audit: type=1326 audit(2000000047.850:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.8.1366" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc9ca39e199 code=0x7ffc0000
[  375.887276][ T4321] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  375.924226][ T9574] tipc: Started in network mode
[  375.965314][ T9574] tipc: Node identity da1fc87be2b1, cluster identity 4711
[  375.973096][ T9574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.295924][ T4321] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  377.007625][ T9573] tipc: Disabling bearer <eth:syzkaller0>
[  377.285409][ T9593] loop8: detected capacity change from 0 to 8192
[  378.448549][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.455017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  379.485194][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  380.459414][ T9660] loop8: detected capacity change from 0 to 512
[  381.366220][   T26] kauditd_printk_skb: 70 callbacks suppressed
[  381.366238][   T26] audit: type=1326 audit(2000000054.520:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  381.428791][   T26] audit: type=1326 audit(2000000054.570:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  381.473399][ T9680] 8021q: adding VLAN 0 to HW filter on device bond1
[  381.733213][   T26] audit: type=1326 audit(2000000054.580:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  381.759866][   T26] audit: type=1326 audit(2000000054.580:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  381.784395][   T26] audit: type=1326 audit(2000000054.580:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  381.809074][   T26] audit: type=1326 audit(2000000054.580:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  381.844521][ T9680] bond1: (slave geneve2): making interface the new active one
[  381.862431][   T26] audit: type=1326 audit(2000000054.580:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  382.024715][ T9680] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  382.599299][ T9651] loop7: detected capacity change from 0 to 512
[  382.620034][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  382.646883][ T9651] UDF-fs: bad mount option "session500000000000000000005" or missing value
[  382.751809][   T26] audit: type=1326 audit(2000000054.580:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  382.862940][   T26] audit: type=1326 audit(2000000054.580:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  382.981769][   T26] audit: type=1326 audit(2000000054.580:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.6.1388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f899f997f17 code=0x7ffc0000
[  383.577502][ T9719] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  384.023599][ T9718] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1397'.
[  384.388586][ T9728] loop7: detected capacity change from 0 to 128
[  384.439187][ T9728] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  384.771475][ T9728] syz.7.1398: attempt to access beyond end of device
[  384.771475][ T9728] loop7: rw=0, sector=61, nr_sectors = 94 limit=128
[  385.114568][ T5271] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  385.294054][ T9754] loop1: detected capacity change from 0 to 128
[  385.307043][ T9750] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  385.423817][ T9754] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  385.475458][ T9754] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.645515][ T4291] Bluetooth: hci4: command 0x0406 tx timeout
[  385.822485][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  387.155481][ T9794] WARNING! power/level is deprecated; use power/control instead
[  387.361628][ T9801] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  387.557050][ T9786] ceph: No mds server is up or the cluster is laggy
[  387.981188][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1423'.
[  388.545883][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  388.639266][ T9822] batman_adv: batadv0: Adding interface: veth0
[  388.673706][ T9822] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  388.716705][ T9822] batman_adv: batadv0: Interface activated: veth0
[  389.656471][ T9822] batman_adv: batadv0: Interface deactivated: veth0
[  389.917610][ T9822] batman_adv: batadv0: Removing interface: veth0
[  392.012742][ T9853] netlink: 'syz.2.1433': attribute type 10 has an invalid length.
[  392.196789][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1436'.
[  392.657296][ T9869] bond1: (slave veth1): Enslaving as an active interface with an up link
[  393.053295][ T9884] loop6: detected capacity change from 0 to 2048
[  393.132876][ T9884] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  393.174375][ T9884] UDF-fs: Scanning with blocksize 512 failed
[  393.224619][ T9884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.993430][ T9938] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  401.655098][    C0] net_ratelimit: 37 callbacks suppressed
[  402.783554][ T9982] overlayfs: upper fs does not support file handles, falling back to index=off.
[  403.093493][ T9991] netlink: 'syz.1.1463': attribute type 1 has an invalid length.
[  403.139533][ T9991] 8021q: adding VLAN 0 to HW filter on device bond2
[  403.426745][ T9991] bond2: (slave geneve2): making interface the new active one
[  403.441787][ T9991] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  403.540268][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  405.386064][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  405.759169][T10020] CIFS mount error: No usable UNC path provided in device string!
[  405.759169][T10020] 
[  405.769429][T10020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  406.467443][T10018] loop7: detected capacity change from 0 to 512
[  406.589708][T10018] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  407.326861][ T2925] net_ratelimit: 57 callbacks suppressed
[  407.474457][T10038] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  407.481870][T10038] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  407.492342][T10038] vhci_hcd vhci_hcd.0: Device attached
[  407.520587][T10039] vhci_hcd: connection closed
[  407.595635][ T2925] vhci_hcd: stop threads
[  407.670814][ T2925] vhci_hcd: release socket
[  407.937698][ T2925] vhci_hcd: disconnect device
[  407.947043][ T7710] EXT4-fs (loop7): unmounting filesystem.
[  408.155885][ T8375] usb 49-1: new high-speed USB device number 2 using vhci_hcd
[  408.164384][ T8375] usb 49-1: enqueue for inactive port 0
[  408.267260][ T8375] vhci_hcd: vhci_device speed not set
[  411.917665][T10072] loop7: detected capacity change from 0 to 164
[  412.365211][ T2925] net_ratelimit: 55 callbacks suppressed
[  414.857348][T10095] device syzkaller0 entered promiscuous mode
[  414.913144][T10101] device syzkaller0 entered promiscuous mode
[  417.396902][ T5264] net_ratelimit: 53 callbacks suppressed
[  417.408494][T10124] device syzkaller0 entered promiscuous mode
[  418.989418][T10147] syz.7.1498 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  419.608737][T10165] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1504'.
[  419.697624][T10168] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1504'.
[  419.729791][T10166] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  420.017588][T10175] serio: Serial port ptm0
[  420.116807][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'.
[  420.514385][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'.
[  422.445123][    C1] net_ratelimit: 51 callbacks suppressed
[  423.825312][T10225] loop1: detected capacity change from 0 to 1024
[  423.844391][T10225] ext4: Unknown parameter 'nouser_xattr'
[  424.232989][T10176] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  425.015802][T10231] loop6: detected capacity change from 0 to 4096
[  425.391515][T10234] loop7: detected capacity change from 0 to 256
[  425.555759][T10231] ntfs3: loop6: Failed to load $Extend.
[  425.562963][T10236] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  427.067847][T10258] netlink: 'syz.7.1524': attribute type 8 has an invalid length.
[  427.227147][T10231] ntfs3: loop6: ino=23, "memory.events.local" mmap(write) compressed not supported
[  427.664193][ T7568] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  427.683809][ T7568] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  427.706505][T10268] netlink: 'syz.7.1527': attribute type 1 has an invalid length.
[  427.726843][ T5368] net_ratelimit: 49 callbacks suppressed
[  428.106682][T10268] 8021q: adding VLAN 0 to HW filter on device bond2
[  428.381378][T10267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.942645][T10271] bond2: (slave veth3): Enslaving as an active interface with a down link
[  429.066543][T10273] 8021q: adding VLAN 0 to HW filter on device batadv1
[  429.117413][T10273] bond2: (slave batadv1): making interface the new active one
[  429.155383][T10273] device batadv1 entered promiscuous mode
[  429.183549][T10273] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  429.424353][T10277] bond2: (slave veth5): Enslaving as an active interface with a down link
[  429.495671][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  430.627282][T10312] loop1: detected capacity change from 0 to 256
[  430.815856][T10312] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  430.901384][T10312] FAT-fs (loop1): Filesystem has been set read-only
[  432.739676][    C0] net_ratelimit: 50 callbacks suppressed
[  433.176551][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'.
[  434.784001][T10363] loop6: detected capacity change from 0 to 128
[  436.208456][T10379] ceph: separator ':' missing in source
[  436.244833][T10363] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  436.282835][T10363] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.805083][    C1] net_ratelimit: 65 callbacks suppressed
[  437.883143][T10400] fuse: Bad value for 'fd'
[  438.605458][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  438.994867][T10409] bond0 speed is unknown, defaulting to 1000
[  439.001863][T10409] bond0 speed is unknown, defaulting to 1000
[  439.028059][T10409] bond0 speed is unknown, defaulting to 1000
[  439.065191][T10409] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  439.109505][T10409] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  439.228254][T10409] bond0 speed is unknown, defaulting to 1000
[  439.243705][T10409] bond0 speed is unknown, defaulting to 1000
[  439.259830][T10409] bond0 speed is unknown, defaulting to 1000
[  439.274114][T10409] bond0 speed is unknown, defaulting to 1000
[  439.286431][T10409] bond0 speed is unknown, defaulting to 1000
[  439.376190][T10409] bond0 speed is unknown, defaulting to 1000
[  439.539435][ T7568] EXT4-fs (loop6): unmounting filesystem.
[  439.946381][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.953547][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.155828][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'.
[  440.214745][T10430] xt_CONNSECMARK: invalid mode: 0
[  440.255307][    T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  440.535141][    T7] usb 7-1: Using ep0 maxpacket: 32
[  440.827336][    T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.907731][T10432] loop7: detected capacity change from 0 to 1024
[  440.923374][    T7] usb 7-1: config 0 has no interfaces?
[  440.976840][    T7] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  441.008956][T10432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  441.025189][T10432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  441.044969][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.057739][T10432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  441.099491][T10432] System zones: 0-1, 3-36
[  441.117374][    T7] usb 7-1: config 0 descriptor??
[  441.176165][T10432] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  442.149137][ T7710] EXT4-fs (loop7): unmounting filesystem.
