last executing test programs:

15m5.329467101s ago: executing program 0 (id=1):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0)
read$msr(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mlock(&(0x7f00009a1000/0x10000)=nil, 0x10000)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)

15m4.656185151s ago: executing program 0 (id=9):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

14m49.195745862s ago: executing program 32 (id=9):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

13m3.69858037s ago: executing program 4 (id=295):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000003c0)={0x2, 0x0, 0x79, &(0x7f0000000000)=""/121})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
write(r4, &(0x7f0000000500)="0802110000010802", 0x8)

13m1.004606662s ago: executing program 4 (id=303):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x22}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setns(0xc9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r2, 0x8b1a, &(0x7f0000000040))

12m53.180414922s ago: executing program 4 (id=319):
socket(0x10, 0x80002, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
epoll_create1(0x80000)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0)

12m51.570255237s ago: executing program 4 (id=327):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000019})
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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")
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0)

12m47.052397608s ago: executing program 4 (id=340):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0)

12m44.193189014s ago: executing program 4 (id=344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
geteuid()
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r2 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)=<r3=>0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
read$FUSE(r4, &(0x7f0000003d00)={0x2020}, 0x2020)

12m42.753464574s ago: executing program 33 (id=344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
geteuid()
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r2 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)=<r3=>0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
read$FUSE(r4, &(0x7f0000003d00)={0x2020}, 0x2020)

11m44.690246251s ago: executing program 6 (id=499):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r2, 0x0, 0x500}, 0x0, &(0x7f0000000b80), 0x0)

11m44.314607629s ago: executing program 6 (id=502):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
socket(0x10, 0x3, 0x0)
syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

11m42.890178325s ago: executing program 6 (id=506):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
socket$nl_audit(0x10, 0x3, 0x9)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8082}, {0xffffffffffffffff, 0x1}], 0x2, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x32})
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})

11m41.050730069s ago: executing program 6 (id=507):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
unlink(&(0x7f0000000180)='./file1\x00')

11m38.704146527s ago: executing program 6 (id=512):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)

11m37.748828537s ago: executing program 6 (id=516):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)

11m37.125261647s ago: executing program 34 (id=516):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)

4m57.627147964s ago: executing program 2 (id=1376):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

4m53.468428651s ago: executing program 2 (id=1385):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
syz_open_procfs$namespace(0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
unshare(0x28000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
gettimeofday(0x0, 0x0)
r2 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4a3, 0x3ff, 0x401, 0xa, 0xffffffffffffc474, 0x8, 0x6, 0x0, 0x4, 0x1})
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0)
io_setup(0x81, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='p', 0x300}])
ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
msgget(0x2, 0x624)
flock(0xffffffffffffffff, 0x37b8297d3fbaacb3)

4m53.318311672s ago: executing program 7 (id=1388):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x15)
ioctl(r4, 0x404c4701, &(0x7f00000001c0))
ioctl$TIOCSTI(r4, 0x5412, 0x0)
ioctl$TIOCSTI(r4, 0x5412, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000242)=0x3f)

4m51.02552082s ago: executing program 7 (id=1392):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0xa1ffffff, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003}, 0x38)

4m50.26065601s ago: executing program 2 (id=1395):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000880)={'fscrypt:', @auto=[0x63, 0x36, 0x64, 0x65, 0x33, 0x66, 0x36, 0x38, 0x6b, 0x62, 0x37, 0x31, 0x8, 0x34, 0x62, 0x61]}, &(0x7f00000008c0)={0x0, "83be91e3956f7eeab185c5532a737cbf86a019abc3c6c5b882e77c6b66c6d809ae0100010000000000e0d067c73f9e8f2c1af82447d244584968c7ffb982e9b4", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x61, 0x30, 0x37, 0x6d, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x61, 0x30, 0x35]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabb0600000000000000445566778899aabbccddeeff", 0x36}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x37, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x8, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x67, 0x30, 0x39, 0x33, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112200080000778899aabbccddeeff00aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)

4m49.936380327s ago: executing program 7 (id=1397):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1ff)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r3 = getpid()
r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, 0x7ffffff6, 0x0, 0x0, 0x6, 0x22, 0x3, 0x68, 0x18})
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r5 = timerfd_create(0x0, 0x0)
read(r5, &(0x7f0000002180)=""/262, 0x106)
timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket(0x26, 0x5, 0x4)

4m49.934902518s ago: executing program 2 (id=1398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
get_robust_list(0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4}, 0x38)

4m49.630484531s ago: executing program 7 (id=1400):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000380)=@IORING_OP_MSG_RING={0x28, 0x14, 0x0, r4, 0x0, 0x0, 0x8, 0x2, 0x1})
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340))

4m48.179842523s ago: executing program 2 (id=1402):
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(r0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x6e1d, &(0x7f0000000100)={0x0, 0xf3c0, 0x200, 0x0, 0x127}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040))
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020)

4m48.177865833s ago: executing program 7 (id=1403):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f0000003180)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1, 0x100, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
r5 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x42)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12012, r5, 0x42000)
open_tree(r5, 0x0, 0x1000)
signalfd(r4, 0x0, 0x0)

4m46.70359896s ago: executing program 2 (id=1405):
kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0xe9, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x1, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcdf8, 0x800, 0x0, 0x3be, 0x0, r0}}], 0x4, 0x0, &(0x7f000001a480))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x47}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="30a01e252903"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x5, 0x0, {0x5e, 0xa, 0x0, 0xc, 0x0, 0x0, 0x1}, 0x400, 0x3ff, 0x2}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x54, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8f547a722d2aa656507a74cfa6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4080}, 0x4040000)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20)

4m44.331074795s ago: executing program 7 (id=1406):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x3501, 0x4, 0x0, 0x0, 0xfffffff7}]}]}, 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350)

4m29.785926145s ago: executing program 35 (id=1405):
kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0)
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0xe9, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x1, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcdf8, 0x800, 0x0, 0x3be, 0x0, r0}}], 0x4, 0x0, &(0x7f000001a480))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x47}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="30a01e252903"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x5, 0x0, {0x5e, 0xa, 0x0, 0xc, 0x0, 0x0, 0x1}, 0x400, 0x3ff, 0x2}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x54, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8f547a722d2aa656507a74cfa6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4080}, 0x4040000)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20)

4m28.767600057s ago: executing program 36 (id=1406):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x3501, 0x4, 0x0, 0x0, 0xfffffff7}]}]}, 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350)

3m22.353700323s ago: executing program 3 (id=1542):
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)

3m22.054068046s ago: executing program 3 (id=1544):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000200), 0x4)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write$vhost_msg_v2(r5, &(0x7f0000000dc0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x48)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)

3m20.25732282s ago: executing program 3 (id=1546):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rseq(0x0, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioprio_set$uid(0x3, 0xee00, 0x0)
setresuid(0xee01, 0x0, 0x0)

3m19.016517798s ago: executing program 3 (id=1549):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x31, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x39, 0x66, 0x61, 0x39, 0x64, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1)
add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x33, 0x2d, 0x38, 0x30, 0x36, 0x30, 0x37, 0x31, 0x30, 0x34, 0x61, 0x30, 0x0, 0x65, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbcc00eeffdcdc6fb24610fdb48899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r1)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x61, 0x36, 0x32, 0x65, 0x65, 0x36, 0x66, 0x30, 0x64, 0x66, 0x39, 0x32, 0x38, 0x32, 0x57]}, &(0x7f0000000100)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
keyctl$unlink(0x9, r0, r1)

3m16.603161331s ago: executing program 3 (id=1554):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
keyctl$setperm(0x5, 0x0, 0x280104)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)

3m13.724896331s ago: executing program 3 (id=1557):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x9}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

2m58.246007876s ago: executing program 37 (id=1557):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x9}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1m58.31820504s ago: executing program 5 (id=1664):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba)

1m50.597874019s ago: executing program 5 (id=1669):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4)
openat$audio(0xffffff9c, 0x0, 0x48100, 0x0)
r2 = socket$kcm(0x21, 0x2, 0xa)
modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0xc010)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x20040841}, 0x8000)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b010000"], 0x38}, 0x0)

1m49.522031813s ago: executing program 5 (id=1672):
socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x28008004)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1}, 0xe)
r2 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
fchdir(r2)
setns(0xc9, 0x0)
r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

1m45.861503875s ago: executing program 5 (id=1678):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000180))

1m44.25651141s ago: executing program 5 (id=1679):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000000030001c0000000a0004007770616e33000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000)

1m41.624273988s ago: executing program 5 (id=1683):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, 0x0})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r6, 0x3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7)

1m26.493595961s ago: executing program 38 (id=1683):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, 0x0})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r6, 0x3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7)

15.722861775s ago: executing program 8 (id=1807):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f00006df000/0x2000)=nil, 0x2000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0x4a8e)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4004050)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nobarrier}, {@errors_remount}, {@noinit_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}, {@dax_inode}], [{@obj_user}, {@fsname={'fsname', 0x3d, '\xad\x85vW\xec\xea\xbe\xfe\x89e\x02\xb2\x02\x8b\x8bf_\xb3\x91p\xf4\x05P\xe2\x87\x9c\xb5\x172=\x82\xdc\xfdh\xe5\x9dp\x85\xae\xd6W\x03J\xdc\xc6\xf78\b\xfa?$$J,\xf5\x8b\x03\xedc\x16W\xacO\xa9\xf6\xd8\xf8\x9e3\xa3\xb5\xc7\xd7\xc3\xfe\x92\x99> z\xba\xf7\xb3=\x17\x9b\x035\x8c\xb6\x8f0\x95M\xc8'}}, {@fowner_eq}, {@dont_appraise}]}, 0x1, 0x78e, &(0x7f0000000800)="$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")
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)

13.266514337s ago: executing program 8 (id=1812):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d7, &(0x7f00000008c0)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000000000073013b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), 0x0}, 0x20)

12.035165142s ago: executing program 8 (id=1815):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38)
syz_emit_vhci(0x0, 0x14)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

10.954210348s ago: executing program 9 (id=1818):
syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa4400, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)

10.340842756s ago: executing program 1 (id=1819):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bind(0xffffffffffffffff, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x2}, 0x80)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x8, 0x5}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x2)

8.700199008s ago: executing program 8 (id=1820):
socket$unix(0x1, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
accept(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$unix(0x1, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10000000003, 0x3, 0x8000000000000000, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0)

8.055455832s ago: executing program 9 (id=1821):
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
socket$igmp6(0xa, 0x3, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
sendfile(r3, r3, 0x0, 0x1000000201005)

7.493787109s ago: executing program 1 (id=1822):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

6.746919865s ago: executing program 9 (id=1823):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x400000000000)
r2 = socket$pppoe(0x18, 0x1, 0x0)
getpeername(r2, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0x10, 0x2, 0x0)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, &(0x7f0000000040), 0x10)
ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0)

