last executing test programs:

8m10.635498517s ago: executing program 32 (id=147):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x3c}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

7m53.434594534s ago: executing program 3 (id=197):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd<a\xbe\xbeZ\r\xce\x9f\x835W\x87\xea\xe4e\xbdD\xc7\xb2', 0x40, 0x1a2, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0)
mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
syz_clone3(0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x1, r1, 0x4})

7m51.328365431s ago: executing program 3 (id=200):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
landlock_create_ruleset(0x0, 0x0, 0x10000000000001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x1, 0x8c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x7d043}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x21249}, @IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

7m50.11405721s ago: executing program 3 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x77d0, &(0x7f0000000080)={0x0, 0x8ea6, 0x1, 0x1, 0x3da})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)

7m49.037114434s ago: executing program 3 (id=212):
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)
chroot(0x0)
write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa)
chdir(&(0x7f0000000240)='./file0\x00')
sendfile(r1, r0, 0x0, 0x40001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040))

7m48.253325429s ago: executing program 3 (id=216):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
ptrace(0x10, r0)
r1 = inotify_init1(0x800)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f00000027c0))
inotify_add_watch(r1, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', 0x56000140)
setxattr$security_capability(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r2)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
wait4(r0, 0x0, 0xa0000009, 0x0)

7m46.732565248s ago: executing program 33 (id=218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x32}, 0x50)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0xc, 0xe}}}, 0x24}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000340)=@tcp=r1, 0x1}, 0x20)
syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000008ca15010140000102038d09022000010106500c090400000101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

7m46.723023758s ago: executing program 3 (id=222):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x29, 0x33, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e"], 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xf, 0x7, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240000c2}, 0x0)

7m46.611558591s ago: executing program 34 (id=222):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x29, 0x33, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e"], 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xf, 0x7, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240000c2}, 0x0)

7m28.348075942s ago: executing program 2 (id=281):
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)

7m26.349445106s ago: executing program 2 (id=285):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x7, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x20002, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x1, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

7m25.368392797s ago: executing program 2 (id=289):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeeb, 0xa031, 0xffffffffffffffff, 0xe539e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)

7m22.856303327s ago: executing program 2 (id=292):
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)
chroot(0x0)
write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa)
chdir(&(0x7f0000000240)='./file0\x00')
sendfile(r1, r0, 0x0, 0x40001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040))

7m21.705395323s ago: executing program 2 (id=298):
read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020, 0x0, 0x0, <r0=>0x0}, 0x2020)
r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@sysvgroups}, {@user_xattr}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@subj_role={'subj_role', 0x3d, 'jqfmt=vfsv0'}}, {@fsmagic={'fsmagic', 0x3d, 0x24}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'resuid'}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '\f\xfe\xac\xa8'}}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@rnullb, 0x0, &(0x7f0000000180)={0x1ec0, 0x2, 0x7ff, 0x5, 0x7, 0x4, 0x3ff, 0x8, 0x2b3922a0})
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="a181020020980000280012800b0001006d61637365630000180002800c0004000400000100c28000080005005a00000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
shutdown(r4, 0x0)
quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="05000000010001", 0x7)

7m17.979994052s ago: executing program 2 (id=313):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r2, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff)

7m17.868382886s ago: executing program 35 (id=313):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r2, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff)

7m17.610889354s ago: executing program 6 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x6697b9fc1012a58e)

7m15.648942716s ago: executing program 6 (id=319):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4)

7m15.413192154s ago: executing program 6 (id=321):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000300)={0xfffffffb, 0x800b, 0x0, 0x86, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_pts(r3, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x250, 0x6, 0xd1, 0x7, 0x15, "5d0c415f77f3ffffd51930d7000100"})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x6)

7m10.631545706s ago: executing program 6 (id=331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)

7m8.305869199s ago: executing program 6 (id=339):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r5, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c088)

7m6.744042599s ago: executing program 6 (id=343):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x4, 0xa, 0x80, 0x3, 0x1, 0x0, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0xfffffff0, 0x8, 0x4, 0x8, 0x1}}, &(0x7f0000000140)=0xb0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x401})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

7m6.521062076s ago: executing program 36 (id=343):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x4, 0xa, 0x80, 0x3, 0x1, 0x0, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0xfffffff0, 0x8, 0x4, 0x8, 0x1}}, &(0x7f0000000140)=0xb0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x401})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4m31.823239086s ago: executing program 7 (id=826):
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0xa, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m30.372707082s ago: executing program 7 (id=829):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r2, 0x48000000}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10)