[  442.987469][ T2925] net_ratelimit: 53 callbacks suppressed
[  443.493114][ T4321] usb 7-1: USB disconnect, device number 4
[  444.867733][ T4452] device batadv1 left promiscuous mode
[  445.045713][T10488] loop6: detected capacity change from 0 to 512
[  445.255342][T10488] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  445.320378][T10488] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.639916][T10511] netlink: 'syz.8.1581': attribute type 1 has an invalid length.
[  447.650760][ T5368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  447.667396][ T7568] EXT4-fs (loop6): unmounting filesystem.
[  448.133895][ T5269] net_ratelimit: 61 callbacks suppressed
[  451.014683][T10573] loop7: detected capacity change from 0 to 512
[  451.166478][T10573] EXT4-fs: Ignoring removed orlov option
[  451.718856][T10573] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  451.760035][T10584] netlink: 'syz.6.1595': attribute type 2 has an invalid length.
[  451.790359][T10573] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.391462][ T7710] EXT4-fs (loop7): unmounting filesystem.
[  453.325058][    C1] net_ratelimit: 54 callbacks suppressed
[  453.788267][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1605'.
[  454.594369][T10631] loop7: detected capacity change from 0 to 8
[  454.683422][T10631] SQUASHFS error: zstd decompression error: 10
[  454.723661][T10628] device bond2 entered promiscuous mode
[  454.770333][T10631] SQUASHFS error: zstd decompression failed, data probably corrupt
[  454.880232][T10631] SQUASHFS error: Failed to read block 0x4ea: -5
[  454.903177][T10631] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  454.959582][T10631] SQUASHFS error: Unable to read inode 0x11f
[  455.604233][T10638] netlink: 'syz.1.1607': attribute type 4 has an invalid length.
[  455.725597][ T5263] wlan1: Trigger new scan to find an IBSS to join
[  457.262778][T10655] netlink: 'syz.1.1613': attribute type 1 has an invalid length.
[  457.719860][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1613'.
[  458.338139][T10659] device bond3 entered promiscuous mode
[  458.445354][ T4452] net_ratelimit: 57 callbacks suppressed
[  458.451231][T10659] 8021q: adding VLAN 0 to HW filter on device bond3
[  458.631980][T10664] device bridge2 entered promiscuous mode
[  458.680334][T10664] bond3: (slave bridge2): making interface the new active one
[  458.722110][T10664] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  458.748329][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  460.017552][ T5280] wlan1: Trigger new scan to find an IBSS to join
[  460.271298][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1621'.
[  460.370982][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1621'.
[  460.385471][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1621'.
[  460.584280][T10715] bond3: (slave veth7): Enslaving as an active interface with an up link
[  460.930904][T10735] loop6: detected capacity change from 0 to 256
[  460.980902][T10735] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  461.025140][T10735] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  461.073210][T10735] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  461.155404][T10735] exFAT-fs (loop6): failed to load alloc-bitmap
[  461.198697][T10735] exFAT-fs (loop6): failed to recognize exfat type
[  462.765440][ T5266] wlan1: Trigger new scan to find an IBSS to join
[  463.546974][    C0] net_ratelimit: 51 callbacks suppressed
[  463.628082][ T5266] wlan1: Creating new IBSS network, BSSID de:79:04:7e:ea:46
[  464.586443][T10774] xt_cgroup: path and classid specified
[  464.756223][   T26] kauditd_printk_skb: 94 callbacks suppressed
[  464.756237][   T26] audit: type=1326 audit(2000000137.910:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  464.865118][   T26] audit: type=1326 audit(2000000137.960:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.067880][   T26] audit: type=1326 audit(2000000137.960:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.269945][   T26] audit: type=1326 audit(2000000137.960:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.372686][   T26] audit: type=1326 audit(2000000137.960:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.415152][   T26] audit: type=1326 audit(2000000137.960:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.510147][   T26] audit: type=1326 audit(2000000137.970:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.635357][   T26] audit: type=1326 audit(2000000137.970:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.734601][T10810] futex_wake_op: syz.8.1643 tries to shift op by 144; fix this program
[  466.745164][   T26] audit: type=1326 audit(2000000137.970:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  466.835177][   T26] audit: type=1326 audit(2000000137.970:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.6.1637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  468.368658][T10826] netlink: 'syz.6.1648': attribute type 30 has an invalid length.
[  468.416210][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1648'.
[  468.605417][ T5367] net_ratelimit: 49 callbacks suppressed
[  468.780482][T10829] loop6: detected capacity change from 0 to 512
[  468.816701][T10829] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  468.875680][T10829] EXT4-fs (loop6): 1 truncate cleaned up
[  468.881522][T10829] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  468.898049][T10835] loop7: detected capacity change from 0 to 512
[  468.936480][T10835] EXT4-fs: Ignoring removed mblk_io_submit option
[  468.977202][T10835] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.1651: corrupted in-inode xattr
[  469.010158][T10835] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.1651: couldn't read orphan inode 15 (err -117)
[  469.193215][T10835] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  469.249696][T10835] futex_wake_op: syz.7.1651 tries to shift op by 144; fix this program
[  469.439786][ T7710] EXT4-fs (loop7): unmounting filesystem.
[  469.692994][ T7568] EXT4-fs (loop6): unmounting filesystem.
[  470.164364][T10858] tipc: Failed to remove unknown binding: 66,0,0/0:2842242813/2842242814
[  470.194828][T10859] tipc: Failed to remove unknown binding: 66,0,0/0:2316044724/2316044726
[  470.212674][T10858] tipc: Failed to remove unknown binding: 66,0,0/0:2842242813/2842242814
[  471.412542][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'.
[  471.493943][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'.
[  472.843422][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1672'.
[  473.705430][ T5265] net_ratelimit: 49 callbacks suppressed
[  473.988472][T10932] x86/PAT: syz.7.1676:10932 freeing invalid memtype [mem 0xfe005000-0xfe005fff]
[  474.049909][T10932] x86/PAT: syz.7.1676:10932 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  474.075916][T10908] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.083551][T10908] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.278349][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.469186][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.669513][T10908] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.685413][T10908] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.705178][T10908] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.714207][T10908] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.365728][T10952] input: syz1 as /devices/virtual/input/input11
[  478.925254][ T2925] net_ratelimit: 62 callbacks suppressed
[  479.995482][T10992] loop6: detected capacity change from 0 to 1024
[  480.314101][T10992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  480.916195][T10992] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  481.300287][T11005] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1692'.
[  482.132592][ T7568] EXT4-fs (loop6): unmounting filesystem.
[  484.266837][    C0] net_ratelimit: 41 callbacks suppressed
[  486.901468][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1706'.
[  487.010229][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1706'.
[  487.096837][T11057] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  487.105896][T11057] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  487.114729][T11057] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  487.123781][T11057] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  488.547983][T11074] tipc: Failed to remove unknown binding: 66,0,0/43578:435430907/435430909
[  488.575883][T11068] tipc: Failed to remove unknown binding: 66,0,0/43578:3239996907/3239996908
[  488.584776][T11068] tipc: Failed to remove unknown binding: 66,0,0/43578:3239996907/3239996908
[  488.745517][ T4325] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  488.939679][ T4325] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  488.961220][ T4325] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.992684][ T4325] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  489.018634][ T4325] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  489.062647][ T4325] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  489.115256][ T4325] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  489.123454][ T4325] usb 7-1: Product: syz
[  489.133609][ T4325] usb 7-1: Manufacturer: syz
[  489.158847][ T4325] cdc_wdm 7-1:1.0: skipping garbage
[  489.205091][ T4325] cdc_wdm: probe of 7-1:1.0 failed with error -22
[  489.325353][   T33] net_ratelimit: 40 callbacks suppressed
[  489.430489][T11093] netlink: 'syz.1.1713': attribute type 10 has an invalid length.
[  489.439809][ T4320] usb 7-1: USB disconnect, device number 5
[  489.497163][T11093] bridge0: port 3(dummy0) entered disabled state
[  489.504046][T11093] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.511446][T11093] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.679142][T11100] batman_adv: batadv0: Adding interface: veth0
[  489.733676][T11100] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.055347][T11100] batman_adv: batadv0: Interface activated: veth0
[  490.078438][T11105] batman_adv: batadv0: Interface deactivated: veth0
[  490.205094][ T4320] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  490.515673][ T4320] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  490.647478][ T4320] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  491.189012][ T4320] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  491.250068][ T4320] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  491.336658][ T4320] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  491.399609][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  491.449875][ T4320] usb 7-1: Product: syz
[  491.459693][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  491.479314][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  491.490096][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  491.499397][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  491.508188][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  491.516000][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  491.573976][ T4320] usb 7-1: Manufacturer: syz
[  491.737780][ T4320] usb 7-1: can't set config #1, error -71
[  491.762456][ T4320] usb 7-1: USB disconnect, device number 6
[  492.437855][T11105] batman_adv: batadv0: Removing interface: veth0
[  492.814069][T11112] bond0 speed is unknown, defaulting to 1000
[  492.952091][T11132] sctp: [Deprecated]: syz.2.1721 (pid 11132) Use of struct sctp_assoc_value in delayed_ack socket option.
[  492.952091][T11132] Use struct sctp_sack_info instead
[  493.252408][T11138] tipc: Failed to remove unknown binding: 66,0,0/0:3255961998/3255962000
[  493.330724][T11136] tipc: Failed to remove unknown binding: 66,0,0/0:2754510916/2754510917
[  493.340866][T11136] tipc: Failed to remove unknown binding: 66,0,0/0:2754510916/2754510917
[  493.565706][ T4291] Bluetooth: hci5: command 0x0409 tx timeout
[  493.626487][T11112] chnl_net:caif_netlink_parms(): no params data found
[  493.642561][T11142] futex_wake_op: syz.2.1725 tries to shift op by 144; fix this program
[  494.209219][T11112] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.221170][T11112] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.247196][T11112] device bridge_slave_0 entered promiscuous mode
[  494.357398][T11112] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.381527][T11112] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.419244][T11112] device bridge_slave_1 entered promiscuous mode
[  494.515237][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'.