6.643909996s ago: executing program 8 (id=1824):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
ioprio_set$pid(0x2, r0, 0x6000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f00000f9000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2000000000000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4e, 0x1, 0x8, 0x200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)

5.554971473s ago: executing program 9 (id=1825):
socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2})
mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x58, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.42596763s ago: executing program 8 (id=1826):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

5.42471839s ago: executing program 1 (id=1827):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x400000000000)
r2 = socket$pppoe(0x18, 0x1, 0x0)
getpeername(r2, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, &(0x7f0000000040), 0x10)
ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0)

4.323848899s ago: executing program 1 (id=1828):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
time(0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x10, 0x3, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, 0xffffffffffffffff, 0xcd2e8000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f00000027c0), 0x4924924924924c6, 0x4)
recvmsg(r4, 0x0, 0x0)

4.138283318s ago: executing program 9 (id=1829):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r5, 0x2000009)
sendfile(r0, r5, 0x0, 0x7ffff004)

1.513813515s ago: executing program 9 (id=1830):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2b, 0x1804, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0x1ec, 0x10, 0x633, 0x70bd2a, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0xfffd, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x4}, {@in=@multicast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd, 0x3}, {}, {0x0, 0x4, 0x3}, 0x70bd25, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xb4, 0x1, {{'md5\x00'}, 0x360, "03ff00004137b192fb8e5e7f447874748563bab2c89a19dd1016fe153742ae1eadb71f875a55462594512efa7aa6403aff00afa206c194ec05960e8c34b772a4c07334ff92c58543b783cb4b56919693a638b9f5f5f18a2a8b6a939ae273c1fdd6e1e79d7ed157870f83c5d2"}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x24000084}, 0x0)
listen(r0, 0x5)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0xa, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0)
mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff)
write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r6, r6, 0x0, 0x9)

974.506977ms ago: executing program 1 (id=1831):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r6, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=1832):
write(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
preadv(r3, 0x0, 0x0, 0xf73, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48058)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014"], 0x60}}, 0x200040c0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

kernel console output (not intermixed with test programs):