4m29.468672891s ago: executing program 7 (id=833):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
sendfile(r2, r3, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0)

4m27.773847255s ago: executing program 7 (id=837):
r0 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

4m25.841021217s ago: executing program 7 (id=849):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x1, 0x0, 0x0, {0x0, 0x2}}, 0x18}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0)

4m22.536834012s ago: executing program 7 (id=842):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

4m6.24320597s ago: executing program 37 (id=842):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

2m35.623967851s ago: executing program 9 (id=1150):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0)

2m32.736503053s ago: executing program 9 (id=1151):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
close_range(r0, r0, 0x2)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
close(0x3)

2m32.487174711s ago: executing program 9 (id=1154):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000200009ad672000400001900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00')
exit(0x4)
open$dir(0x0, 0x1, 0x19d)
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
syz_pidfd_open(0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"})

2m31.026630488s ago: executing program 9 (id=1156):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x3a0c000, 0x0)
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = getpid()
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x83, 0x22e, &(0x7f0000000940)="$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")
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
fsmount(r0, 0x0, 0x21)

2m28.944824354s ago: executing program 9 (id=1161):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
symlink(0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0)

2m26.939320838s ago: executing program 9 (id=1166):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x800029, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0xf000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x5, 0x42, 0x0, 0xff, 0x0, 0x5, 0x6}, {0xc000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xaa, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x40000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m25.692115867s ago: executing program 38 (id=1166):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x800029, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0xf000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x5, 0x42, 0x0, 0xff, 0x0, 0x5, 0x6}, {0xc000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xaa, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x40000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.829924783s ago: executing program 4 (id=1563):
r0 = socket$inet6(0xa, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

11.223265374s ago: executing program 4 (id=1567):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0)
epoll_create(0x6)
close(0x4)

10.903417344s ago: executing program 4 (id=1572):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x11e, 0x83, 0x0, &(0x7f0000001100))
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c)
syz_emit_ethernet(0x9c, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "c724", "49f792", 0x886c, "fb36612948e17c571a3967cbed0881b72c57966cb1581e5f5bf9792a8299bd4f4f5383f261b044d0577e8ff67c8098b3bd0fd6c74a07a256c871bf5eee496539da1d14bc701d98d47b635af1206a746ba8dc7c1022f08fa1287cd898609b9898ac87a71900cc2b3107e9460ba947e4a7eb9565632187e3a55bcdb78c98bc311cf43f53713b"}}}}}, 0x0)

8.360261925s ago: executing program 4 (id=1579):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50)
syz_open_dev$dri(0x0, 0x1, 0x88300)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, <r4=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc)

7.239329791s ago: executing program 4 (id=1582):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2a020400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
listen(r3, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7b5d051a47465618fe24ce2a25419cbd2d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x128}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

6.974555899s ago: executing program 1 (id=1587):
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
dup3(r2, r0, 0x80000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffd, 0x4, 0x81, 0xfff}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7ffffffffffffffc, 0x663, 0x7fffffff, 0x7ba7}, 0x0, 0x0)

6.781522245s ago: executing program 1 (id=1588):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
close(0xffffffffffffffff)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(r4, 0x0, r0, 0x0, 0x6, 0x0)

6.649704179s ago: executing program 5 (id=1589):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

5.791150387s ago: executing program 5 (id=1591):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00)
r0 = inotify_init()
r1 = socket(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000280)={0x2000})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x200f})
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb)
writev(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)="f5", 0x1}, {&(0x7f0000000640)="2251a9c6ca470000000008809ad3506332bbff1002955925a4115b6899fd49e8191f800d2a77f7ab51d2a645fe46f99fa87a69f4912afdc49542883f226de78b543ccdd5a64724270b", 0x49}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
sendfile(r4, r2, &(0x7f0000000280)=0x49, 0x7fff)

5.790721227s ago: executing program 0 (id=1592):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xb)
splice(r4, 0x0, r2, 0x0, 0x1000, 0x0)
splice(r1, 0x0, r5, 0x0, 0x80, 0x0)

5.736312229s ago: executing program 8 (id=1593):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
recvmsg(0xffffffffffffffff, 0x0, 0x10040)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x0, 0x3, 0x7, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)