[  494.845492][    C0] net_ratelimit: 42 callbacks suppressed
[  495.237596][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'.
[  495.317901][T11152] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  495.327174][T11152] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  495.335967][T11152] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  495.344711][T11152] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  495.483895][T11112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.582528][T11112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.645792][ T4291] Bluetooth: hci5: command 0x041b tx timeout
[  497.359968][T11112] team0: Port device team_slave_0 added
[  497.425602][T11112] team0: Port device team_slave_1 added
[  497.915397][ T4291] Bluetooth: hci5: command 0x040f tx timeout
[  498.422738][T11112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.689296][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.160290][T11112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.211065][T11112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.225610][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.494133][T11112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.647459][T11187] netlink: 'syz.8.1738': attribute type 2 has an invalid length.
[  499.721763][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1738'.
[  499.965254][ T4290] Bluetooth: hci5: command 0x0419 tx timeout
[  500.525060][    C0] net_ratelimit: 41 callbacks suppressed
[  500.989270][T11112] device hsr_slave_0 entered promiscuous mode
[  501.026561][T11112] device hsr_slave_1 entered promiscuous mode
[  501.075354][T11112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  501.107648][T11112] Cannot create hsr debugfs directory
[  501.329876][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.336294][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.970098][T11219] tipc: Failed to remove unknown binding: 66,0,0/0:4276724227/4276724229
[  501.995940][T11219] tipc: Failed to remove unknown binding: 66,0,0/0:4276724227/4276724228
[  502.031766][T11219] tipc: Failed to remove unknown binding: 66,0,0/0:4276724227/4276724229
[  502.075846][T11219] tipc: Failed to remove unknown binding: 66,0,0/0:4276724227/4276724228
[  502.721212][T11112] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  503.375482][T11112] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  503.551940][T11112] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  504.235606][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  504.235620][   T26] audit: type=1800 audit(2000000177.380:603): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1743" name=10 dev="sda1" ino=2059 res=0 errno=0
[  504.374268][T11112] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  505.546850][    C0] net_ratelimit: 36 callbacks suppressed
[  506.267679][T11112] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.297946][T11112] 8021q: adding VLAN 0 to HW filter on device team0
[  506.493562][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  506.541503][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  506.602545][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  506.676021][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  506.762212][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.769515][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.051974][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  507.061357][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  507.239852][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.247082][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.576748][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  507.716715][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  507.835860][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  507.894019][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  508.118676][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  508.849309][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  508.934000][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  508.950253][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  508.964694][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  508.978449][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  508.989549][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  509.008322][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  509.095808][T11112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  510.764780][    C1] net_ratelimit: 42 callbacks suppressed
[  511.855377][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  512.288229][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  512.303916][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  512.702572][T11112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.601484][T10473] syz.2.1572 (10473) used greatest stack depth: 18032 bytes left
[  516.889786][    C0] net_ratelimit: 40 callbacks suppressed
[  517.574929][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  517.599156][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  517.712194][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  517.744249][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  517.796188][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  517.844905][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  517.978057][T11112] device veth0_vlan entered promiscuous mode
[  518.001303][T11112] device veth1_vlan entered promiscuous mode
[  518.640138][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  518.650182][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  518.713176][T11112] device veth0_macvtap entered promiscuous mode
[  518.774452][T11112] device veth1_macvtap entered promiscuous mode
[  518.859388][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  518.896691][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  518.940123][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  518.977650][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  519.037988][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.095401][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.125285][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.157982][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.185466][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.205507][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.263314][T11112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.296533][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  519.329548][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  520.120816][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.138787][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.160882][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.187209][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.212519][T11112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.355950][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  520.409734][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  520.430839][T11112] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.443411][T11112] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.453829][T11112] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.468654][T11112] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.783376][ T5367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.831724][ T5367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.160771][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  521.542228][ T4667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.599693][ T4667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.640523][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  521.907012][    C0] net_ratelimit: 80 callbacks suppressed
[  523.428641][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'.
[  523.582838][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1787'.
[  523.682528][T11402] netlink: 'syz.1.1788': attribute type 3 has an invalid length.
[  523.700923][T11402] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1788'.
[  523.934105][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1790'.
[  526.198578][T11440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1800'.
[  526.926307][ T5264] net_ratelimit: 43 callbacks suppressed
[  527.488624][T11450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.771847][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'.
[  532.046728][    C0] net_ratelimit: 52 callbacks suppressed
[  532.381342][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1828'.
[  532.734639][T11545] bond1: (slave vlan1): Opening slave failed
[  534.997032][T11576] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved
[  537.089236][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1844'.
[  537.103552][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1844'.
[  537.172251][ T4667] net_ratelimit: 71 callbacks suppressed
[  539.528011][T11629] bond0: (slave netdevsim0): Error: Device can not be enslaved while up
[  539.766735][T11639] overlayfs: failed to clone upperpath
[  540.072583][T11649] xt_CONNSECMARK: invalid mode: 66
[  542.205358][ T5242] net_ratelimit: 59 callbacks suppressed
[  545.340213][T11703] siw: device registration error -23
[  545.751002][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  545.804205][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'.
[  545.990613][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'.
[  546.180124][T11716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'.
[  546.634690][T11716] bond6: (slave veth5): Enslaving as an active interface with an up link
[  546.810942][   T26] audit: type=1326 audit(2000000219.960:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11723 comm="syz.6.1885" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f899f99e199 code=0x0
[  547.109275][T11732] netlink: 'syz.9.1886': attribute type 4 has an invalid length.
[  547.805110][    C1] net_ratelimit: 63 callbacks suppressed
[  549.047038][T11749] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  552.851842][   T26] audit: type=1800 audit(2000000225.980:605): pid=11790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1901" name="nexus" dev="configfs" ino=61798 res=0 errno=0
[  552.983421][T11799] net_ratelimit: 43 callbacks suppressed
[  553.570737][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'.
[  553.981946][T11816] overlayfs: missing 'lowerdir'
[  554.041514][T11817] overlayfs: bad mount option "redirect_dir=nofollow:/"
[  558.605094][    C1] net_ratelimit: 49 callbacks suppressed
[  562.323199][T11909] netlink: 'syz.1.1936': attribute type 12 has an invalid length.
[  562.331224][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  562.340482][T11909] bond0: option primary_reselect: invalid value (239)
[  562.723902][T11924] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7568] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11924]
[  562.772278][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.778727][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.761779][    C1] net_ratelimit: 46 callbacks suppressed
[  568.095918][T11985] Core dump to core aborted: cannot preserve file permissions
[  568.845033][    C1] net_ratelimit: 43 callbacks suppressed
[  569.329040][T12001] Core dump to core aborted: cannot preserve file permissions
[  569.577104][T12004] 
Î: renamed from bond_slave_0
[  569.967499][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'.
[  571.154176][T12030] overlayfs: missing 'lowerdir'
[  571.244842][T12032] overlayfs: bad mount option "redirect_dir=nofollow:/"
[  571.424565][T12031] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  572.132688][T12035] netlink: 'syz.2.1970': attribute type 1 has an invalid length.
[  572.963195][T12035] 8021q: adding VLAN 0 to HW filter on device bond7
[  573.363456][T12046] bond4: (slave veth0_to_bond): Releasing active interface
[  573.776990][T12046] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  574.085717][T12049] device bond7 entered promiscuous mode
[  574.205732][   T11] net_ratelimit: 45 callbacks suppressed
[  574.563906][T12035] device macvlan3 entered promiscuous mode
[  574.610802][T12035] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  574.761134][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'.
[  574.910492][T12079] bond0 speed is unknown, defaulting to 1000
[  574.937838][T12087] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  576.399878][T12105] netlink: 'syz.9.1985': attribute type 12 has an invalid length.
[  576.439631][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1985'.
[  576.511226][T12105] bond0: option primary_reselect: invalid value (239)
[  579.245839][    C1] net_ratelimit: 50 callbacks suppressed
[  579.515328][T12144] netlink: 'syz.6.1993': attribute type 1 has an invalid length.