ng attributes in process `syz.2.387'.
[  250.776820][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'.
[  250.856774][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  250.866133][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.873773][ T6182] device vxcan1 left promiscuous mode
[  250.879402][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.889862][ T6182] device bridge_slave_0 left promiscuous mode
[  250.997376][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  251.018966][ T6182] device hsr1 left promiscuous mode
[  251.803575][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  252.190356][ T6196] capability: warning: `syz.2.391' uses deprecated v2 capabilities in a way that may be insecure
[  253.006170][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  253.667856][ T6220] ip_tables: iptables: counters copy to user failed while replacing table
[  253.677389][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'.
[  254.457160][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  254.601925][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  254.713324][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  254.798629][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  254.932903][ T6190] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  255.201479][ T6240] netlink: 'syz.2.403': attribute type 1 has an invalid length.
[  255.410678][ T6242] bond3: (slave veth1): Enslaving as an active interface with a down link
[  255.571943][ T6243] bond3: (slave veth3): Enslaving as an active interface with a down link
[  255.580894][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'.
[  255.590046][ T6243] Zero length message leads to an empty skb
[  255.616523][ T6252] trusted_key: encrypted_key: insufficient parameters specified
[  255.643297][ T6240] 8021q: adding VLAN 0 to HW filter on device bond3
[  255.685755][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  255.719136][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  255.747713][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  255.754137][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  255.803797][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  255.843863][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  255.890859][ T6253] device erspan0 left promiscuous mode
[  255.919205][ T6253] bridge1: port 1(erspan0) entered disabled state
[  255.985042][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  256.023916][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  256.070518][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  256.107697][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  256.159636][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  256.214938][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.487059][ T6253] device bridge_slave_0 left promiscuous mode
[  256.565013][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.611859][ T6253] device bridge_slave_1 left promiscuous mode
[  257.533922][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.605986][ T6253] bond0: (slave bond_slave_0): Releasing backup interface
[  257.866545][ T6253] bond0: (slave bond_slave_1): Releasing backup interface
[  258.721300][ T6253] team0: Port device team_slave_0 removed
[  259.416405][ T6253] team0: Port device team_slave_1 removed
[  259.444145][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.462374][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.481767][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.496491][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.673573][ T6253] bond1: (slave geneve2): Releasing active interface
[  262.028763][ T6317] 8021q: adding VLAN 0 to HW filter on device bond1
[  262.231177][ T6317] bond1: (slave geneve2): Enslaving as a backup interface with an up link
[  262.263265][ T4476] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  262.275860][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  262.423130][ T6317] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  262.439767][ T4476] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  262.924991][ T6342] file system registered
[  263.148176][ T5966] ffs_data_put(): freeing
[  263.795811][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'.
[  264.717544][ T6351] PKCS8: Unsupported PKCS#8 version
[  264.896983][ T6359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.424'.
[  265.180662][ T6366] netlink: 76 bytes leftover after parsing attributes in process `syz.3.424'.
[  265.582130][ T6366] netlink: 52 bytes leftover after parsing attributes in process `syz.3.424'.
[  266.924881][ T6377] capability: warning: `syz.3.438' uses 32-bit capabilities (legacy support in use)
[  270.627501][ T6421] loop6: detected capacity change from 0 to 256
[  270.656935][ T6421] exfat: Bad value for 'fmask'
[  271.872113][ T6443] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  276.952907][ T6509] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  277.277616][   T27] kauditd_printk_skb: 78 callbacks suppressed
[  277.277632][   T27] audit: type=1326 audit(1790869013.262:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.5.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa8099e159 code=0x0
[  278.438502][ T6530] bond1: option mode: unable to set because the bond device is up
[  279.574837][ T6530] bond1: (slave ip6gretap1): making interface the new active one
[  279.862202][ T6530] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  282.728270][ T6552] ceph: No mds server is up or the cluster is laggy
[  284.051876][ T6594] device geneve3 entered promiscuous mode
[  285.946110][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  285.958218][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  285.969576][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  285.981523][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  285.995139][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[  292.849649][ T6713] loop6: detected capacity change from 0 to 2048
[  292.969139][ T6713] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  293.074141][ T6713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  294.901832][ T5966] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  294.991274][ T5966] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[  295.152845][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  295.162703][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  295.171784][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  295.182472][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  295.192702][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  295.330593][ T6739] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  296.067471][ T4409] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.267009][ T4409] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.419503][ T4409] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.569072][ T4409] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.833197][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  296.850610][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  297.261518][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.269096][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  297.288788][ T6764] bond0: (slave bond_slave_0): Releasing backup interface
[  297.296404][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.305449][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.314419][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.338583][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  297.346981][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  297.381102][ T6764] bond0: (slave bond_slave_1): Releasing backup interface
[  297.614599][ T6764] team0: Port device team_slave_0 removed
[  297.655461][ T6764] team0: Port device team_slave_1 removed
[  297.678624][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.700865][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.761129][ T6764] bond1: (slave geneve2): Removing an active aggregator
[  297.768719][ T6764] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  297.784263][ T4333] bond1: Warning: Found an uninitialized port
[  297.808005][ T6764] bond1: (slave geneve2): Releasing backup interface
[  297.823847][ T6764] bond1: (slave geneve2): the permanent HWaddr of slave - 2e:95:76:97:15:6d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  297.883442][ T6764] bond1: (slave ip6gretap1): Removing an active aggregator
[  297.902590][ T6764] bond1: (slave ip6gretap1): Releasing backup interface
[  297.945752][ T6766] team0: Mode changed to "activebackup"
[  298.127454][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'.
[  299.440511][   T48] Bluetooth: hci0: command 0x0409 tx timeout
[  299.759142][ T6773] chnl_net:caif_netlink_parms(): no params data found
[  300.523650][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.536272][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.576026][ T6773] device bridge_slave_0 entered promiscuous mode
[  300.584756][ T6820] futex_wake_op: syz.1.530 tries to shift op by 144; fix this program
[  300.703888][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.724058][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.749735][ T6773] device bridge_slave_1 entered promiscuous mode
[  300.766825][ T6829] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  301.293292][ T6773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.333358][ T6773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.557991][ T6773] team0: Port device team_slave_0 added
[  301.613519][ T6773] team0: Port device team_slave_1 added
[  301.733295][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.770394][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.855866][ T6773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.880476][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.888470][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.006183][ T6773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.204031][ T6773] device hsr_slave_0 entered promiscuous mode
[  302.210240][   T48] Bluetooth: hci0: command 0x041b tx timeout
[  302.288540][ T6773] device hsr_slave_1 entered promiscuous mode
[  302.315945][ T6773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  302.347493][ T6773] Cannot create hsr debugfs directory
[  303.738503][ T6773] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  304.018034][ T6773] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  304.031037][ T6773] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  304.045735][ T6773] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  304.352379][   T48] Bluetooth: hci0: command 0x040f tx timeout
[  306.325538][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'.
[  306.390435][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[  306.720237][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.806858][ T6773] 8021q: adding VLAN 0 to HW filter on device team0
[  306.899026][ T6896] __vm_enough_memory: pid: 6896, comm: syz.3.543, no enough memory for the allocation
[  308.271741][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  308.279950][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  308.327862][ T6914] fuse: Bad value for 'fd'
[  308.329125][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  308.363244][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  308.383813][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.391070][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.430039][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  308.449356][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  308.459753][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.466982][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.585198][ T4409] device hsr_slave_0 left promiscuous mode
[  308.598839][ T4409] device hsr_slave_1 left promiscuous mode
[  308.616536][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.654754][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.668094][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.689307][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.757701][ T4409] device bridge_slave_1 left promiscuous mode
[  308.782224][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.828045][ T4409] device bridge_slave_0 left promiscuous mode
[  308.850138][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.010205][ T4409] device veth1_macvtap left promiscuous mode
[  309.046141][ T4409] device veth0_macvtap left promiscuous mode
[  309.081262][ T4409] device veth1_vlan left promiscuous mode
[  309.106274][ T4409] device veth0_vlan left promiscuous mode
[  310.723950][ T4409] team0 (unregistering): Port device team_slave_1 removed
[  310.788627][ T4409] team0 (unregistering): Port device team_slave_0 removed
[  310.869844][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.957699][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.013451][   T27] audit: type=1800 audit(1790869047.002:96): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.553" name="bus" dev="ramfs" ino=42436 res=0 errno=0
[  311.647867][ T4409] bond0 (unregistering): Released all slaves
[  311.792485][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  311.806686][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  311.879686][ T6773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  311.896227][ T6773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.927023][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.552'.
[  312.026795][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  312.039810][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  312.066517][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  312.084078][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  312.108737][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  312.137240][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  312.165982][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  312.197070][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  312.224596][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  312.276320][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  312.331335][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  312.547161][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.841267][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  312.848889][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  313.787607][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  313.799469][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  313.884226][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  313.897136][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  313.921651][ T6773] device veth0_vlan entered promiscuous mode
[  313.960991][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  313.996715][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  314.033648][ T6773] device veth1_vlan entered promiscuous mode
[  314.136923][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  314.166844][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  314.181674][ T6773] device veth0_macvtap entered promiscuous mode
[  314.210005][ T6773] device veth1_macvtap entered promiscuous mode
[  314.268316][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.299593][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.390011][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.441007][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  314.455476][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  314.585739][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  314.753084][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  314.885339][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.008543][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.025407][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.038482][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.065055][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.087419][ T6773] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.109948][ T6773] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.144647][ T6773] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.184900][ T6773] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.488389][ T5317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.523283][ T5317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.709945][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  315.732896][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.758196][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.801239][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  317.240673][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.247045][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  320.788435][ T7076] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  320.797463][ T7076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  321.192594][ T7084] futex_wake_op: syz.7.576 tries to shift op by 144; fix this program
[  321.227626][ T7084] syz.7.576 sent an empty control message without MSG_MORE.
[  326.420925][ T7124] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  327.318807][ T7143] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4536] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[  334.581214][ T7214] futex_wake_op: syz.5.599 tries to shift op by 144; fix this program
[  340.531109][ T7282] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[  342.288983][ T7282] bond2: (slave bridge0): making interface the new active one
[  342.345674][ T7282] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  343.175734][ T7316] No such timeout policy "syz1"
[  348.006126][ T7364] device syzkaller0 entered promiscuous mode
[  348.121266][ T7369] netlink: 76 bytes leftover after parsing attributes in process `syz.7.631'.
[  348.712473][ T7373] nftables ruleset with unbound set
[  353.622034][ T7425] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  361.674086][ T7501] device syzkaller0 entered promiscuous mode
[  365.216071][   T48] Bluetooth: Wrong link type (-22)
[  366.125280][ T7556] netlink: 48 bytes leftover after parsing attributes in process `syz.7.664'.