5.68678525s ago: executing program 1 (id=1594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xed4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xea0, 0x2, [@TCA_MATCHALL_ACT={0xe9c, 0x2, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x5, 0x0, 0x6, 0x0, 0x2}, 0x10, 0xff, [{0x800, 0x9, 0x80000001, 0x9, 0x4, 0x7}, {0xb8, 0x5, 0x6, 0x6, 0x57, 0xe2}, {0x0, 0x3, 0x8, 0x0, 0x3, 0x5}]}, [{0x4, 0xfff, 0x100, 0x7, 0x8, 0x1b2b}, {0x6, 0x7, 0x8c, 0x4, 0x0, 0x6}, {0x7, 0xffffffff, 0x10000, 0x1, 0x6, 0x1}, {0xffffffff, 0x8, 0x7, 0x6, 0x2}, {0x0, 0x9a, 0x8, 0x6, 0x0, 0x9}, {0x5, 0x4, 0x3, 0x101, 0x7}, {0x47, 0xfffffff8, 0x7, 0x100, 0xc, 0x401}, {0xc5, 0x0, 0x5, 0x7, 0x3, 0x7fff}, {0x6, 0x9, 0x4000000, 0x5, 0xa057, 0x3ff}, {0x1, 0x6, 0x8, 0x5, 0x2, 0x8e}, {0xfffffffb, 0x7, 0xfff, 0x8, 0xffffff85, 0x4}, {0x6, 0x9, 0x4, 0x0, 0x7, 0x4}, {0x81, 0x80000001, 0x9, 0x43a, 0x8, 0x1000}, {0x7, 0xa, 0x1, 0x2, 0x0, 0xf}, {0xf, 0x401, 0xf0, 0x9, 0xffff, 0x4}, {0x7fffffff, 0x7, 0x5, 0x0, 0x7ff, 0x7}, {0x92, 0x9, 0x6, 0xe, 0xc3, 0xb}, {0x9, 0x9, 0x2, 0x1, 0x5, 0x400}, {0x4, 0xcc, 0x300000, 0x4, 0x3, 0x7}, {0x4, 0xffffffff, 0x9, 0x9, 0x3, 0xf}, {0x9, 0x8, 0x0, 0xa0, 0x468, 0x400}, {0xffffffff, 0xfffffff9, 0x0, 0x2c, 0x7fffffff, 0x8001}, {0x5, 0x8001, 0x8e27, 0x8, 0x2000000, 0x2}, {0x4, 0x4, 0x3, 0x9, 0x8, 0xeb43}, {0xb, 0x5, 0x401, 0x56, 0xcb7}, {0xef, 0x3, 0x1, 0x8001, 0x7fffffff}, {0x0, 0x10, 0xdaf1, 0x1, 0x1, 0x2}, {0xffff, 0x9, 0x3fed, 0x1, 0x80000000, 0x5}, {0xfffffff8, 0x81, 0x5, 0xfffffffe, 0x3, 0x4}, {0x1, 0x91, 0x800, 0x7, 0x5, 0xf}, {0x4, 0x2, 0xff6f, 0xe, 0xfffffffe, 0x4}, {0x53, 0x4, 0x401, 0x8, 0x5, 0x9}, {0x10001, 0xee, 0xaea, 0xfffffffe, 0x76be, 0x8}, {0x1000, 0x4, 0xd5b, 0x4, 0xe, 0x3ff}, {0x5, 0xed, 0x9, 0x3ff, 0x200, 0xffffffff}, {0x2, 0xff33, 0x9, 0x0, 0x0, 0x66d2}, {0x2a, 0xf2, 0x5, 0x1, 0xc7, 0xfffff3d6}, {0x2dc57e6, 0x5, 0x8, 0x0, 0x7, 0xfffffffc}, {0x51, 0x2, 0x8, 0x8, 0x3, 0x6}, {0x0, 0x101c, 0x40, 0x4, 0x8001, 0xc}, {0x54b, 0x7, 0xf51, 0x0, 0x9, 0x2}, {0xffffffff, 0x2, 0xfffffffc, 0x6, 0x5, 0xe}, {0x5, 0x5ed4f39, 0x0, 0x7ff, 0x81, 0xfffffff8}, {0xbe4, 0xffffffff, 0x6, 0xd4a, 0x7ff}, {0x0, 0x9, 0x8, 0xfff, 0x3, 0x4}, {0xda, 0x0, 0x2, 0x3, 0xfffff1fb}, {0xffffff42, 0x81c, 0x9, 0x3, 0x8, 0x1}, {0x3, 0xfffffff8, 0x8, 0x4, 0x54, 0x200}, {0x9, 0x8, 0x1ff, 0x52800, 0x80, 0x1}, {0x0, 0x5, 0xe8, 0x2, 0x0, 0x1}, {0x7, 0xffffff01, 0x1000, 0x8, 0x0, 0x7}, {0x0, 0x80, 0xc00, 0x200, 0x3, 0xfffffffc}, {0x1000, 0x3, 0x1, 0xff, 0xffff, 0x80000000}, {0xfffffffc, 0x2, 0x40, 0x8, 0xcb87, 0x45b5}, {0x4, 0x0, 0xc09, 0x1, 0x8, 0x7ff}, {0x401, 0x2, 0x9, 0x678, 0x6c, 0xffff}, {0xfffffffe, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xf}, {0x100, 0x2, 0x9, 0x2, 0x6, 0x5b8b}, {0x4, 0xfffffffb, 0x24, 0x5, 0x31c1, 0x2}, {0x6, 0x6, 0x1e1c, 0x4, 0x6, 0x1ff}, {0x1, 0x4, 0x4, 0xd1bd, 0x0, 0x5}, {0x4, 0xfffffffa, 0xfffffffb, 0x7, 0x101, 0x1}, {0x8, 0x7, 0xd2, 0xff, 0x3, 0xcc7e}, {0x7, 0x3, 0xd65c, 0x1, 