[  580.526733][T12144] 8021q: adding VLAN 0 to HW filter on device bond2
[  580.636364][T12158] device bond2 entered promiscuous mode
[  581.650619][T12160] device macvlan2 entered promiscuous mode
[  581.702115][T12160] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  584.485144][T12192] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  584.525118][ T9206] net_ratelimit: 40 callbacks suppressed
[  584.681775][T12192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  585.245228][ T4290] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  587.212106][T12228] xt_nat: multiple ranges no longer supported
[  588.387466][ T4320] libceph: connect (2)127.0.0.1:6789 error -101
[  588.431644][ T4320] libceph: ceph_tcp_connect failed: -101
[  588.438100][ T4320] libceph: mon0 (2)127.0.0.1:6789 connect error
[  588.715219][ T4320] libceph: connect (2)127.0.0.1:6789 error -101
[  588.721658][ T4320] libceph: ceph_tcp_connect failed: -101
[  588.742830][ T4320] libceph: mon0 (2)127.0.0.1:6789 connect error
[  589.353886][ T8373] libceph: connect (2)127.0.0.1:6789 error -101
[  589.361928][T12235] ceph: No mds server is up or the cluster is laggy
[  589.407013][ T8373] libceph: ceph_tcp_connect failed: -101
[  589.474215][ T8373] libceph: mon0 (2)127.0.0.1:6789 connect error
[  589.568124][   T11] net_ratelimit: 51 callbacks suppressed
[  590.929302][T12264] loop6: detected capacity change from 0 to 4096
[  591.029276][T12264] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  591.119382][T12264] NILFS (loop6): mounting unchecked fs
[  591.290537][T12264] NILFS (loop6): recovery complete
[  591.384977][T12272] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  592.064851][T12288] xt_CONNSECMARK: invalid mode: 66
[  594.053301][T12329] xt_TPROXY: Can be used only with -p tcp or -p udp
[  595.323452][    C1] net_ratelimit: 51 callbacks suppressed
[  596.463130][T12368] xt_CONNSECMARK: invalid mode: 66
[  596.803991][T12370] fuse: Unknown parameter 'group_i'
[  596.863804][T12373] bond2: (slave syz_tun): Removing an active aggregator
[  596.875811][T12373] bond2: (slave syz_tun): Releasing backup interface
[  596.894508][T12373] bond7: (slave veth0_to_bond): Releasing active interface
[  596.914783][T12373] bond0: (slave wlan1): Releasing backup interface
[  596.936965][T12373] device wlan1 left promiscuous mode
[  596.977313][T12373] bond3: (slave veth3): Releasing active interface
[  596.994051][T12373] bond5: (slave erspan1): Releasing backup interface
[  597.015196][T12373] device erspan1 left promiscuous mode
[  597.027549][T12373] device vlan2 left promiscuous mode
[  597.032904][T12373] device bond0 left promiscuous mode
[  597.038345][T12373] device macvlan2 left promiscuous mode
[  597.044313][T12373] bridge0: port 1(vlan2) entered disabled state
[  597.064064][T12373] bond0: (slave macvlan2): Releasing backup interface
[  597.079102][T12373] device team0 left promiscuous mode
[  597.103407][T12373] bond6: (slave veth5): Releasing backup interface
[  597.118248][ T4320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  597.134276][ T8372] bond0 speed is unknown, defaulting to 1000
[  598.345842][ T8372] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  600.462427][    C0] net_ratelimit: 49 callbacks suppressed
[  605.645015][    C0] net_ratelimit: 43 callbacks suppressed
[  607.638987][T12460] netlink: 'syz.2.2067': attribute type 1 has an invalid length.
[  608.914884][T12461] bond8: (slave veth7): Enslaving as an active interface with a down link
[  609.168566][T12463] bond8: (slave veth9): Enslaving as an active interface with a down link
[  609.638864][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'.
[  609.974007][T12465] 8021q: adding VLAN 0 to HW filter on device bond8
[  611.576359][    C0] net_ratelimit: 56 callbacks suppressed
[  616.045939][ T4291] Bluetooth: hci5: command 0x0406 tx timeout
[  617.004996][    C0] net_ratelimit: 54 callbacks suppressed
[  622.124989][    C0] net_ratelimit: 50 callbacks suppressed
[  624.356242][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.362878][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  627.315562][ T4337] net_ratelimit: 48 callbacks suppressed
[  632.358818][ T4337] net_ratelimit: 53 callbacks suppressed
[  636.364025][T12743] device lo entered promiscuous mode
[  636.438000][T12743] device tunl0 entered promiscuous mode
[  636.516971][T12743] device gre0 entered promiscuous mode
[  636.760848][T12752] MTD: Couldn't look up './dev/mtdblock0': -2
[  636.929386][T12743] device gretap0 entered promiscuous mode
[  637.101097][T12743] device erspan0 entered promiscuous mode
[  637.261300][T12743] device ip_vti0 entered promiscuous mode
[  637.461767][T12743] device ip6_vti0 entered promiscuous mode
[  637.480849][    C0] net_ratelimit: 49 callbacks suppressed
[  638.390576][T12743] device sit0 entered promiscuous mode
[  638.631507][T12743] device ip6tnl0 entered promiscuous mode
[  638.738819][T12743] device ip6gre0 entered promiscuous mode
[  638.846603][T12743] device syz_tun entered promiscuous mode
[  638.920262][T12743] device ip6gretap0 entered promiscuous mode
[  639.031342][T12743] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.039021][T12743] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.084487][T12743] device bridge0 entered promiscuous mode
[  639.193497][T12743] device vcan0 entered promiscuous mode
[  639.211199][T12743] device bond0 entered promiscuous mode
[  639.217458][T12743] device bond_slave_0 entered promiscuous mode
[  639.223814][T12743] device bond_slave_1 entered promiscuous mode
[  639.281192][T12743] device team0 entered promiscuous mode
[  639.292691][T12743] device team_slave_0 entered promiscuous mode
[  639.302881][T12743] device team_slave_1 entered promiscuous mode
[  639.371928][T12743] device dummy0 entered promiscuous mode
[  639.420692][T12743] device nlmon0 entered promiscuous mode
[  639.437851][T12743] device caif0 entered promiscuous mode
[  639.470113][T12743] device batadv0 entered promiscuous mode
[  639.513234][T12743] device vxcan0 entered promiscuous mode
[  639.545792][T12743] device vxcan1 entered promiscuous mode
[  639.574229][T12743] device veth0 entered promiscuous mode
[  639.668082][T12743] device veth1 entered promiscuous mode
[  639.834606][T12743] device wg0 entered promiscuous mode
[  640.077036][T12743] device wg1 entered promiscuous mode
[  640.665312][T12743] device wg2 entered promiscuous mode
[  640.695730][T12743] device veth0_to_bridge entered promiscuous mode
[  640.809892][T12743] device veth1_to_bridge entered promiscuous mode
[  640.955682][T12743] device veth0_to_bond entered promiscuous mode
[  641.034876][T12743] device veth1_to_bond entered promiscuous mode
[  641.102747][T12743] device veth0_to_team entered promiscuous mode
[  641.166096][T12743] device veth1_to_team entered promiscuous mode
[  641.221075][T12743] device veth0_to_batadv entered promiscuous mode
[  641.238028][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  641.260979][T12743] device batadv_slave_0 entered promiscuous mode
[  641.292535][T12743] device veth1_to_batadv entered promiscuous mode
[  641.308678][T12743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  641.335039][T12743] device batadv_slave_1 entered promiscuous mode
[  641.367137][T12743] device xfrm0 entered promiscuous mode
[  641.398170][T12743] device veth0_to_hsr entered promiscuous mode
[  641.448446][T12743] device veth1_to_hsr entered promiscuous mode
[  641.516018][T12743] device hsr0 entered promiscuous mode
[  641.560562][T12743] device veth1_virt_wifi entered promiscuous mode
[  641.639326][T12743] device veth0_virt_wifi entered promiscuous mode
[  641.657192][T12743] device virt_wifi0 entered promiscuous mode
[  641.813868][T12743] device vlan0 entered promiscuous mode
[  641.837393][T12743] device vlan1 entered promiscuous mode
[  641.844904][T12743] device macvlan0 entered promiscuous mode
[  641.898044][T12743] device macvlan1 entered promiscuous mode
[  641.935658][T12743] device ipvlan0 entered promiscuous mode
[  641.941647][T12743] device ipvlan1 entered promiscuous mode
[  642.041734][T12743] device macvtap0 entered promiscuous mode
[  642.075693][T12743] device macsec0 entered promiscuous mode
[  642.115719][T12743] device geneve0 entered promiscuous mode
[  642.152006][T12743] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.161957][T12743] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.171412][T12743] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.180612][T12743] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  642.199547][T12743] device geneve1 entered promiscuous mode
[  642.271349][T12743] device netdevsim0 entered promiscuous mode
[  642.294567][T12743] device netdevsim1 entered promiscuous mode
[  642.307727][T12743] device netdevsim2 entered promiscuous mode
[  642.318369][T12743] device netdevsim3 entered promiscuous mode
[  642.353128][T12743] device wlan0 entered promiscuous mode
[  642.372648][T12743] device wlan1 entered promiscuous mode
[  642.399047][T12743] device gre1 entered promiscuous mode
[  642.433242][T12750] netlink: 'syz.1.2133': attribute type 13 has an invalid length.
[  642.452376][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'.
[  642.462640][T12750] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  642.565546][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'.
[  642.685035][    C0] net_ratelimit: 56 callbacks suppressed
[  644.480611][T12804] netlink: 'syz.2.2150': attribute type 1 has an invalid length.
[  648.045214][    C0] net_ratelimit: 31 callbacks suppressed
[  649.415931][ T4326] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  649.617032][ T4326] usb 7-1: config index 0 descriptor too short (expected 100, got 68)
[  649.628787][ T4326] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  649.652792][ T4326] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  649.683770][ T4326] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  649.703301][ T4326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  649.720867][ T4326] usb 7-1: SerialNumber: syz
[  649.736144][T12841] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  649.801555][T12850] bond8: (slave veth7): Releasing active interface
[  649.820211][T12850] bond8: (slave veth7): the permanent HWaddr of slave - fe:21:82:83:9f:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  649.837670][  T955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  649.877968][T12850] bond8: (slave veth9): Releasing active interface
[  649.959028][T12841] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  650.391717][T12841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.436655][T12841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.499377][ T4326] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42
[  650.605263][ T4326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  650.750029][ T4326] usb 7-1: USB disconnect, device number 7
[  650.779471][ T4326] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device
[  651.644628][T12880] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  651.803504][T12880] CIFS: Attempting to mount \\127.0.0.1\share
[  651.854859][T12886] block device autoloading is deprecated and will be removed.
[  651.911246][T12880] CIFS: VFS: Error connecting to socket. Aborting operation.
[  651.963295][T12880] CIFS: VFS: cifs_mount failed w/return code = -101
[  652.062896][T12884] md: invalid raid superblock magic on ram1
[  652.085851][T12884] md: ram1 does not have a valid v0.0 superblock, not importing!
[  652.339616][T12884] md: md_import_device returned -22
[  653.711145][ T2925] net_ratelimit: 43 callbacks suppressed
[  654.458506][T12921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2182'.