[  368.071215][   T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  368.087845][   T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0
[  368.095324][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  368.105478][   T48] Workqueue: hci0 hci_rx_work
[  368.110424][   T48] Call Trace:
[  368.113766][   T48]  <TASK>
[  368.116737][   T48]  dump_stack_lvl+0x188/0x24e
[  368.121485][   T48]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  368.127255][   T48]  ? show_regs_print_info+0x12/0x12
[  368.132509][   T48]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  368.138205][   T48]  sysfs_create_dir_ns+0x26a/0x290
[  368.143440][   T48]  ? __lock_acquire+0x7c40/0x7c40
[  368.148730][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  368.153459][   T48]  ? do_raw_spin_unlock+0x11d/0x230
[  368.158705][   T48]  kobject_add_internal+0x617/0xca0
[  368.163994][   T48]  kobject_add+0x160/0x230
[  368.168456][   T48]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  368.174130][   T48]  ? kobject_init+0x1c0/0x1c0
[  368.178853][   T48]  ? get_device_parent+0x34/0x3e0
[  368.184044][   T48]  ? get_device_parent+0x121/0x3e0
[  368.189208][   T48]  device_add+0x470/0x1050
[  368.193687][   T48]  hci_conn_add_sysfs+0xd1/0x1e0
[  368.198759][   T48]  le_conn_complete_evt+0xf93/0x15c0
[  368.204109][   T48]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  368.210415][   T48]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  368.216164][   T48]  ? mutex_unlock+0x10/0x10
[  368.220718][   T48]  ? skb_pull_data+0xec/0x1f0
[  368.225514][   T48]  hci_le_conn_complete_evt+0x183/0x440
[  368.231139][   T48]  ? hci_remote_host_features_evt+0x230/0x230
[  368.237267][   T48]  hci_event_packet+0x7b3/0x1290
[  368.242276][   T48]  ? bis_list+0x280/0x280
[  368.246659][   T48]  ? lockdep_hardirqs_on+0x94/0x140
[  368.251925][   T48]  ? hci_rx_work+0x15e/0xd40
[  368.256593][   T48]  hci_rx_work+0x3eb/0xd40
[  368.261070][   T48]  ? _raw_spin_unlock+0x40/0x40
[  368.265992][   T48]  ? process_one_work+0x7b4/0x1160
[  368.271240][   T48]  process_one_work+0x8ab/0x1160
[  368.276252][   T48]  ? worker_detach_from_pool+0x240/0x240
[  368.281938][   T48]  ? _raw_spin_lock_irq+0xb7/0xf0
[  368.287037][   T48]  ? _raw_spin_lock_irqsave+0x100/0x100
[  368.292657][   T48]  ? wq_worker_running+0x97/0x190
[  368.297739][   T48]  worker_thread+0xaf5/0x12a0
[  368.302536][   T48]  kthread+0x29d/0x330
[  368.306733][   T48]  ? worker_clr_flags+0x1a0/0x1a0
[  368.311809][   T48]  ? kthread_blkcg+0xd0/0xd0
[  368.316443][   T48]  ret_from_fork+0x1f/0x30
[  368.321014][   T48]  </TASK>
[  368.346769][   T48] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  368.361148][   T48] Bluetooth: hci0: failed to register connection device
[  372.928712][ T7621] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  374.459971][ T7655] netlink: 'syz.1.699': attribute type 4 has an invalid length.
[  378.002184][ T7682] device dummy0 entered promiscuous mode
[  378.021648][ T7682] device vlan2 entered promiscuous mode
[  380.224352][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  380.230775][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  380.263656][ T7709] IPVS: Error connecting to the multicast addr
[  380.314493][ T7711] loop7: detected capacity change from 0 to 128
[  383.551539][ T7744] loop7: detected capacity change from 0 to 128
[  383.606304][ T7744] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  385.824160][ T7771] netlink: 'syz.3.692': attribute type 1 has an invalid length.
[  385.895484][ T7771] 8021q: adding VLAN 0 to HW filter on device bond2
[  386.384634][ T7775] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  386.665695][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  387.095582][ T7771] device bridge2 entered promiscuous mode
[  387.183302][ T7771] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  388.050537][ T7806] IPVS: set_ctl: invalid protocol: 137 172.30.0.3:20001
[  391.259374][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  392.242689][ T7869] bond0: option resend_igmp: invalid value (18446744072707910257)
[  392.251211][ T7869] bond0: option resend_igmp: allowed values 0 - 255
[  392.624716][ T7900] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  393.708830][ T7909] loop7: detected capacity change from 0 to 512
[  393.745175][ T7909] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.730: missing EA_INODE flag
[  393.778689][ T7909] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.730: error while reading EA inode 2 err=-117
[  393.815318][ T7909] EXT4-fs (loop7): 1 orphan inode deleted
[  393.851177][ T7909] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  394.551267][ T7921] netlink: 2 bytes leftover after parsing attributes in process `syz.1.734'.
[  394.798365][ T6773] EXT4-fs (loop7): unmounting filesystem.
[  398.185197][   T27] audit: type=1800 audit(1790869134.172:97): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.737" name="bus" dev="ramfs" ino=45295 res=0 errno=0
[  401.315925][ T8001] IPVS: set_ctl: invalid protocol: 137 172.30.0.8:20001
[  405.158994][   T27] audit: type=1804 audit(1790869141.142:98): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.754" name="bus" dev="ramfs" ino=44812 res=1 errno=0
[  405.266201][   T27] audit: type=1804 audit(1790869141.202:99): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.754" name="bus" dev="ramfs" ino=44812 res=1 errno=0
[  417.732994][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'.
[  422.376530][ T8155] jffs2: notice: (8155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  422.944041][ T8155] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  425.070761][ T8148] overlayfs: failed to clone lowerpath
[  427.714101][ T8177] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  427.723911][ T8177] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  427.735136][ T8177] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  427.905886][   T27] audit: type=1800 audit(1790869163.702:100): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.777" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  427.965730][ T8177] syz.1.777 (8177) used greatest stack depth: 17936 bytes left
[  428.351747][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.791'.
[  428.562311][ T8197] overlayfs: failed to clone upperpath
[  428.599477][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055905000: rx timeout, send abort
[  428.995141][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  429.575776][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.792'.
[  429.933757][ T8210] tipc: Started in network mode
[  429.938886][ T8210] tipc: Node identity ac1414aa, cluster identity 4711
[  429.952805][ T8210] tipc: New replicast peer: 172.20.20.187
[  429.965528][ T8210] tipc: Enabled bearer <udp:syz0>, priority 10
[  430.963702][   T22] tipc: Node number set to 2886997162
[  437.531245][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'.
[  440.382145][ T8283] jffs2: notice: (8283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  440.726361][ T8283] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  447.921024][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  447.927348][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  449.932758][ T8338] loop7: detected capacity change from 0 to 512
[  450.075405][   T48] Bluetooth: hci0: unknown advertising packet type: 0x30
[  450.075484][   T48] Bluetooth: hci0: unknown advertising packet type: 0x74
[  450.293288][ T8338] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  450.332062][   T48] Bluetooth: hci0: unknown advertising packet type: 0x69
[  450.332141][   T48] Bluetooth: hci0: unknown advertising packet type: 0x66
[  450.339708][   T48] Bluetooth: hci0: unknown advertising packet type: 0x65
[  450.347017][   T48] Bluetooth: hci0: unknown advertising packet type: 0x5f
[  450.354521][   T48] Bluetooth: hci0: unknown advertising packet type: 0x30
[  451.950853][ T8354] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  452.571256][ T8349] 9pnet_fd: Insufficient options for proto=fd
[  454.062230][ T8371] sctp: [Deprecated]: syz.5.836 (pid 8371) Use of struct sctp_assoc_value in delayed_ack socket option.
[  454.062230][ T8371] Use struct sctp_sack_info instead
[  454.786453][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'.
[  454.971653][ T8377] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  456.207116][ T8398] futex_wake_op: syz.7.844 tries to shift op by 144; fix this program
[  459.536983][ T8433] overlayfs: failed to clone lowerpath
[  460.352959][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.608772][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'.
[  463.276891][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.834'.
[  464.621095][ T8487] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  468.847763][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.872'.
[  475.999959][ T8586] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  478.914416][ T8616] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  481.729146][ T8653] 8021q: adding VLAN 0 to HW filter on device bond1
[  483.115156][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  487.040525][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.924'.
[  488.812214][   T48] Bluetooth: hci3: unexpected cc 0x042d length: 63 > 7
[  489.875983][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.5.931'.
[  490.331007][ T8741] sctp: [Deprecated]: syz.7.930 (pid 8741) Use of struct sctp_assoc_value in delayed_ack socket option.
[  490.331007][ T8741] Use struct sctp_sack_info instead
[  491.845969][ T8763] netlink: 11594 bytes leftover after parsing attributes in process `syz.7.939'.
[  493.124717][   T48] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  493.133924][   T48] Bluetooth: hci3: Injecting HCI hardware error event
[  493.144646][ T4290] Bluetooth: hci3: hardware error 0x00
[  495.261399][ T4290] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  495.455376][ T8806] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  497.511132][ T4290] Bluetooth: hci3: Opcode 0x206c failed: -110
[  499.580461][ T4290] Bluetooth: hci3: Opcode 0x2046 failed: -110
[  503.590634][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  509.338353][ T8920] autofs4:pid:8920:autofs_fill_super: called with bogus options
[  510.455150][   T27] audit: type=1326 audit(1790869246.372:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.506742][   T27] audit: type=1326 audit(1790869246.372:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.535884][   T27] audit: type=1326 audit(1790869246.372:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.565639][   T27] audit: type=1326 audit(1790869246.372:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.597602][   T27] audit: type=1326 audit(1790869246.372:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.709708][   T27] audit: type=1326 audit(1790869246.372:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.780582][   T27] audit: type=1326 audit(1790869246.372:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.874385][   T27] audit: type=1326 audit(1790869246.372:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  510.988729][ T8945] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  511.743818][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  511.750262][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  512.253516][ T8974] 9pnet_virtio: no channels available for device 127.0.0.1
[  514.098779][ T8993] device bond2 entered promiscuous mode
[  515.774416][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.991'.
[  515.860453][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.7.991'.
[  515.952754][ T9004] device geneve2 entered promiscuous mode
[  516.072098][ T9004] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready
[  521.110611][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.998'.
[  523.373743][ T9061] device bond1 entered promiscuous mode
[  531.145132][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'.
[  534.964777][ T9168] 9pnet_virtio: no channels available for device 127.0.0.1
[  537.061527][ T9191] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  539.790809][ T9205] device bond3 entered promiscuous mode
[  544.861895][ T9238] tipc: Started in network mode
[  544.866870][ T9238] tipc: Node identity ac1414aa, cluster identity 4711
[  544.930699][ T9238] tipc: New replicast peer: 172.20.20.187
[  545.004835][ T9238] tipc: Enabled bearer <udp:syz0>, priority 10
[  546.117669][   T14] tipc: Node number set to 2886997162
[  547.335501][ T9263] 9pnet_virtio: no channels available for device 127.0.0.1
[  563.327958][ T9384] netlink: 'syz.7.1075': attribute type 10 has an invalid length.
[  563.535873][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.543538][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.068150][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.075474][ T9384] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.083010][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.090227][ T9384] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.384762][ T9384] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  564.406129][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1075'.
[  564.610409][ T9387] device bridge_slave_1 left promiscuous mode
[  564.616760][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.630473][ T9387] device bridge_slave_0 left promiscuous mode
[  564.637616][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.708287][ T9387] bond0: (slave bridge0): Releasing backup interface
[  570.032915][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1088'.
[  570.223175][ T9435] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  571.489024][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'.
[  571.503449][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1085'.
[  574.228646][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  574.235724][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  575.910752][ T9493] ipt_REJECT: TCP_RESET invalid for non-tcp
[  577.015081][   T27] audit: type=1326 audit(1790869313.002:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.3.1105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f822879e159 code=0x0
[  577.993047][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'.
[  578.306184][ T9518] fuse: Unknown parameter 'åôK—ðX;3„®¤uè"Í#v”~ó'
[  579.262321][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  579.713228][ T9542] overlayfs: failed to clone lowerpath
[  580.523950][ T9549] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  586.734647][   T27] audit: type=1326 audit(1790869322.242:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  586.807092][   T27] audit: type=1326 audit(1790869322.252:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  586.886952][   T27] audit: type=1326 audit(1790869322.252:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  586.958519][   T27] audit: type=1326 audit(1790869322.492:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  587.036448][   T27] audit: type=1326 audit(1790869322.502:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  587.112278][   T27] audit: type=1326 audit(1790869322.502:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ad435e98e code=0x7ffc0000
[  587.226800][   T27] audit: type=1326 audit(1790869322.512:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ad435e98e code=0x7ffc0000
[  587.325986][   T27] audit: type=1326 audit(1790869322.512:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ad435e98e code=0x7ffc0000
[  588.575223][   T27] audit: type=1326 audit(1790869322.502:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad439e159 code=0x7ffc0000
[  588.802209][   T27] audit: type=1326 audit(1790869322.512:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.1.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9ad435e98e code=0x7ffc0000
[  591.393825][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1119'.
[  591.689108][ T9641] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  602.707245][ T9726] ffs_data_put(): freeing
[  606.286528][ T9762] __vm_enough_memory: pid: 9762, comm: syz.5.1170, no enough memory for the allocation
[  607.857577][ T9775] overlayfs: failed to clone lowerpath
[  614.068976][ T9862] overlayfs: failed to clone lowerpath
[  614.795312][ T9863] futex_wake_op: syz.1.1182 tries to shift op by 144; fix this program
[  615.434929][ T9867] Option 'dnserror' to dns_resolver key: bad/missing value
[  616.348021][ T9870] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1188'.
[  619.161519][ T9891] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  619.972179][ T9909] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  621.173004][ T9920] netlink: 'syz.7.1199': attribute type 2 has an invalid length.
[  622.103972][ T9930] sctp: [Deprecated]: syz.5.1200 (pid 9930) Use of int in max_burst socket option.
[  622.103972][ T9930] Use struct sctp_assoc_value instead
[  622.379899][ T3934] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.394563][ T3934] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.403310][ T3934] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.416349][ T3934] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  622.428823][ T3934] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  622.444793][ T3934] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  622.453533][ T3934] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  622.468365][ T3934] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  622.476920][ T3934] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  622.490779][ T3934] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  622.499235][ T3934] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  622.512370][ T3934] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  624.149532][ T9957] sctp: [Deprecated]: syz.5.1203 (pid 9957) Use of struct sctp_assoc_value in delayed_ack socket option.
[  624.149532][ T9957] Use struct sctp_sack_info instead
[  625.640669][ T9979] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  627.689408][T10006] fuse: Bad value for 'fd'
[  631.930684][T10067] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  631.983083][T10063] xt_cgroup: invalid path, errno=-2