0x8, 0x4}, {0x2, 0x40, 0x9, 0x5, 0x7}, {0x858, 0xfff, 0x200, 0x9, 0x7ff, 0x9}, {0x4c07e81, 0x8a55, 0x35a, 0x3, 0xffff, 0x10001}, {0x3, 0x3, 0x0, 0x3, 0x8}, {0x2, 0x10001, 0x60000, 0x7, 0x7, 0x9}, {0x4, 0x863a, 0xffffffff, 0x7fffffff, 0x7f, 0x8}, {0x3, 0x1, 0x8, 0x98a, 0x9, 0x89}, {0x3, 0x2, 0x40, 0x9, 0x7, 0x8}, {0x4, 0x6, 0x6, 0x6, 0x3}, {0x4c, 0x0, 0x1, 0x8, 0x80000001, 0xfffffffe}, {0x3, 0x9, 0x9, 0x40, 0x80, 0x12a2}, {0x80000000, 0x1, 0x100, 0x800, 0x3, 0x8baf}, {0x2, 0xc, 0x8, 0x80000000, 0xb8, 0x60f}, {0x3, 0x5, 0x6, 0x5380, 0x7f, 0x7517}, {0x647, 0xffffffdc, 0x4, 0xffff, 0x1, 0x401}, {0xfffffff8, 0xa29, 0xf, 0x3, 0x5, 0xffff2f56}, {0x200, 0x8, 0x3b6, 0x9, 0x100, 0x7}, {0x2, 0x4, 0x81, 0x4, 0x80, 0x1}, {0x5, 0x21e7, 0xa8a5, 0x7ff, 0x6, 0xd}, {0x13, 0x7fffffff, 0x6, 0x5696cd1, 0x4a, 0x6}, {0x9, 0x1000000, 0x0, 0xfff}, {0x5, 0x40, 0xc05, 0x5, 0x8, 0x2}, {0x3, 0x6, 0x5, 0x6, 0xb, 0x8}, {0x400, 0x80000000, 0x101, 0x0, 0x8, 0x9}, {0xb, 0xf9, 0xfffffff7, 0x0, 0x9}, {0x1e9e, 0x0, 0xb8e, 0x9, 0x9, 0xfff}, {0x3, 0x6, 0x24ab, 0x6, 0x1, 0x1}, {0x1, 0x9, 0x3, 0xa0000, 0x5, 0x8}, {0x0, 0xee5, 0x0, 0x5, 0x27, 0x8}, {0xfffffffc, 0x8e7, 0x7, 0x3ff, 0x5, 0x1}, {0x400, 0x10000, 0x4, 0x3, 0x9}, {0x4, 0x4, 0x9, 0x4, 0x0, 0x800}, {0x2, 0x1, 0x74, 0xfffffff9, 0x1, 0x5}, {0x3, 0x1fe0, 0x8, 0x8, 0x3, 0x2}, {0x6, 0x80, 0x700, 0x1, 0x7, 0x9}, {0x4, 0xa, 0x2, 0x3, 0x4000, 0x7}, {0xd, 0x2, 0x0, 0x3, 0x0, 0x5}, {0x10001, 0x7fff, 0x4, 0x9, 0x4, 0x400}, {0x7, 0x6, 0x5, 0x8, 0x20, 0x7ae2}, {0x5, 0x9, 0x1, 0x80000001, 0xd1, 0xffffff80}, {0x9, 0x81, 0x242, 0x7}, {0x9a, 0x0, 0x2, 0xd3ef, 0x9, 0x3}, {0x6, 0x7fff, 0xd6f, 0x7fffffff, 0xb2f8, 0x81}, {0x2, 0x3, 0x0, 0x12b, 0x5, 0xffffff80}, {0x7edc, 0x44cf, 0x9, 0x7ff, 0x7, 0x8}, {0x0, 0x46, 0x80, 0x7fffffff, 0x7, 0x9566}, {0x5, 0x5, 0x8, 0xfffff8de, 0x2, 0x6}, {0x1, 0x2, 0xe, 0x37, 0x2, 0x10}, {0x3, 0xc0, 0xa, 0x1, 0x7, 0x9}, {0x4d5, 0x0, 0x1, 0x0, 0x3, 0x3}, {0x180127ed, 0x45, 0x6, 0x52, 0x6, 0xfffffff3}, {0xfffffffb, 0x9, 0x4, 0x3, 0x8000}, {0xfffffff9, 0xffff932d, 0x101, 0x3, 0x10000, 0x2}, {0x1000, 0x200, 0x5901, 0x8, 0x724, 0x2d3}, {0xfffffff7, 0x1, 0xfffffff8, 0x1, 0x30, 0x8}, {0x0, 0x8, 0x3, 0x3, 0x1, 0xd453}, {0x5, 0x4, 0x1, 0x7, 0x2, 0x8001}, {0x878b, 0xfffffff9, 0x2, 0x73fe, 0x0, 0x9}, {0x4c735734, 0x5, 0xfffff8dc, 0x4, 0x5, 0x3}, {0x5af8, 0x8, 0x5, 0x5, 0x4, 0xd}, {0x2, 0x1, 0x1, 0x3ff, 0x8}, {0x0, 0xc, 0x80, 0x9, 0x6, 0xfffffffc}, {0x1, 0x1ff, 0x9, 0xf0000000, 0xad82, 0xfed}, {0x8, 0x4e9, 0x7f, 0x6, 0xffff, 0x5}], [{0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x6c920e8d29de5635, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x438236dffaa15198}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x5fa8a67979573ac}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x6, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x7}, {0x3}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xed4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