[  654.499352][T12921] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2182'.
[  654.548209][T12921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2182'.
[  654.925125][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  655.062276][T12931] xt_CT: You must specify a L4 protocol and not use inversions on it
[  655.398578][T12944] jffs2: notice: (12944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  658.727474][    C1] net_ratelimit: 38 callbacks suppressed
[  659.338180][T12974] bond0 speed is unknown, defaulting to 1000
[  660.795279][ T4290] Bluetooth: hci5: unexpected subevent 0x01 length: 19 > 18
[  660.802737][ T4290] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  661.811639][   T26] audit: type=1326 audit(2000000334.960:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13037 comm="syz.2.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fb8d9e199 code=0x0
[  662.081959][T13043] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  662.081959][T13043] 
[  662.096135][T13043] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  662.802411][T13043] CIFS: Attempting to mount \\127.0.0.1\share
[  662.808995][T13043] CIFS: VFS: Error connecting to socket. Aborting operation.
[  662.816581][T13043] CIFS: VFS: cifs_mount failed w/return code = -101
[  663.885087][    C1] net_ratelimit: 34 callbacks suppressed
[  667.041666][T13097] "syz.1.2220" (13097) uses obsolete ecb(arc4) skcipher
[  667.829399][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'.
[  669.085280][    C0] net_ratelimit: 46 callbacks suppressed
[  672.175471][T13149] kAFS: No cell specified
[  674.125117][ T5242] net_ratelimit: 34 callbacks suppressed
[  675.191467][T13195] team0: Port device bridge0 added
[  675.208536][T13195] device bond2 left promiscuous mode
[  675.471274][T13202] futex_wake_op: syz.2.2251 tries to shift op by 144; fix this program
[  675.782884][T13211] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  675.792017][T13211] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  675.800854][T13211] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  675.810364][T13211] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  675.860714][T13211] device vxlan0 entered promiscuous mode
[  675.868166][T13211] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  675.879867][T13214] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.910406][T13214] netlink: 'syz.6.2258': attribute type 9 has an invalid length.
[  676.000998][T13217] jffs2: notice: (13217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  676.744031][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'.
[  677.588433][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2263'.
[  677.722166][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2264'.
[  677.823655][T13244] device syz_tun left promiscuous mode
[  678.095885][T13258] netlink: 'syz.2.2267': attribute type 10 has an invalid length.
[  678.162348][T13258] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  678.202749][ T4326] bond0 speed is unknown, defaulting to 1000
[  678.211425][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'.
[  678.485476][T13259] bond0: (slave bridge0): Releasing backup interface
[  678.564788][ T4326] bond0 speed is unknown, defaulting to 1000
[  679.245345][ T5367] net_ratelimit: 37 callbacks suppressed
[  682.483168][T13296] bond0 speed is unknown, defaulting to 1000
[  684.198045][T13314] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2288'.
[  684.364969][    C1] net_ratelimit: 39 callbacks suppressed
[  685.291159][T13328] device lo entered promiscuous mode
[  685.318724][T13328] device tunl0 entered promiscuous mode
[  685.481953][T13328] device gre0 entered promiscuous mode
[  685.648903][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.655508][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.026340][T13328] device gretap0 entered promiscuous mode
[  686.158071][T13328] device erspan0 entered promiscuous mode
[  686.277797][T13328] device ip_vti0 entered promiscuous mode
[  686.324643][T13328] device ip6_vti0 entered promiscuous mode
[  686.416860][T13328] device sit0 entered promiscuous mode
[  686.870801][T13328] device ip6tnl0 entered promiscuous mode
[  686.985665][T13328] device ip6gre0 entered promiscuous mode
[  687.071335][T13328] device syz_tun entered promiscuous mode
[  687.157104][T13328] device ip6gretap0 entered promiscuous mode
[  687.256134][T13328] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.263574][T13328] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.280993][T13328] device bridge0 entered promiscuous mode
[  687.369896][T13328] device vcan0 entered promiscuous mode
[  687.410982][T13328] device bond0 entered promiscuous mode
[  687.425582][T13328] device bond_slave_0 entered promiscuous mode
[  687.432307][T13328] device bond_slave_1 entered promiscuous mode
[  687.490162][T13328] device team0 entered promiscuous mode
[  687.496088][T13328] device team_slave_0 entered promiscuous mode
[  687.502881][T13328] device team_slave_1 entered promiscuous mode
[  687.567487][T13328] device dummy0 entered promiscuous mode
[  687.621616][T13328] device nlmon0 entered promiscuous mode
[  687.645935][T13328] device caif0 entered promiscuous mode
[  687.676095][T13328] device batadv0 entered promiscuous mode
[  687.726278][T13328] device vxcan0 entered promiscuous mode
[  687.777192][T13328] device vxcan1 entered promiscuous mode
[  687.811580][T13328] device wg0 entered promiscuous mode
[  687.865782][T13328] device wg1 entered promiscuous mode
[  687.902691][T13328] device wg2 entered promiscuous mode
[  687.956581][T13328] device veth0_to_bridge entered promiscuous mode
[  688.046336][T13328] device veth1_to_bridge entered promiscuous mode
[  688.158994][T13328] device veth0_to_bond entered promiscuous mode
[  688.183450][T13328] device veth1_to_bond entered promiscuous mode
[  688.262606][T13328] device veth0_to_team entered promiscuous mode
[  688.360806][T13328] device veth1_to_team entered promiscuous mode
[  688.464029][T13328] device veth0_to_batadv entered promiscuous mode
[  688.478064][T13328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  688.543659][T13328] device batadv_slave_0 entered promiscuous mode
[  688.606318][T13328] device veth1_to_batadv entered promiscuous mode
[  688.624714][T13328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.661475][T13328] device batadv_slave_1 entered promiscuous mode
[  688.723615][T13328] device xfrm0 entered promiscuous mode
[  688.782388][T13328] device veth0_to_hsr entered promiscuous mode
[  688.871542][T13328] device veth1_to_hsr entered promiscuous mode
[  688.961182][T13328] device hsr0 entered promiscuous mode
[  689.036082][T13328] device veth1_virt_wifi entered promiscuous mode
[  689.086094][T13328] device veth0_virt_wifi entered promiscuous mode
[  689.106003][T13328] device virt_wifi0 entered promiscuous mode
[  689.259343][T13328] device vlan0 entered promiscuous mode
[  689.310926][T13328] device macvlan0 entered promiscuous mode
[  689.375249][T13328] device macvlan1 entered promiscuous mode
[  689.399146][T13328] device ipvlan0 entered promiscuous mode
[  689.425123][T13328] device ipvlan1 entered promiscuous mode
[  689.485076][ T5278] net_ratelimit: 51 callbacks suppressed
[  689.566634][T13328] device macvtap0 entered promiscuous mode
[  689.626100][T13328] device macsec0 entered promiscuous mode
[  689.680141][T13328] device geneve0 entered promiscuous mode
[  689.736465][T13328] device geneve1 entered promiscuous mode
[  689.795328][T13328] device netdevsim0 entered promiscuous mode
[  689.845778][T13328] device netdevsim1 entered promiscuous mode
[  689.875797][T13328] device netdevsim2 entered promiscuous mode
[  689.915732][T13328] device netdevsim3 entered promiscuous mode
[  689.977573][T13328] device bond1 entered promiscuous mode
[  689.983198][T13328] device geneve2 entered promiscuous mode
[  690.035957][T13328] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.055034][T13328] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.063983][T13328] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.094955][T13328] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  690.114249][T13328] device ip6tnl1 entered promiscuous mode
[  690.146416][T13328] device bridge1 entered promiscuous mode
[  690.196176][T13328] device veth0 entered promiscuous mode
[  690.244227][T13328] device veth1 entered promiscuous mode
[  690.251967][T13328] device syzkaller0 entered promiscuous mode
[  691.843388][   T26] audit: type=1804 audit(2000000364.990:607): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2300" name="bus" dev="ramfs" ino=66057 res=1 errno=0
[  691.924363][   T26] audit: type=1804 audit(2000000365.020:608): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2300" name="bus" dev="ramfs" ino=66057 res=1 errno=0
[  692.009392][   T26] audit: type=1804 audit(2000000365.160:609): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2300" name="bus" dev="ramfs" ino=66057 res=1 errno=0
[  694.574052][    C1] net_ratelimit: 35 callbacks suppressed
[  699.849721][T13439] nftables ruleset with unbound set
[  700.522564][    C1] net_ratelimit: 27 callbacks suppressed
[  706.483526][    C0] net_ratelimit: 48 callbacks suppressed
[  709.330030][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2331'.
[  711.996021][ T9206] net_ratelimit: 33 callbacks suppressed
[  712.557321][T13517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2339'.
[  717.508467][    C0] net_ratelimit: 28 callbacks suppressed
[  717.786518][T13548] jffs2: notice: (13548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  722.765020][    C1] net_ratelimit: 29 callbacks suppressed
[  722.843757][T13581] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16
[  724.411346][T13601] overlayfs: failed to clone upperpath
[  727.045230][   T26] audit: type=1800 audit(2000000400.200:610): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2359" name="bus" dev="ramfs" ino=65498 res=0 errno=0
[  727.794132][ T5263] net_ratelimit: 28 callbacks suppressed
[  730.783591][T13665] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2370'.