[  634.665690][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  634.672302][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  635.810324][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'.
[  641.830591][T10154] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  644.435038][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'.
[  648.955698][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1275'.
[  649.159499][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  649.159516][   T27] audit: type=1804 audit(1790869385.142:133): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1263" name="bus" dev="ramfs" ino=50557 res=1 errno=0
[  649.295152][   T27] audit: type=1804 audit(1790869385.172:134): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1263" name="bus" dev="ramfs" ino=50557 res=1 errno=0
[  654.673400][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'.
[  659.310325][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  660.960391][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1291'.
[  669.236884][T10392] trusted_key: encrypted_key: insufficient parameters specified
[  669.262679][T10391] sctp: [Deprecated]: syz.3.1307 (pid 10391) Use of struct sctp_assoc_value in delayed_ack socket option.
[  669.262679][T10391] Use struct sctp_sack_info instead
[  674.521540][T10444] sctp: [Deprecated]: syz.1.1324 (pid 10444) Use of struct sctp_assoc_value in delayed_ack socket option.
[  674.521540][T10444] Use struct sctp_sack_info instead
[  675.603173][T10449] Cannot find add_set index 2 as target
[  677.183588][T10470] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1335'.
[  679.213330][T10488] ip_tables: iptables: counters copy to user failed while replacing table
[  690.107953][T10575] SET target dimension over the limit!
[  690.257416][T10579] overlayfs: failed to clone lowerpath
[  690.269635][T10579] overlayfs: failed to clone lowerpath
[  696.063400][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  696.070417][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  699.498869][T10648] batman_adv: batadv0: Adding interface: netdevsim0
[  699.505647][T10648] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  699.531357][T10648] batman_adv: batadv0: Interface activated: netdevsim0
[  711.521483][   T27] audit: type=1326 audit(2000000016.050:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.5.1411" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa8099e159 code=0x0
[  721.061732][T10773] wlan0 speed is unknown, defaulting to 1000
[  721.068528][T10773] wlan0 speed is unknown, defaulting to 1000
[  721.099862][T10773] wlan0 speed is unknown, defaulting to 1000
[  721.144638][T10773] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  721.209625][T10773] wlan0 speed is unknown, defaulting to 1000
[  721.236554][T10773] wlan0 speed is unknown, defaulting to 1000
[  721.257358][T10773] wlan0 speed is unknown, defaulting to 1000
[  721.279022][T10773] wlan0 speed is unknown, defaulting to 1000
[  721.303181][T10773] wlan0 speed is unknown, defaulting to 1000
[  724.603610][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  724.614531][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  724.623816][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  724.631892][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  724.650384][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  724.659211][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  724.907480][T10801] wlan0 speed is unknown, defaulting to 1000
[  726.447610][T10801] chnl_net:caif_netlink_parms(): no params data found
[  726.700390][   T48] Bluetooth: hci4: command 0x0409 tx timeout
[  727.345414][T10801] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.387330][ T4277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  727.390613][T10801] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.407239][ T4277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  727.417177][ T4277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  727.429721][ T4277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  727.438861][ T4277] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  727.446952][ T4277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  728.415793][T10801] device bridge_slave_0 entered promiscuous mode
[  728.455518][T10801] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.469573][T10801] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.487316][T10801] device bridge_slave_1 entered promiscuous mode
[  728.507240][T10833] wlan0 speed is unknown, defaulting to 1000
[  728.679248][T10801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  728.820283][ T4277] Bluetooth: hci4: command 0x041b tx timeout
[  728.838396][T10801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  729.373690][T10801] team0: Port device team_slave_0 added
[  729.501881][   T48] Bluetooth: hci6: command 0x0409 tx timeout
[  729.618680][T10801] team0: Port device team_slave_1 added
[  729.850309][T10801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.857337][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.020152][T10801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  730.047566][T10801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  730.061277][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.114891][T10801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  730.133316][T10833] chnl_net:caif_netlink_parms(): no params data found
[  730.229767][T10801] device hsr_slave_0 entered promiscuous mode
[  730.250416][T10801] device hsr_slave_1 entered promiscuous mode
[  730.276745][T10801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  730.284635][T10801] Cannot create hsr debugfs directory
[  730.522769][T10833] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.530032][T10833] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.552357][T10833] device bridge_slave_0 entered promiscuous mode
[  730.639101][T10833] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.650089][T10833] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.659206][T10833] device bridge_slave_1 entered promiscuous mode
[  730.733052][T10833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  730.756264][T10801] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  730.791593][T10833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.811962][T10801] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  730.846429][T10801] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  730.860296][   T48] Bluetooth: hci4: command 0x040f tx timeout
[  730.889999][T10801] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  730.949539][T10833] team0: Port device team_slave_0 added
[  730.995528][T10833] team0: Port device team_slave_1 added
[  731.119210][T10833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  731.156740][T10833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.213935][T10833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  731.255141][T10833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.268652][T10833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.304744][T10833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  731.416772][T10801] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.438679][T10833] device hsr_slave_0 entered promiscuous mode
[  731.449688][T10833] device hsr_slave_1 entered promiscuous mode
[  731.466659][T10833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  731.477920][T10833] Cannot create hsr debugfs directory
[  731.507873][T10801] 8021q: adding VLAN 0 to HW filter on device team0
[  731.531590][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  731.549167][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  731.598072][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  731.614792][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  731.628227][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.635466][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  731.644765][   T48] Bluetooth: hci6: command 0x041b tx timeout
[  731.706682][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  731.720026][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  731.738708][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  731.764104][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.771353][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  731.786953][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  731.828102][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  731.846553][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  731.866670][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  731.886305][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  731.907421][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  731.918503][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  731.936126][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  731.964718][T10801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  731.987143][T10801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  732.013084][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  732.029430][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  732.049320][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  733.051742][ T4277] Bluetooth: hci4: command 0x0419 tx timeout
[  733.367419][T10833] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  733.408555][T10833] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  733.660709][   T48] Bluetooth: hci6: command 0x040f tx timeout
[  733.670494][T10833] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  733.703920][T10833] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  734.030758][T10801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  734.037977][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  734.052056][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  734.233164][T10833] 8021q: adding VLAN 0 to HW filter on device bond0
[  734.255932][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  734.272359][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  734.290918][T10833] 8021q: adding VLAN 0 to HW filter on device team0
[  734.351629][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  734.387761][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  734.421431][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.428615][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  734.960583][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  734.986191][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  735.016881][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  735.076832][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.084060][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  735.140647][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  735.202847][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  735.231777][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  735.248573][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  735.276426][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  735.318875][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  735.343169][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  735.376839][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  735.407617][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  735.444946][T10833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  735.476934][T10833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  735.512650][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  735.522482][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  735.740373][   T48] Bluetooth: hci6: command 0x0419 tx timeout
[  736.149828][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  736.174768][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  736.271369][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  736.291525][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  736.333843][T10801] device veth0_vlan entered promiscuous mode
[  736.351602][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  736.366772][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  736.424474][T10801] device veth1_vlan entered promiscuous mode
[  736.525655][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  736.543106][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  736.565491][T10801] device veth0_macvtap entered promiscuous mode
[  736.592887][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  736.608476][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  736.631306][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  736.643166][T10833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.663865][T10801] device veth1_macvtap entered promiscuous mode
[  736.718673][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.760006][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.800521][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  736.836768][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  736.869162][T10801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.897734][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  736.916990][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  737.081287][ T5315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  737.111644][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.073180][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.095058][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  738.120161][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.168328][T10801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  738.210577][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  738.231005][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  738.309479][T10801] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.348951][T10801] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.358404][T10801] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  738.404402][T10801] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.701671][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.709601][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.790714][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  738.898045][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.908544][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.967799][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  739.731701][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  739.743054][T10915] __vm_enough_memory: pid: 10915, comm: syz.3.1443, no enough memory for the allocation
[  739.792378][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  739.931175][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  739.950950][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  740.005133][T10833] device veth0_vlan entered promiscuous mode
[  740.019917][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  740.053179][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  740.104049][T10833] device veth1_vlan entered promiscuous mode
[  740.240534][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  740.261661][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  740.291232][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  740.326012][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  740.384730][T10833] device veth0_macvtap entered promiscuous mode
[  740.432490][T10833] device veth1_macvtap entered promiscuous mode
[  740.519882][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.567283][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.857501][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.895988][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.218683][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.251447][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.801822][T10833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  741.853826][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  741.871088][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  741.889641][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  741.929990][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  741.954777][T10924] wlan0 speed is unknown, defaulting to 1000
[  742.013986][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.046808][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.066814][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.085880][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.111834][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.138837][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.194689][T10833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  742.218666][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  742.266108][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  742.309548][T10833] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.364732][T10833] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  742.404459][T10833] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  742.440084][T10833] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  746.164831][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  746.190637][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  746.251413][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  746.381129][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  746.389076][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  746.427509][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  752.352652][T10981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  753.293439][T10994] futex_wake_op: syz.9.1474 tries to shift op by 144; fix this program
[  753.850611][T10999] loop9: detected capacity change from 0 to 1024
[  758.259252][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  758.275992][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  761.363750][T11028] loop9: detected capacity change from 0 to 128
[  761.936275][T11028] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  762.137386][T11028] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  763.052378][T10833] EXT4-fs (loop9): unmounting filesystem.
[  763.494705][T11050] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  764.981281][ T4324] libceph: connect (1)[c::]:6789 error -101
[  764.992706][ T4324] libceph: mon0 (1)[c::]:6789 connect error
[  765.022385][T11055] ceph: No mds server is up or the cluster is laggy
[  770.880286][T11101] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1501'.
[  774.193351][T11127] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1506'.
[  776.019015][T11136] tunl0: Caught tx_queue_len zero misconfig
[  780.244681][T11172] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  784.104066][T11188] ip6t_REJECT: ECHOREPLY is not supported
[  788.953692][T10723] Cannot find add_set index 0 as target
[  789.616049][T11237] ip6t_REJECT: ECHOREPLY is not supported
[  792.205878][ T4560] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.574256][ T4560] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.086354][T11264] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  793.179606][ T4560] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.262522][ T4560] batman_adv: batadv0: Interface deactivated: netdevsim0
[  793.326865][ T4560] batman_adv: batadv0: Removing interface: netdevsim0
[  793.363529][ T4560] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.616616][ T4560] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  796.591229][ T4560] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  796.661000][ T4560] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  796.901495][ T4560] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  797.074075][ T4560] tipc: Disabling bearer <udp:syz0>
[  797.083319][ T4560] tipc: Left network mode
[  798.849777][T11306] overlayfs: failed to clone lowerpath
[  809.196635][T11386] loop8: detected capacity change from 0 to 512
[  809.401171][T11386] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  809.409166][T11386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002]
[  809.485350][T11386] System zones: 0-1, 15-15, 18-18, 34-34
[  809.523761][T11386] EXT4-fs (loop8): orphan cleanup on readonly fs
[  809.750582][T11386] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0
[  810.500430][T11386] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  810.562148][T11386] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  810.577696][T11386] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.1562: bad orphan inode 16
[  810.659615][T11386] ext4_test_bit(bit=15, block=18) = 1
[  810.677123][T11386] is_bad_inode(inode)=0
[  810.681925][T11386] NEXT_ORPHAN(inode)=0
[  810.686072][T11386] max_ino=32
[  810.689475][T11386] i_nlink=2
[  810.693500][T11386] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  813.190801][T11406] wlan0 speed is unknown, defaulting to 1000
[  813.233680][T11416] netlink: 'syz.9.1578': attribute type 10 has an invalid length.
[  813.278964][T11416] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.286654][T11416] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.411301][T11416] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.420146][T11416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  813.427686][T11416] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.434887][T11416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  813.516283][T10801] EXT4-fs (loop8): unmounting filesystem.
[  813.543251][T11416] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  816.809021][ T4560] device hsr_slave_0 left promiscuous mode
[  818.060256][ T4560] device hsr_slave_1 left promiscuous mode
[  818.540345][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  818.547818][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  818.756847][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  818.865724][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  819.618400][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  819.624806][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  819.900652][ T4560] device veth1_macvtap left promiscuous mode
[  819.906760][ T4560] device veth0_macvtap left promiscuous mode
[  819.960583][ T4560] device veth1_vlan left promiscuous mode
[  819.966542][ T4560] device veth0_vlan left promiscuous mode
[  820.191473][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  820.202609][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  820.212235][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  820.220291][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  820.229894][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  820.237413][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  820.842848][ T4560] bond1 (unregistering): Released all slaves
[  822.386919][ T4277] Bluetooth: hci0: command 0x0409 tx timeout
[  822.753732][T11461] loop9: detected capacity change from 0 to 1024
[  823.010616][T11461] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 2: comm syz.9.1588: lblock 2 mapped to illegal pblock 2 (length 1)
[  823.138589][T11461] Quota error (device loop9): qtree_write_dquot: dquota write failed
[  823.195778][T11479] 9pnet_fd: Insufficient options for proto=fd
[  823.213954][T11461] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 48: comm syz.9.1588: lblock 0 mapped to illegal pblock 48 (length 1)
[  823.311357][T11461] Quota error (device loop9): v2_write_file_info: Can't write info structure
[  823.375319][T11461] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.1588: Failed to acquire dquot type 0
[  823.456047][T11461] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  823.490192][T11461] EXT4-fs error (device loop9): ext4_evict_inode:281: inode #11: comm syz.9.1588: mark_inode_dirty error
[  824.460642][ T4277] Bluetooth: hci0: command 0x041b tx timeout
[  824.488458][T11461] EXT4-fs warning (device loop9): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  824.499707][T11461] EXT4-fs (loop9): 1 orphan inode deleted
[  824.505781][T11461] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  824.564111][ T4396] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  824.623242][ T4396] Quota error (device loop9): remove_tree: Can't read quota data block 1
[  824.649819][ T4396] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0
[  825.072773][T11487] loop8: detected capacity change from 0 to 256
[  826.536293][T10833] EXT4-fs (loop9): unmounting filesystem.
[  826.542392][ T4277] Bluetooth: hci0: command 0x040f tx timeout
[  826.566145][T10833] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  826.586207][T10833] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  826.596525][T10833] EXT4-fs error (device loop9): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  827.407217][ T4560] team0 (unregistering): Port device team_slave_1 removed
[  827.500456][ T4560] team0 (unregistering): Port device team_slave_0 removed
[  827.575676][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.673194][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  828.147750][ T4560] bond0 (unregistering): Released all slaves
[  828.307725][T11487] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  828.311805][T11496] tipc: Started in network mode
[  828.319595][T11487] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  828.331989][T11487] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  828.349852][T11496] tipc: Node identity 4, cluster identity 4711
[  828.433988][T11496] tipc: Node number set to 4
[  828.547242][T11519] loop8: detected capacity change from 0 to 512
[  828.598181][T11519] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  828.611560][T11452] wlan0 speed is unknown, defaulting to 1000
[  828.621151][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[  828.662140][T11519] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1596: invalid indirect mapped block 256 (level 1)
[  828.785031][T11519] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1596: invalid indirect mapped block 2683928664 (level 1)
[  828.893709][T11519] EXT4-fs (loop8): 1 truncate cleaned up
[  828.929747][T11519] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  829.349002][T11530] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.1596: Invalid block bitmap block 3 in block_group 0
[  829.866681][T10801] EXT4-fs (loop8): unmounting filesystem.
[  831.727328][T11452] chnl_net:caif_netlink_parms(): no params data found
[  832.078663][T11452] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.104580][T11452] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.141574][T11452] device bridge_slave_0 entered promiscuous mode
[  832.181374][T11452] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.188761][T11452] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.429576][T11452] device bridge_slave_1 entered promiscuous mode
[  833.234354][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  833.302453][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  833.461016][T11452] team0: Port device team_slave_0 added
[  833.491341][T11452] team0: Port device team_slave_1 added
[  835.291856][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  835.298883][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  836.390282][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  836.618354][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  836.647263][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  836.775960][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  836.997551][T11452] device hsr_slave_0 entered promiscuous mode
[  837.050801][T11452] device hsr_slave_1 entered promiscuous mode
[  837.245276][T11452] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  837.258368][T11452] Cannot create hsr debugfs directory
[  839.060222][T11581] netlink: 'syz.1.1607': attribute type 10 has an invalid length.
[  839.096316][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'.
[  839.549982][T11452] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.857320][ T4560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.408219][T11452] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.532141][ T4560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.100785][T11609] xt_hashlimit: size too large, truncated to 1048576
[  842.107679][T11609] xt_hashlimit: max too large, truncated to 1048576
[  842.910255][T11452] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.106374][ T4560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.509763][T11452] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.766697][ T4560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.842328][ T4560] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  846.979896][ T4560] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.102853][ T4560] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.146489][T11452] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  847.204110][ T4560] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  847.229504][T11452] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  847.279951][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'.
[  847.328727][T11452] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  847.503671][ T4560] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.622652][T11452] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  848.817282][ T4560] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.466828][ T4560] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.139352][ T4560] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.065815][T11452] 8021q: adding VLAN 0 to HW filter on device bond0
[  851.188638][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  851.220752][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  851.477046][ T4560] netdevsim netdevsim2 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  851.760529][   T48] Bluetooth: hci6: command 0x0406 tx timeout
[  851.767291][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[  851.852755][ T4560] netdevsim netdevsim2 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  852.054391][T11676] netlink: 'syz.5.1617': attribute type 10 has an invalid length.
[  852.178946][T11676] device bridge0 entered promiscuous mode
[  852.226956][T11676] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  852.275932][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'.
[  852.299100][T11683] loop9: detected capacity change from 0 to 512
[  852.320699][T11679] device bridge_slave_1 left promiscuous mode
[  852.345533][T11679] bridge0: port 2(bridge_slave_1) entered disabled state
[  852.387645][T11683] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[  852.654982][T11679] bond0: (slave bridge0): Releasing backup interface
[  852.663219][T11679] device bridge0 left promiscuous mode
[  852.723388][T11452] 8021q: adding VLAN 0 to HW filter on device team0
[  852.781331][T11690] __vm_enough_memory: pid: 11690, comm: syz.9.1625, no enough memory for the allocation
[  853.241434][ T4560] netdevsim netdevsim2 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  853.361644][ T4560] netdevsim netdevsim2 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  853.448264][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  853.467809][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  853.491094][T11336] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.498302][T11336] bridge0: port 1(bridge_slave_0) entered forwarding state
[  853.520647][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  853.542300][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  853.570393][T11700] tcpci: probe of 0-0005 failed with error -5
[  853.578152][T11700] i2c i2c-0: new_device: Instantiated device tcpci at 0x05
[  853.596797][T11336] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.604026][T11336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  853.703891][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  853.850595][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  853.869608][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  854.014791][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  854.272582][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  854.432496][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  854.481185][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  854.529375][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  857.450879][ T4560] tipc: Disabling bearer <udp:syz0>
[  857.457283][ T4560] tipc: Left network mode
[  857.593932][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  857.973923][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  858.227216][T11336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  858.913411][T11729] xt_hashlimit: max too large, truncated to 1048576
[  859.005498][T11452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  859.490822][T11452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  860.047213][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  860.085358][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  862.358346][ T4560] bond1: (slave ip6gretap1): Releasing active interface
[  863.035823][T11766] loop9: detected capacity change from 0 to 512
[  863.179621][T11766] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  863.200608][T11766] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  866.131018][T10833] EXT4-fs (loop9): unmounting filesystem.
[  867.908416][T11786] xt_hashlimit: max too large, truncated to 1048576
[  869.610350][T11797] netlink: 'syz.9.1646': attribute type 10 has an invalid length.
[  870.299007][T11797] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.306422][T11797] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.529391][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  870.640477][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  871.019435][T11820] Cannot find del_set index 4 as target
[  871.228312][T11452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  871.395317][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  871.415568][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  872.495342][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  872.504957][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  872.514761][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  872.523280][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  872.768108][T11452] device veth0_vlan entered promiscuous mode
[  875.567262][T11858] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups)
[  876.391529][T11861] block nbd9: shutting down sockets
[  880.029916][T11176] wlan0 speed is unknown, defaulting to 1000
[  881.044692][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  881.056060][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  881.064728][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  881.072804][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  881.080396][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  881.087678][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  881.223686][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  881.230121][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  883.983801][ T4290] Bluetooth: hci2: command 0x0409 tx timeout
[  886.579341][ T4290] Bluetooth: hci2: command 0x041b tx timeout
[  886.905133][ T4560] device hsr_slave_0 left promiscuous mode
[  886.945444][ T4560] device hsr_slave_1 left promiscuous mode
[  886.990284][T11275] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  887.011591][ T4560] device hsr_slave_0 left promiscuous mode
[  887.053060][ T4560] device hsr_slave_1 left promiscuous mode
[  887.094643][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  887.130314][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  887.196116][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  887.204766][T11275] usb 1-1: Dual-Role OTG device on HNP port
[  887.221598][T11275] usb 1-1: New USB device found, idVendor=0012, idProduct=0000, bcdDevice= 6.01
[  887.232901][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  887.254166][T11275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.296617][    C1] configfs-gadget.g1 gadget.0: Using interface 0
[  887.336704][ T4560] device bridge_slave_1 left promiscuous mode
[  887.356552][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.364174][T11275] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0012 pid 0x0000
[  887.787503][ T4560] device veth1_macvtap left promiscuous mode
[  887.819542][ T4560] device veth0_macvtap left promiscuous mode
[  887.857985][ T4560] device veth1_vlan left promiscuous mode