[  732.895350][ T5269] net_ratelimit: 34 callbacks suppressed
[  734.107389][T13693] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  735.401511][T13702] overlayfs: failed to clone upperpath
[  737.905422][ T4667] net_ratelimit: 26 callbacks suppressed
[  738.242916][T13725] bond0 speed is unknown, defaulting to 1000
[  738.368713][T13740] jffs2: notice: (13740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  743.397409][    C0] net_ratelimit: 30 callbacks suppressed
[  745.987296][T13811] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  746.517165][T13821] futex_wake_op: syz.8.2415 tries to shift op by 144; fix this program
[  746.773077][T13821] futex_wake_op: syz.8.2415 tries to shift op by 144; fix this program
[  747.088080][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.094482][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  748.765377][    C0] net_ratelimit: 32 callbacks suppressed
[  749.800055][T13862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  752.775526][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'.
[  752.789473][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'.
[  752.799766][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'.
[  752.812874][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'.
[  752.822522][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'.
[  754.098130][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'.
[  754.124919][    C0] net_ratelimit: 35 callbacks suppressed
[  756.658634][T13933] __vm_enough_memory: pid: 13933, comm: syz.6.2442, no enough memory for the allocation
[  757.746368][T13942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2449'.
[  758.036096][T13950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2451'.
[  758.195407][T13957] netlink: 'syz.8.2453': attribute type 1 has an invalid length.
[  759.496985][    C1] net_ratelimit: 32 callbacks suppressed
[  759.738292][T13959] 8021q: adding VLAN 0 to HW filter on device bond4
[  759.753480][T13959] bond3: (slave bond4): making interface the new active one
[  759.775484][T13959] bond3: (slave bond4): Enslaving as an active interface with an up link
[  759.872466][T13962] bond3: (slave gretap1): Enslaving as a backup interface with an up link
[  761.133568][T13987] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes
[  761.145064][T13987] Error parsing options; rc = [-22]
[  762.153085][T13990] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2460'.
[  764.645920][ T5264] net_ratelimit: 35 callbacks suppressed
[  765.385295][T14014] jffs2: notice: (14014) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  769.965223][    C0] net_ratelimit: 29 callbacks suppressed
[  773.193768][T14094] bond0 speed is unknown, defaulting to 1000
[  775.724995][    C0] net_ratelimit: 39 callbacks suppressed
[  775.894590][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'.
[  778.009978][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2507'.
[  781.164910][    C0] net_ratelimit: 40 callbacks suppressed
[  785.424537][T14211] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  785.470497][T14211] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2521'.
[  786.765425][    C0] net_ratelimit: 28 callbacks suppressed
[  786.959227][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2526'.
[  786.986026][T14227] bond0: option resend_igmp: invalid value (18446744072707910257)
[  786.994027][T14227] bond0: option resend_igmp: allowed values 0 - 255
[  790.127866][T14279] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  791.580087][T14273] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  791.635782][T14273] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  791.821856][T14273] bridge0: port 3(dummy0) entered blocking state
[  791.828437][T14273] bridge0: port 3(dummy0) entered forwarding state
[  791.837439][T14273] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.844632][T14273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  791.852214][T14273] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.859463][T14273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.885110][ T4667] net_ratelimit: 32 callbacks suppressed
[  792.531690][T14273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  792.599127][T14273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  792.649500][T14273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  792.709400][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  792.735313][T14309] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  792.744574][T14308] netlink: 'syz.2.2543': attribute type 4 has an invalid length.
[  794.079467][T14333] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  795.468445][T14352] jffs2: notice: (14352) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  796.088079][T14359] MPTCP: kernel_bind error, err=-99
[  797.025019][ T5269] net_ratelimit: 38 callbacks suppressed
[  799.817123][T14396] MPTCP: kernel_bind error, err=-98
[  802.094345][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2579'.
[  802.125364][ T4667] net_ratelimit: 29 callbacks suppressed
[  802.317283][T14438] bridge2: port 1(erspan0) entered blocking state
[  802.333060][T14438] bridge2: port 1(erspan0) entered disabled state
[  802.424691][T14438] device erspan0 entered promiscuous mode
[  803.533985][   T26] audit: type=1804 audit(2000000476.680:611): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2585" name="bus" dev="ramfs" ino=69071 res=1 errno=0
[  803.609911][   T26] audit: type=1804 audit(2000000476.720:612): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2585" name="bus" dev="ramfs" ino=69071 res=1 errno=0
[  803.670091][T14468] netlink: 'syz.2.2584': attribute type 1 has an invalid length.
[  804.588973][T14471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2584'.
[  804.611533][T14471] 8021q: adding VLAN 0 to HW filter on device bond9
[  804.637785][T14478] jffs2: notice: (14478) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  807.404936][    C1] net_ratelimit: 31 callbacks suppressed
[  809.305443][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  809.311850][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  811.382681][T14533] syz.1.2599 (14533) used greatest stack depth: 16976 bytes left
[  812.697230][ T4337] net_ratelimit: 29 callbacks suppressed
[  813.898513][   T26] audit: type=1326 audit(2000000487.050:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  814.082961][T14555] overlayfs: conflicting lowerdir path
[  814.112059][   T26] audit: type=1326 audit(2000000487.050:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  814.331950][   T26] audit: type=1326 audit(2000000487.080:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  814.365110][   T26] audit: type=1326 audit(2000000487.080:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2233f9df02 code=0x7ffc0000
[  814.474945][   T26] audit: type=1326 audit(2000000487.080:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2233f5e9ce code=0x7ffc0000
[  814.590064][   T26] audit: type=1326 audit(2000000487.080:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2233f9dfc7 code=0x7ffc0000
[  814.772562][   T26] audit: type=1326 audit(2000000487.080:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2233f5e9ce code=0x7ffc0000
[  814.828363][   T26] audit: type=1326 audit(2000000487.080:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2233f5e9ce code=0x7ffc0000
[  815.621690][   T26] audit: type=1326 audit(2000000487.080:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  816.587645][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2612'.
[  816.884550][   T26] audit: type=1326 audit(2000000487.080:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2233f9e199 code=0x7ffc0000
[  817.965225][    C0] net_ratelimit: 38 callbacks suppressed
[  818.136993][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2619'.
[  823.084919][    C1] net_ratelimit: 27 callbacks suppressed
[  823.200672][T14654] netlink: 'syz.9.2634': attribute type 4 has an invalid length.
[  826.046675][ T4291] Bluetooth: hci5: hcon ffff88803ab8c000 sent 1 < count 1025
[  826.100365][T14679] bond0 speed is unknown, defaulting to 1000
[  828.125024][    C0] net_ratelimit: 30 callbacks suppressed
[  828.989486][T14714] tipc: Started in network mode
[  829.007433][T14714] tipc: Node identity ac1414aa, cluster identity 4711
[  829.017357][T14714] tipc: New replicast peer: 172.20.20.187
[  829.023302][T14714] tipc: Enabled bearer <udp:syz0>, priority 10
[  830.421920][ T4327] tipc: Node number set to 2886997162
[  831.818850][T14738] jffs2: notice: (14738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  833.306054][    C1] net_ratelimit: 38 callbacks suppressed
[  837.147526][T14773] netlink: 'syz.6.2667': attribute type 1 has an invalid length.
[  838.618067][ T5269] net_ratelimit: 24 callbacks suppressed
[  838.649662][T14773] bond3: (slave bridge3): making interface the new active one
[  838.687598][T14773] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  838.919933][T14791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  839.019019][T14791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  839.028938][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  839.038257][T14791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  839.049085][T14791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  839.057102][T14791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  839.984276][T14787] bond0 speed is unknown, defaulting to 1000
[  841.148586][T14791] Bluetooth: hci4: command 0x0409 tx timeout
[  842.556585][T14815] xt_CONNSECMARK: invalid mode: 66
[  843.487993][T14822] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2663'.
[  843.608492][T14787] chnl_net:caif_netlink_parms(): no params data found
[  843.745914][ T5280] net_ratelimit: 34 callbacks suppressed
[  843.966431][ T4291] Bluetooth: hci4: command 0x041b tx timeout
[  844.843939][T14839] netlink: 'syz.9.2680': attribute type 1 has an invalid length.
[  845.015927][T14841] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  845.064032][T14841] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  845.125063][T14841] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  845.138782][ T4327] libceph: connect (1)[c::]:6789 error -101
[  845.145334][ T4327] libceph: mon0 (1)[c::]:6789 connect error
[  845.160773][T14841] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  845.175283][T14841] bond1: (slave geneve2): making interface the new active one
[  845.183548][T14848] ceph: No mds server is up or the cluster is laggy
[  845.231175][T14841] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  845.352929][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2680'.
[  845.403617][T14839] 8021q: adding VLAN 0 to HW filter on device bond1
[  845.439290][T14835] bond0 speed is unknown, defaulting to 1000
[  846.046413][T14791] Bluetooth: hci4: command 0x040f tx timeout
[  846.705506][T14787] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.712670][T14787] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.766768][T14787] device bridge_slave_0 entered promiscuous mode
[  846.856174][T14787] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.863383][T14787] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.892441][T14787] device bridge_slave_1 entered promiscuous mode
[  848.125943][T14791] Bluetooth: hci4: command 0x0419 tx timeout
[  848.263090][T14787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  848.329171][T14787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  849.005018][    C0] net_ratelimit: 44 callbacks suppressed
[  849.020039][T14879] jffs2: notice: (14879) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  849.606659][T14787] team0: Port device team_slave_0 added
[  849.687093][T14787] team0: Port device team_slave_1 added
[  849.906669][T14787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  849.915867][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  851.499968][T14787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  851.513094][T14787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  851.520178][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  851.581482][T14787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  851.896225][T14787] device hsr_slave_0 entered promiscuous mode
[  851.903856][T14787] device hsr_slave_1 entered promiscuous mode
[  851.911233][T14787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  851.932806][T14787] Cannot create hsr debugfs directory
[  852.589480][T14912] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  854.341048][    C0] net_ratelimit: 30 callbacks suppressed
[  858.749370][T14957] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  858.757896][T14957] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  858.788206][T14957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  858.795681][T14957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  858.807355][T14957] 8021q: adding VLAN 0 to HW filter on device team0
[  859.401281][T14968] syz.9.2710 sent an empty control message without MSG_MORE.