[  887.877242][ T4560] device veth0_vlan left promiscuous mode
[  889.163056][ T4290] Bluetooth: hci2: command 0x040f tx timeout
[  889.303809][ T4560] device veth1_macvtap left promiscuous mode
[  889.312066][ T4560] device veth0_macvtap left promiscuous mode
[  889.318213][ T4560] device veth1_vlan left promiscuous mode
[  890.264256][ T4560] device veth0_vlan left promiscuous mode
[  891.190260][ T4290] Bluetooth: hci2: command 0x0419 tx timeout
[  894.382407][ T4560] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  896.307923][ T4560] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  896.361524][ T4560] bond2 (unregistering): Released all slaves
[  899.705357][T11992] loop9: detected capacity change from 0 to 256
[  899.798972][T11992] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  899.879761][ T4560] bond1 (unregistering): Released all slaves
[  903.529283][T12023] loop9: detected capacity change from 0 to 512
[  903.562356][T12023] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  903.624390][T12023] EXT4-fs (loop9): 1 truncate cleaned up
[  903.636839][T12023] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  904.419433][ T4560] bond0 (unregistering): Released all slaves
[  904.583748][T10833] EXT4-fs (loop9): unmounting filesystem.
[  904.709390][ T4560] bond3 (unregistering): (slave veth3): Releasing active interface
[  904.776036][ T4560] bond3 (unregistering): (slave veth1): Releasing active interface
[  907.412073][ T4560] bond3 (unregistering): Released all slaves
[  907.456103][ T4560] bond2 (unregistering): Released all slaves
[  907.511487][ T4560] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  907.782431][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  907.805577][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  907.816439][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  907.861521][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  907.881827][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  907.889196][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  908.028002][ T4560] bond1 (unregistering): Released all slaves
[  908.832022][ T4560] team0 (unregistering): Port device team_slave_1 removed
[  908.889309][ T4560] team0 (unregistering): Port device team_slave_0 removed
[  908.948930][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.010531][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  909.411303][ T4560] bond0 (unregistering): Released all slaves
[  909.512478][T12020] netlink: 'syz.8.1693': attribute type 10 has an invalid length.
[  910.200631][   T48] Bluetooth: hci0: command 0x0409 tx timeout
[  910.326554][   T27] audit: type=1800 audit(2000000214.850:136): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1705" name="ipv4_address" dev="configfs" ino=56637 res=0 errno=0
[  910.409395][   T27] audit: type=1800 audit(2000000214.900:137): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1705" name="ipv4_port" dev="configfs" ino=56638 res=0 errno=0
[  910.441024][T12020] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.448568][T12020] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.527656][T12020] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.534886][T12020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.542421][T12020] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.549573][T12020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  910.560158][   T27] audit: type=1800 audit(2000000214.900:138): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1705" name="num" dev="configfs" ino=56639 res=0 errno=0
[  910.622328][T12020] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  910.631263][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1693'.
[  910.640837][T12021] device bridge_slave_1 left promiscuous mode
[  910.647254][T12021] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.657305][   T27] audit: type=1800 audit(2000000214.900:139): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1705" name="local" dev="configfs" ino=56640 res=0 errno=0
[  910.754815][   T27] audit: type=1800 audit(2000000214.900:140): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1705" name="ipv4_address" dev="configfs" ino=56642 res=0 errno=0
[  911.082054][T12054] __vm_enough_memory: pid: 12054, comm: syz.1.1704, no enough memory for the allocation
[  911.150673][T12021] device bridge_slave_0 left promiscuous mode
[  911.157204][T12021] bridge0: port 1(bridge_slave_0) entered disabled state
[  912.012110][T12021] bond0: (slave bridge0): Releasing backup interface
[  912.388589][   T48] Bluetooth: hci0: command 0x041b tx timeout
[  913.886463][T12071] loop8: detected capacity change from 0 to 1024
[  914.080375][T11885] chnl_net:caif_netlink_parms(): no params data found
[  914.126045][T12071] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm syz.8.1708: lblock 2 mapped to illegal pblock 2 (length 1)
[  914.141049][T12071] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  914.149235][T12071] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 48: comm syz.8.1708: lblock 0 mapped to illegal pblock 48 (length 1)
[  914.164733][T12071] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  914.173645][T12071] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1708: Failed to acquire dquot type 0
[  914.187390][T12071] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  914.198986][T12071] EXT4-fs error (device loop8): ext4_evict_inode:281: inode #11: comm syz.8.1708: mark_inode_dirty error
[  914.213645][T12071] EXT4-fs warning (device loop8): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  914.225095][T12071] EXT4-fs (loop8): 1 orphan inode deleted
[  914.231098][T12071] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  914.297139][ T5322] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:26: lblock 1 mapped to illegal pblock 1 (length 1)
[  914.363946][ T5322] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  914.460371][   T48] Bluetooth: hci0: command 0x040f tx timeout
[  914.470536][ T5322] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:26: Failed to release dquot type 0
[  914.612682][T10801] EXT4-fs (loop8): unmounting filesystem.
[  914.618620][T10801] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  914.722435][T11885] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.731616][T11885] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.748349][T10801] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  914.840210][T11885] device bridge_slave_0 entered promiscuous mode
[  914.850352][T10801] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  914.925402][T12039] chnl_net:caif_netlink_parms(): no params data found
[  914.973309][T11885] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.016379][T11885] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.039153][T11885] device bridge_slave_1 entered promiscuous mode
[  915.149002][T11885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.171588][T11885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.409577][T11885] team0: Port device team_slave_0 added
[  916.411771][T11885] team0: Port device team_slave_1 added
[  916.544485][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[  916.832708][T11885] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.923632][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  917.197099][T11885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  917.251339][T12116] netlink: 'syz.9.1716': attribute type 10 has an invalid length.
[  917.269587][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1716'.
[  917.300335][T12117] device bridge_slave_1 left promiscuous mode
[  918.473144][T12117] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.490444][T12117] device bridge_slave_0 left promiscuous mode
[  918.770455][T12117] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.791291][T12123] block nbd8: shutting down sockets
[  919.095096][T12117] bond0: (slave bridge0): Releasing backup interface
[  919.146047][T12039] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.291808][T12039] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.306495][T12039] device bridge_slave_0 entered promiscuous mode
[  919.316740][T11885] batman_adv: batadv0: Adding interface: batadv_slave_1
[  919.339351][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  919.638551][T11885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  919.657052][T12039] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.664847][T12039] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.673548][T12039] device bridge_slave_1 entered promiscuous mode
[  919.744870][T11885] device hsr_slave_0 entered promiscuous mode
[  919.757888][T11885] device hsr_slave_1 entered promiscuous mode
[  919.783022][T12039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  919.825123][T12039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  919.842352][T12134] loop9: detected capacity change from 0 to 1024
[  919.877226][T12134] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  920.041508][T12134] EXT4-fs (loop9): barriers disabled
[  920.047016][T12134] JBD2: no valid journal superblock found
[  920.071268][T12134] EXT4-fs (loop9): error loading journal
[  920.086695][T12039] team0: Port device team_slave_0 added
[  920.133913][T12137] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1719'.
[  920.275554][T12039] team0: Port device team_slave_1 added
[  920.378762][T12039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  920.385854][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  920.521406][T12039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  920.534096][T12039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  920.541596][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  920.567602][T12039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  922.439703][T12159] using random self ethernet address
[  922.464998][T12159] using random host ethernet address
[  922.533075][T12039] device hsr_slave_0 entered promiscuous mode
[  922.558514][T12039] device hsr_slave_1 entered promiscuous mode
[  922.620994][T12039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  922.690417][T12039] Cannot create hsr debugfs directory
[  922.865396][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1726'.
[  928.242667][T12199] syzkaller0: renamed from gre1
[  928.276113][T12204] netlink: 'syz.1.1728': attribute type 10 has an invalid length.
[  928.287623][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'.
[  928.442218][   T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.342787][T12039] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.407551][T11885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  929.504230][T11885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  929.519638][T11885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  929.569572][   T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.807057][T12227] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups)
[  930.468813][T12039] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.508654][T11885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  930.563411][   T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.761539][T12039] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.152180][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1737'.
[  932.215312][   T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.490323][T12039] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.249868][T11885] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.310790][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  933.321269][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  933.848103][   T31] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  934.261701][   T31] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  934.287907][T11885] 8021q: adding VLAN 0 to HW filter on device team0
[  934.328169][   T31] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  934.398791][   T31] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  934.560314][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  934.578871][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  934.616327][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.623610][ T4560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  935.095618][   T31] tipc: Left network mode
[  935.113237][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  935.174869][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  935.231093][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  935.308601][ T4560] bridge0: port 2(bridge_slave_1) entered blocking state
[  935.315867][ T4560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  935.361575][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  935.433109][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  935.474165][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  935.599847][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  935.620548][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  935.663885][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  935.705732][T12281] netlink: 160 bytes leftover after parsing attributes in process `syz.9.1746'.
[  937.940185][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  937.948833][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'.
[  939.642236][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  939.665315][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  939.674258][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  939.683465][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  939.691883][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  939.699295][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  939.773282][T12039] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  941.790181][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  941.823660][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  941.830081][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  941.867171][T12039] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  943.520799][T12039] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  943.920300][ T4290] Bluetooth: hci3: command 0x041b tx timeout
[  944.002540][T12039] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  944.484239][   T31] device gretap0 left promiscuous mode
[  944.561036][T12356] kAFS: bad VL server IP address
[  945.247443][T12320] chnl_net:caif_netlink_parms(): no params data found
[  945.471479][T12039] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.992043][ T4290] Bluetooth: hci3: command 0x040f tx timeout
[  946.146879][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  946.171043][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  946.219952][T12039] 8021q: adding VLAN 0 to HW filter on device team0
[  946.245466][T12320] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.280205][T12320] bridge0: port 1(bridge_slave_0) entered disabled state
[  946.288753][T12320] device bridge_slave_0 entered promiscuous mode
[  946.295944][   T31] IPVS: stopping master sync thread 7900 ...
[  946.315460][T12320] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.322804][T12320] bridge0: port 2(bridge_slave_1) entered disabled state
[  946.333918][T12320] device bridge_slave_1 entered promiscuous mode
[  946.346621][T12366] netlink: 'syz.1.1763': attribute type 10 has an invalid length.
[  946.635597][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  946.665018][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'.
[  946.709503][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  946.774865][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  946.925879][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.933174][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  947.203988][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  947.270061][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  947.278204][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  947.360584][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  947.410833][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.418068][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  947.478922][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  948.145787][ T4290] Bluetooth: hci3: command 0x0419 tx timeout
[  948.607140][T12390] IPVS: length: 103 != 8
[  948.683132][T12389] loop9: detected capacity change from 0 to 128
[  948.789689][T12389] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities
[  950.462189][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  950.469238][T12373] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  950.774521][T12320] team0: Port device team_slave_0 added
[  951.000250][T12320] team0: Port device team_slave_1 added
[  951.062744][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0
[  951.069795][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.176685][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  951.197014][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1
[  951.210304][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.245508][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  951.307668][T12320] device hsr_slave_0 entered promiscuous mode
[  951.322313][T12320] device hsr_slave_1 entered promiscuous mode
[  951.329232][T12320] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  951.342849][T12320] Cannot create hsr debugfs directory
[  952.393619][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  952.429904][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  952.611269][   T31] device bond0 left promiscuous mode
[  952.620262][   T31] device bond_slave_0 left promiscuous mode
[  952.631014][   T31] device bond_slave_1 left promiscuous mode
[  952.929724][   T31] device team0 left promiscuous mode
[  953.021273][   T31] device team_slave_0 left promiscuous mode
[  953.046585][   T31] device team_slave_1 left promiscuous mode
[  953.082481][   T31] device hsr_slave_0 left promiscuous mode
[  953.097497][   T31] device hsr_slave_1 left promiscuous mode
[  953.148961][   T31] device hsr_slave_0 left promiscuous mode
[  953.165858][   T31] device hsr_slave_1 left promiscuous mode
[  953.178025][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  953.196482][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  953.218313][   T31] device bridge_slave_1 left promiscuous mode
[  953.226263][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.248193][   T31] device bridge_slave_0 left promiscuous mode
[  953.266742][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.496833][   T31] device veth1_macvtap left promiscuous mode
[  953.510348][   T31] device veth0_macvtap left promiscuous mode
[  953.520607][   T31] device veth1_vlan left promiscuous mode
[  953.526491][   T31] device veth0_vlan left promiscuous mode
[  953.558257][   T31] device veth0_vlan left promiscuous mode
[  954.192810][   T31] bond2 (unregistering): Released all slaves
[  955.076732][   T31] bond1 (unregistering): Released all slaves
[  955.712606][   T31] team0 (unregistering): Port device team_slave_1 removed
[  955.765629][   T31] team0 (unregistering): Port device team_slave_0 removed
[  955.819092][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  955.876089][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.434707][   T31] bond0 (unregistering): Released all slaves
[  956.952085][   T31] team0 (unregistering): Port device team_slave_1 removed
[  957.007006][   T31] team0 (unregistering): Port device team_slave_0 removed
[  957.066231][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  957.120083][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  957.476933][   T31] bond0 (unregistering): Released all slaves
[  957.607731][T12408] netlink: 'syz.9.1773': attribute type 10 has an invalid length.
[  957.615790][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1773'.
[  957.627658][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  957.669716][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  957.680933][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  957.722788][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  957.734719][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  957.753688][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  957.771544][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  957.821333][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  959.600708][T12439] IPVS: mh: UDP 127.0.0.1:20000 - no destination available
[  962.471115][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  962.478825][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  962.587719][T12462] loop8: detected capacity change from 0 to 1024
[  962.599310][T12039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  962.743953][T12462] EXT4-fs: Ignoring removed nomblk_io_submit option
[  962.965962][T12462] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102]
[  963.201990][T12462] System zones: 0-1, 3-12
[  963.225064][T12462] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  963.941766][T10801] EXT4-fs (loop8): unmounting filesystem.
[  965.880373][T12472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1785'.
[  966.171657][T12484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  966.179368][T12484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  966.229459][T12484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  966.237213][T12484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  969.327669][T12320] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  969.538398][T12320] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  970.693722][T12320] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  970.780674][T12320] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  974.387809][T12320] 8021q: adding VLAN 0 to HW filter on device bond0
[  974.489471][T12320] 8021q: adding VLAN 0 to HW filter on device team0
[  974.544711][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  974.557551][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  974.850194][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  974.886617][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  974.930688][T11738] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.937859][T11738] bridge0: port 1(bridge_slave_0) entered forwarding state
[  975.001832][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  975.012655][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  975.021591][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  975.029424][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  975.037686][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  975.046505][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  975.106237][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  975.145790][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  975.180692][T11738] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.187856][T11738] bridge0: port 2(bridge_slave_1) entered forwarding state
[  975.240586][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  975.376035][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  975.397263][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  975.429011][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  975.468052][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  975.590645][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  975.631238][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  975.692517][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  975.761864][T12525] netlink: 'syz.1.1801': attribute type 10 has an invalid length.
[  975.777144][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  975.814062][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  975.843466][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'.
[  975.930847][T12320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  975.964999][T12320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  975.987714][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  976.009410][   T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  976.082037][T12535] loop9: detected capacity change from 0 to 1024
[  976.089560][T12535] EXT4-fs: Ignoring removed nomblk_io_submit option
[  976.161071][T12535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102]
[  976.169312][T12535] System zones: 0-1, 3-12
[  976.204154][T12535] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  976.703684][T12517] chnl_net:caif_netlink_parms(): no params data found
[  976.715984][T12551] loop8: detected capacity change from 0 to 2048
[  976.796376][T12551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  977.072698][T10833] EXT4-fs (loop9): unmounting filesystem.
[  977.100720][   T48] Bluetooth: hci0: command 0x0409 tx timeout
[  977.644127][   T31] netdevsim netdevsim4 eth21: set [1, 0] type 2 family 0 port 6081 - 0
[  977.844105][   T31] netdevsim netdevsim4 eth22: set [1, 0] type 2 family 0 port 6081 - 0
[  978.142141][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  978.150538][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  978.479016][   T31] netdevsim netdevsim4 eth23: set [1, 0] type 2 family 0 port 6081 - 0
[  978.783449][T12572] loop8: detected capacity change from 0 to 128
[  978.801483][   T31] netdevsim netdevsim4 eth24: set [1, 0] type 2 family 0 port 6081 - 0
[  978.852365][T12517] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.859577][T12517] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.907144][T12517] device bridge_slave_0 entered promiscuous mode
[  978.947298][T12517] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.975476][T12517] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.991255][T12517] device bridge_slave_1 entered promiscuous mode
[  979.052158][T12320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  979.098632][T12517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  979.127554][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  979.200130][ T4277] Bluetooth: hci0: command 0x041b tx timeout
[  979.219117][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  979.342098][T12517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  979.523772][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  979.579230][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  979.618616][T12320] device veth0_vlan entered promiscuous mode
[  979.654792][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  979.682976][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  979.726924][T12320] device veth1_vlan entered promiscuous mode
[  979.769451][T12517] team0: Port device team_slave_0 added
[  980.131729][ T4415] kworker/u4:11: attempt to access beyond end of device
[  980.131729][ T4415] loop8: rw=1, sector=145, nr_sectors = 6 limit=128
[  980.338860][T12517] team0: Port device team_slave_1 added
[  980.357256][T12588] netlink: 'syz.9.1810': attribute type 10 has an invalid length.
[  980.374248][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1810'.
[  980.586295][T12320] device veth0_macvtap entered promiscuous mode
[  980.643139][T12517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  980.669544][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  980.700145][T12517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  980.728398][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  980.751283][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  981.109714][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  981.366224][   T48] Bluetooth: hci0: command 0x040f tx timeout
[  981.410741][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  981.651251][T12517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  981.658396][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  981.692158][T12517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  981.720334][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  981.738392][T12611] netlink: 'syz.9.1814': attribute type 10 has an invalid length.
[  981.828756][T12610] IPVS: sh: FWM 3 0x00000003 - no destination available
[  981.844281][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1814'.
[  981.862178][T12320] device veth1_macvtap entered promiscuous mode
[  981.954341][T12517] device hsr_slave_0 entered promiscuous mode
[  981.971108][T12517] device hsr_slave_1 entered promiscuous mode
[  981.981929][T12517] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  982.107495][T12517] Cannot create hsr debugfs directory
[  982.807707][T12628] loop9: detected capacity change from 0 to 1024
[  983.420582][ T4277] Bluetooth: hci0: command 0x0419 tx timeout
[  984.563650][T12628] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  985.133335][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  985.434762][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  985.453498][T12320] batman_adv: batadv0: Interface activated: batadv_slave_0
[  985.465110][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  985.482341][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  985.711160][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  986.066113][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  986.084378][T12320] batman_adv: batadv0: Interface activated: batadv_slave_1
[  986.302944][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  986.716702][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  987.019521][T12320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  987.029407][T12320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  987.038252][T12320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  987.047069][T12320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  987.071948][T12653] netlink: 'syz.1.1822': attribute type 10 has an invalid length.
[  987.082440][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'.
[  988.160882][   T31] device hsr_slave_0 left promiscuous mode
[  988.175529][   T31] device hsr_slave_1 left promiscuous mode
[  988.185477][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  988.201433][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.209518][   T31] device bridge_slave_1 left promiscuous mode
[  988.226421][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.201036][   T31] device bridge_slave_0 left promiscuous mode
[  989.220292][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.273561][   T31] device hsr_slave_0 left promiscuous mode
[  989.285970][   T31] device hsr_slave_1 left promiscuous mode
[  989.308243][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  989.340954][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  989.355225][   T31] device bridge_slave_1 left promiscuous mode
[  989.376143][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.457458][   T31] device bridge_slave_0 left promiscuous mode
[  990.478474][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.211612][   T31] team0 (unregistering): Port device team_slave_1 removed
[  993.298398][   T31] team0 (unregistering): Port device team_slave_0 removed
[  993.359091][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  993.463540][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  993.560823][T12688] xt_CT: No such helper "snmp"
[  994.338379][   T31] bond0 (unregistering): Released all slaves
[  995.220934][ T5317] ------------[ cut here ]------------
[  995.227028][ T5317] WARNING: CPU: 1 PID: 5317 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760
[  995.236916][ T5317] Modules linked in:
[  995.240885][ T5317] CPU: 1 PID: 5317 Comm: kworker/u4:21 Not tainted syzkaller #0
[  995.248556][ T5317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  995.258714][ T5317] Workqueue: events_unbound io_ring_exit_work
[  995.264916][ T5317] RIP: 0010:io_ring_exit_work+0x329/0x760
[  995.270729][ T5317] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 ae 2e 11 00 48 85 c0 75 40 e8 44 11 58 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 35 11 58 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[  995.291032][ T5317] RSP: 0018:ffffc90004d6fac0 EFLAGS: 00010293
[  995.297155][ T5317] RAX: ffffffff8a2a21ab RBX: 1ffff1100fbadc03 RCX: ffff888050bdda00
[  995.305563][ T5317] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  995.313624][ T5317] RBP: ffffc90004d6fc30 R08: ffffc90004d6fa47 R09: 1ffff920009adf48
[  995.321679][ T5317] R10: dffffc0000000000 R11: fffff520009adf49 R12: dffffc0000000000
[  995.329704][ T5317] R13: 0000000100010ed8 R14: 0000000100010edc R15: ffff88807dd6e018
[  995.337768][ T5317] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  995.346799][ T5317] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  995.353461][ T5317] CR2: 00007f524c481619 CR3: 000000003e053000 CR4: 00000000003506e0
[  995.361512][ T5317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  995.369522][ T5317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  995.377583][ T5317] Call Trace:
[  995.380928][ T5317]  <TASK>
[  995.383925][ T5317]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[  995.389813][ T5317]  ? _raw_spin_unlock+0x40/0x40
[  995.394777][ T5317]  ? _raw_spin_unlock_irq+0x1f/0x40
[  995.400067][ T5317]  ? process_one_work+0x7b4/0x1160
[  995.405228][ T5317]  process_one_work+0x8ab/0x1160
[  995.410287][ T5317]  ? worker_detach_from_pool+0x240/0x240
[  995.415970][ T5317]  ? _raw_spin_lock_irq+0xb7/0xf0
[  995.421084][ T5317]  ? _raw_spin_lock_irqsave+0x100/0x100
[  995.426684][ T5317]  ? wq_worker_running+0x97/0x190
[  995.431800][ T5317]  worker_thread+0xaf5/0x12a0
[  995.436553][ T5317]  kthread+0x29d/0x330
[  995.440696][ T5317]  ? worker_clr_flags+0x1a0/0x1a0
[  995.445775][ T5317]  ? kthread_blkcg+0xd0/0xd0
[  995.450443][ T5317]  ret_from_fork+0x1f/0x30
[  995.454915][ T5317]  </TASK>
[  995.457997][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  995.465302][ T5317] CPU: 1 PID: 5317 Comm: kworker/u4:21 Not tainted syzkaller #0
[  995.472964][ T5317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  995.483042][ T5317] Workqueue: events_unbound io_ring_exit_work
[  995.489128][ T5317] Call Trace:
[  995.492422][ T5317]  <TASK>
[  995.495367][ T5317]  dump_stack_lvl+0x188/0x24e
[  995.500164][ T5317]  ? memcpy+0x3c/0x60
[  995.504261][ T5317]  ? show_regs_print_info+0x12/0x12
[  995.509512][ T5317]  ? load_image+0x410/0x410
[  995.514105][ T5317]  panic+0x2d3/0x710
[  995.518066][ T5317]  ? bpf_jit_dump+0xd0/0xd0
[  995.522626][ T5317]  ? ret_from_fork+0x1f/0x30
[  995.527270][ T5317]  __warn+0x2f8/0x4f0
[  995.531297][ T5317]  ? io_ring_exit_work+0x329/0x760
[  995.536461][ T5317]  ? io_ring_exit_work+0x329/0x760
[  995.541616][ T5317]  report_bug+0x2ba/0x4f0
[  995.546001][ T5317]  ? io_ring_exit_work+0x329/0x760
[  995.551195][ T5317]  handle_bug+0x3a/0x70
[  995.555396][ T5317]  exc_invalid_op+0x16/0x40
[  995.559942][ T5317]  asm_exc_invalid_op+0x16/0x20
[  995.564827][ T5317] RIP: 0010:io_ring_exit_work+0x329/0x760
[  995.570591][ T5317] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 ae 2e 11 00 48 85 c0 75 40 e8 44 11 58 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 35 11 58 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[  995.590234][ T5317] RSP: 0018:ffffc90004d6fac0 EFLAGS: 00010293
[  995.596346][ T5317] RAX: ffffffff8a2a21ab RBX: 1ffff1100fbadc03 RCX: ffff888050bdda00
[  995.604357][ T5317] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  995.612364][ T5317] RBP: ffffc90004d6fc30 R08: ffffc90004d6fa47 R09: 1ffff920009adf48
[  995.620372][ T5317] R10: dffffc0000000000 R11: fffff520009adf49 R12: dffffc0000000000
[  995.628399][ T5317] R13: 0000000100010ed8 R14: 0000000100010edc R15: ffff88807dd6e018
[  995.636418][ T5317]  ? io_ring_exit_work+0x329/0x760
[  995.641593][ T5317]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[  995.647455][ T5317]  ? _raw_spin_unlock+0x40/0x40
[  995.652353][ T5317]  ? _raw_spin_unlock_irq+0x1f/0x40
[  995.657606][ T5317]  ? process_one_work+0x7b4/0x1160
[  995.662757][ T5317]  process_one_work+0x8ab/0x1160
[  995.667751][ T5317]  ? worker_detach_from_pool+0x240/0x240
[  995.673433][ T5317]  ? _raw_spin_lock_irq+0xb7/0xf0
[  995.678501][ T5317]  ? _raw_spin_lock_irqsave+0x100/0x100
[  995.684089][ T5317]  ? wq_worker_running+0x97/0x190
[  995.689152][ T5317]  worker_thread+0xaf5/0x12a0
[  995.693898][ T5317]  kthread+0x29d/0x330
[  995.697997][ T5317]  ? worker_clr_flags+0x1a0/0x1a0
[  995.703058][ T5317]  ? kthread_blkcg+0xd0/0xd0
[  995.707681][ T5317]  ret_from_fork+0x1f/0x30
[  995.712147][ T5317]  </TASK>
[  995.715780][ T5317] Kernel Offset: disabled
[  995.720217][ T5317] Rebooting in 86400 seconds..