[  859.484966][    C0] net_ratelimit: 30 callbacks suppressed
[  859.694050][T14957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  859.881241][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  859.881263][   T26] audit: type=1326 audit(2000000533.030:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  859.964218][T14972] overlayfs: conflicting lowerdir path
[  860.239485][   T26] audit: type=1326 audit(2000000533.030:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  860.901311][   T26] audit: type=1326 audit(2000000533.030:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f899f99df02 code=0x7ffc0000
[  860.969031][ T8373] bond0 speed is unknown, defaulting to 1000
[  860.976294][T14970] netlink: 'syz.9.2712': attribute type 1 has an invalid length.
[  861.031399][   T26] audit: type=1326 audit(2000000533.070:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f899f95e9ce code=0x7ffc0000
[  861.140469][   T26] audit: type=1326 audit(2000000533.070:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f899f99dfc7 code=0x7ffc0000
[  861.237569][T14979] bond2: (slave bridge1): making interface the new active one
[  861.258239][T14979] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  861.270342][   T26] audit: type=1326 audit(2000000533.080:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f899f95e9ce code=0x7ffc0000
[  861.315267][   T26] audit: type=1326 audit(2000000533.080:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f899f95e9ce code=0x7ffc0000
[  861.353635][   T26] audit: type=1326 audit(2000000533.090:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  861.421573][   T26] audit: type=1326 audit(2000000533.100:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  861.490378][T14984] netlink: 'syz.6.2714': attribute type 1 has an invalid length.
[  861.546021][   T26] audit: type=1326 audit(2000000533.100:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.6.2711" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899f99e199 code=0x7ffc0000
[  861.593809][T14986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  861.603097][T14986] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  861.612395][T14986] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  861.621316][T14986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  861.632588][T14986] bond4: (slave geneve2): making interface the new active one
[  861.642321][T14986] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  861.670384][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2714'.
[  861.711293][T14987] 8021q: adding VLAN 0 to HW filter on device bond4
[  863.299575][ T5263] bond3: (slave gretap1): Releasing backup interface
[  864.614908][    C1] net_ratelimit: 34 callbacks suppressed
[  864.856544][T15034] overlayfs: failed to clone upperpath
[  870.605147][    C0] net_ratelimit: 22 callbacks suppressed
[  870.644598][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.650983][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  871.632753][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  871.772681][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  872.026457][ T5263] bridge0: port 3(vxlan0) entered disabled state
[  872.065958][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.086798][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.671332][ T5263] bond3 (unregistering): (slave bond4): Releasing backup interface
[  872.684555][ T5263] bond4 (unregistering): Released all slaves
[  872.734782][ T5263] bond3 (unregistering): Released all slaves
[  873.126765][ T5263] bond2 (unregistering): Released all slaves
[  873.268472][T15094] overlayfs: failed to clone upperpath
[  873.653897][ T5263] bond1 (unregistering): (slave geneve2): Releasing active interface
[  875.233317][ T5263] bond1 (unregistering): Released all slaves
[  875.816954][ T2925] net_ratelimit: 49 callbacks suppressed
[  876.342906][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2742'.
[  876.436734][T15123] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  877.585275][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  877.585292][   T26] audit: type=1326 audit(2000000550.740:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a91197f17 code=0x7ffc0000
[  877.692581][   T26] audit: type=1326 audit(2000000550.740:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a9113f519 code=0x7ffc0000
[  877.744922][   T26] audit: type=1326 audit(2000000550.740:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9119e199 code=0x7ffc0000
[  877.894977][   T26] audit: type=1326 audit(2000000550.740:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1a9119e199 code=0x7ffc0000
[  878.656382][   T26] audit: type=1326 audit(2000000551.800:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a91197f17 code=0x7ffc0000
[  878.694496][   T26] audit: type=1326 audit(2000000551.840:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a9113f519 code=0x7ffc0000
[  878.730188][   T26] audit: type=1326 audit(2000000551.880:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a91197f17 code=0x7ffc0000
[  878.764596][   T26] audit: type=1326 audit(2000000551.880:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a9113f519 code=0x7ffc0000
[  878.863999][   T26] audit: type=1326 audit(2000000551.880:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9119e199 code=0x7ffc0000
[  878.899005][   T26] audit: type=1326 audit(2000000551.880:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.9.2747" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9119e199 code=0x7ffc0000
[  878.986613][T15142] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2749'.
[  879.809874][ T5263] team0 (unregistering): Port device team_slave_1 removed
[  880.817470][ T5263] team0 (unregistering): Port device team_slave_0 removed
[  880.896699][    C0] net_ratelimit: 37 callbacks suppressed
[  881.047218][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  881.062483][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  881.071250][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  881.092322][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  881.100731][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  881.108589][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  881.144657][ T5263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  881.993006][ T5263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  882.069051][T15165] jffs2: notice: (15165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  882.251563][T15171] futex_wake_op: syz.9.2757 tries to shift op by 144; fix this program
[  883.265195][T14791] Bluetooth: hci2: command 0x0409 tx timeout
[  884.268610][T15190] sctp: [Deprecated]: syz.9.2762 (pid 15190) Use of struct sctp_assoc_value in delayed_ack socket option.
[  884.268610][T15190] Use struct sctp_sack_info instead
[  884.515782][T15192] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  885.404920][ T4291] Bluetooth: hci2: command 0x041b tx timeout
[  885.925686][    C0] net_ratelimit: 35 callbacks suppressed
[  886.014490][ T5263] bond0 (unregistering): Released all slaves
[  886.587680][T15081] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  886.597194][T15081] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  886.606871][T15081] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  887.223351][T15154] bond0 speed is unknown, defaulting to 1000
[  888.051901][T14791] Bluetooth: hci2: command 0x040f tx timeout
[  889.964669][T15225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  889.973547][T14787] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  890.036234][T14787] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  890.069348][T14787] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  890.112567][T15227] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  890.125208][T14791] Bluetooth: hci2: command 0x0419 tx timeout
[  890.188231][T14787] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  890.489033][T15154] chnl_net:caif_netlink_parms(): no params data found
[  890.839178][T14787] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.005285][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  891.023412][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  891.134448][T14787] 8021q: adding VLAN 0 to HW filter on device team0
[  891.414886][    C1] net_ratelimit: 32 callbacks suppressed
[  891.748642][T15154] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.860948][T15154] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.063361][T15154] device bridge_slave_0 entered promiscuous mode
[  892.227187][T15154] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.305880][T15154] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.356638][T15154] device bridge_slave_1 entered promiscuous mode
[  892.436426][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  892.449483][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  892.472586][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.479815][ T4667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  892.562508][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  892.612428][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  892.676588][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.683815][ T4667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.748003][T15263] lo: Caught tx_queue_len zero misconfig
[  893.029158][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  893.039442][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  893.061502][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  893.142439][T15154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  893.270426][T15154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  893.433921][T15154] team0: Port device team_slave_0 added
[  893.458544][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  893.484198][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  893.511515][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  893.532116][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  893.586251][ T9206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  893.805118][T15287] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  893.821507][T15154] team0: Port device team_slave_1 added
[  894.739062][T15307] overlayfs: failed to clone upperpath
[  894.902655][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  895.022965][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  895.263663][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  895.467651][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  895.643050][T14787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  895.719944][T15154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  895.727553][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  895.753730][T15154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  895.778622][T15154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  895.815012][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.044865][T15154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  896.445249][    C0] net_ratelimit: 37 callbacks suppressed
[  897.412881][T15154] device hsr_slave_0 entered promiscuous mode
[  897.641832][T15154] device hsr_slave_1 entered promiscuous mode
[  897.931396][T15154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  898.161876][T15154] Cannot create hsr debugfs directory
[  899.646137][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  899.658437][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  899.677806][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  899.689908][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  899.698481][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  899.706436][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  899.808445][ T5263] tipc: Left network mode
[  901.738061][ T4291] Bluetooth: hci3: command 0x0409 tx timeout
[  901.805149][    C0] net_ratelimit: 29 callbacks suppressed
[  902.690580][T15362] bond0 speed is unknown, defaulting to 1000
[  903.805387][T14791] Bluetooth: hci3: command 0x041b tx timeout
[  906.243655][T14791] Bluetooth: hci3: command 0x040f tx timeout
[  907.325335][    C1] net_ratelimit: 31 callbacks suppressed
[  907.695128][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2808'.
[  907.957928][T15429] netlink: 'syz.9.2814': attribute type 1 has an invalid length.
[  908.285683][ T4291] Bluetooth: hci3: command 0x0419 tx timeout
[  910.718769][T15362] chnl_net:caif_netlink_parms(): no params data found
[  912.408058][    C0] net_ratelimit: 33 callbacks suppressed
[  913.286911][ T5263] ------------[ cut here ]------------
[  913.292966][ T5263] WARNING: CPU: 1 PID: 5263 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180
[  913.303963][ T5263] Modules linked in:
[  913.307965][ T5263] CPU: 1 PID: 5263 Comm: kworker/u4:31 Not tainted syzkaller #0
[  913.315853][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  913.326025][ T5263] Workqueue: netns cleanup_net
[  913.330852][ T5263] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[  913.337811][ T5263] Code: 7c 2d 00 00 74 08 48 89 df e8 2c 2c 18 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 36 81 00 e8 70 d1 c6 f7 <0f> 0b eb c5 48 c7 c1 24 0e 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[  913.337888][ T5263] RSP: 0018:ffffc9001cadf6e8 EFLAGS: 00010293
[  913.337913][ T5263] RAX: ffffffff89bb7510 RBX: ffff888027e315a8 RCX: ffff88802fd90000
[  913.372284][ T5263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  913.380364][ T5263] RBP: 0000000000000000 R08: ffffffff8e20d96f R09: 1ffffffff1c41b2d
[  913.388444][ T5263] R10: dffffc0000000000 R11: fffffbfff1c41b2e R12: ffff888027e32ab0
[  913.396544][ T5263] R13: 1ffff11004fc62b5 R14: ffff888027e32228 R15: dffffc0000000000
[  913.404538][ T5263] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  913.413563][ T5263] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  913.420217][ T5263] CR2: 0000200000878000 CR3: 0000000060d6e000 CR4: 00000000003506e0
[  913.428295][ T5263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  913.436334][ T5263] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  913.444322][ T5263] Call Trace:
[  913.447716][ T5263]  <TASK>
[  913.450682][ T5263]  ? trace_drv_return_void+0x240/0x240
[  913.456323][ T5263]  unregister_netdevice_many_notify+0x13c4/0x1990
[  913.462815][ T5263]  ? unregister_netdevice_many+0x20/0x20
[  913.462848][ T5263]  ? mutex_unlock+0x10/0x10
[  913.473470][ T5263]  ? unregister_netdevice_queue+0x17c/0x330
[  913.479471][ T5263]  ? list_netdevice+0x640/0x640
[  913.484364][ T5263]  ? ieee80211_txq_teardown_flows+0x15c/0x220
[  913.490586][ T5263]  ? cfg80211_shutdown_all_interfaces+0x173/0x1c0
[  913.497051][ T5263]  ieee80211_remove_interfaces+0x44b/0x700
[  913.502893][ T5263]  ? ieee80211_unregister_hw+0x51/0x290
[  913.508584][ T5263]  ? ieee80211_do_stop+0x2060/0x2060
[  913.513901][ T5263]  ? atomic_notifier_chain_unregister+0xf1/0x100
[  913.520286][ T5263]  ieee80211_unregister_hw+0x59/0x290
[  913.525728][ T5263]  mac80211_hwsim_del_radio+0x285/0x480
[  913.531405][ T5263]  ? rhashtable_remove_fast+0xc50/0xc50
[  913.537002][ T5263]  hwsim_exit_net+0x589/0x650
[  913.541768][ T5263]  ? hwsim_init_net+0x80/0x80
[  913.546491][ T5263]  ? __ip_vs_dev_cleanup_batch+0x234/0x250
[  913.552337][ T5263]  cleanup_net+0x703/0xba0
[  913.556821][ T5263]  ? ops_free_list+0x3b0/0x3b0
[  913.561595][ T5263]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  913.567538][ T5263]  ? _raw_spin_unlock+0x40/0x40
[  913.572402][ T5263]  ? _raw_spin_unlock_irq+0x1f/0x40
[  913.577673][ T5263]  ? process_one_work+0x7b4/0x1160
[  913.582823][ T5263]  process_one_work+0x8ab/0x1160
[  913.587873][ T5263]  ? worker_detach_from_pool+0x240/0x240
[  913.593643][ T5263]  ? _raw_spin_lock_irq+0xb7/0xf0
[  913.598752][ T5263]  ? _raw_spin_lock_irqsave+0x100/0x100
[  913.604327][ T5263]  ? wq_worker_running+0x97/0x190
[  913.609403][ T5263]  worker_thread+0xaf5/0x12a0
[  913.614176][ T5263]  kthread+0x29d/0x330
[  913.618284][ T5263]  ? worker_clr_flags+0x1a0/0x1a0
[  913.623322][ T5263]  ? kthread_blkcg+0xd0/0xd0
[  913.627950][ T5263]  ret_from_fork+0x1f/0x30
[  913.632421][ T5263]  </TASK>
[  913.635492][ T5263] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  913.642796][ T5263] CPU: 1 PID: 5263 Comm: kworker/u4:31 Not tainted syzkaller #0
[  913.650431][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  913.660494][ T5263] Workqueue: netns cleanup_net
[  913.665282][ T5263] Call Trace:
[  913.668565][ T5263]  <TASK>
[  913.671504][ T5263]  dump_stack_lvl+0x188/0x24e
[  913.676199][ T5263]  ? memcpy+0x3c/0x60
[  913.680242][ T5263]  ? show_regs_print_info+0x12/0x12
[  913.683373][    C0] virtqueue callback for ffff888144a61400 (ffffffff847670d0)
[  913.683544][    C0] virtqueue interrupt with no work for ffff888144a61200
[  913.683584][    C0] virtqueue interrupt with no work for ffff888144a61000
[  913.683747][ T4262] Added buffer head 0 to ffff888144a61400
[  913.712386][ T5263]  ? load_image+0x410/0x410
[  913.716911][ T5263]  panic+0x2d3/0x710
[  913.720819][ T5263]  ? bpf_jit_dump+0xd0/0xd0
[  913.725335][ T5263]  ? ret_from_fork+0x1f/0x30
[  913.729941][ T5263]  __warn+0x2f8/0x4f0
[  913.733940][ T5263]  ? ieee80211_link_release_channel+0x150/0x180
[  913.740224][ T5263]  ? ieee80211_link_release_channel+0x150/0x180
[  913.745597][    C0] bridge0: hello timer expired
[  913.747157][    C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001
[  913.758825][ T5263]  report_bug+0x2ba/0x4f0
[  913.763208][ T5263]  ? ieee80211_link_release_channel+0x150/0x180
[  913.769475][ T5263]  handle_bug+0x3a/0x70
[  913.773653][ T5263]  exc_invalid_op+0x16/0x40
[  913.778175][ T5263]  asm_exc_invalid_op+0x16/0x20
[  913.783041][ T5263] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[  913.789932][ T5263] Code: 7c 2d 00 00 74 08 48 89 df e8 2c 2c 18 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 36 81 00 e8 70 d1 c6 f7 <0f> 0b eb c5 48 c7 c1 24 0e 21 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[  913.809568][ T5263] RSP: 0018:ffffc9001cadf6e8 EFLAGS: 00010293
[  913.815668][ T5263] RAX: ffffffff89bb7510 RBX: ffff888027e315a8 RCX: ffff88802fd90000
[  913.823653][ T5263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  913.831634][ T5263] RBP: 0000000000000000 R08: ffffffff8e20d96f R09: 1ffffffff1c41b2d
[  913.839700][ T5263] R10: dffffc0000000000 R11: fffffbfff1c41b2e R12: ffff888027e32ab0
[  913.847684][ T5263] R13: 1ffff11004fc62b5 R14: ffff888027e32228 R15: dffffc0000000000
[  913.855672][ T5263]  ? ieee80211_link_release_channel+0x150/0x180
[  913.861939][ T5263]  ? ieee80211_link_release_channel+0x150/0x180
[  913.868194][ T5263]  ? trace_drv_return_void+0x240/0x240
[  913.873671][ T5263]  unregister_netdevice_many_notify+0x13c4/0x1990
[  913.880108][ T5263]  ? unregister_netdevice_many+0x20/0x20
[  913.885752][ T5263]  ? mutex_unlock+0x10/0x10
[  913.890266][ T5263]  ? unregister_netdevice_queue+0x17c/0x330
[  913.896176][ T5263]  ? list_netdevice+0x640/0x640
[  913.901043][ T5263]  ? ieee80211_txq_teardown_flows+0x15c/0x220
[  913.907125][ T5263]  ? cfg80211_shutdown_all_interfaces+0x173/0x1c0
[  913.913552][ T5263]  ieee80211_remove_interfaces+0x44b/0x700
[  913.919397][ T5263]  ? ieee80211_unregister_hw+0x51/0x290
[  913.924962][ T5263]  ? ieee80211_do_stop+0x2060/0x2060
[  913.930260][ T5263]  ? atomic_notifier_chain_unregister+0xf1/0x100
[  913.936603][ T5263]  ieee80211_unregister_hw+0x59/0x290
[  913.941996][ T5263]  mac80211_hwsim_del_radio+0x285/0x480
[  913.947556][ T5263]  ? rhashtable_remove_fast+0xc50/0xc50
[  913.953137][ T5263]  hwsim_exit_net+0x589/0x650
[  913.957847][ T5263]  ? hwsim_init_net+0x80/0x80
[  913.962540][ T5263]  ? __ip_vs_dev_cleanup_batch+0x234/0x250
[  913.968359][ T5263]  cleanup_net+0x703/0xba0
[  913.972804][ T5263]  ? ops_free_list+0x3b0/0x3b0
[  913.977589][ T5263]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  913.983499][ T5263]  ? _raw_spin_unlock+0x40/0x40
[  913.988370][ T5263]  ? _raw_spin_unlock_irq+0x1f/0x40
[  913.993592][ T5263]  ? process_one_work+0x7b4/0x1160
[  913.998747][ T5263]  process_one_work+0x8ab/0x1160
[  914.003754][ T5263]  ? worker_detach_from_pool+0x240/0x240
[  914.009440][ T5263]  ? _raw_spin_lock_irq+0xb7/0xf0
[  914.014514][ T5263]  ? _raw_spin_lock_irqsave+0x100/0x100
[  914.020090][ T5263]  ? wq_worker_running+0x97/0x190
[  914.025144][ T5263]  worker_thread+0xaf5/0x12a0
[  914.029870][ T5263]  kthread+0x29d/0x330
[  914.033970][ T5263]  ? worker_clr_flags+0x1a0/0x1a0
[  914.039011][ T5263]  ? kthread_blkcg+0xd0/0xd0
[  914.043618][ T5263]  ret_from_fork+0x1f/0x30
[  914.048063][ T5263]  </TASK>
[  914.051719][ T5263] Kernel Offset: disabled
[  914.056230][ T5263] Rebooting in 86400 seconds..