5.119702688s ago: executing program 5 (id=1595):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5, {0x5, 0x6, "d22418", 0x200, 0x6c, 0x0, @mcast2, @remote}}}}}}}, 0x0)

5.117239948s ago: executing program 8 (id=1596):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)

4.42933123s ago: executing program 0 (id=1597):
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
setuid(0xee00)
r0 = syz_clone(0x1a0886080, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000380)={&(0x7f0000000100)=[{0x8004, 0x210, 0x0, 0x0}], 0x1})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00')
readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)

3.730894142s ago: executing program 1 (id=1598):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

3.213221629s ago: executing program 8 (id=1599):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x801)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083)

3.109612812s ago: executing program 5 (id=1600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.079985233s ago: executing program 0 (id=1601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000020)
close(0x3)
r3 = gettid()
rt_sigqueueinfo(r3, 0x21, &(0x7f00000002c0)={0xb, 0x4})

2.329096087s ago: executing program 4 (id=1602):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000240)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x380470a, &(0x7f0000000240)={[{@quota}, {@stripe={'stripe', 0x3d, 0x4852}}, {@jqfmt_vfsv1}, {@errors_remount}, {@init_itable}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x471, &(0x7f0000002a80)="$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")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x146)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x583, &(0x7f00000006c0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x20000, 0x50)
dup(0xffffffffffffffff)

2.24181608s ago: executing program 0 (id=1603):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x9, 0x0, 0x1, 0x200, 0x0, 0x4, 0x7, 0x10001, 0x81, 0x1, 0x80000001, 0x8, 0x2, 0x1ff, 0x7, 0x7, 0xfffffffb, 0x3ff, 0x4, 0x3, 0x7, 0xffffffff, 0x434, 0x6, 0x1, 0x9, 0x9, 0x3, 0xffff, 0xfffffffb, 0x8000, 0x7, 0x7fff, 0x3, 0x101, 0x6, 0x8c, 0xe, 0x4, 0x4, 0x8, 0x40, 0x9, 0x6, 0xa, 0x215, 0x8001, 0x7, 0x1, 0x0, 0x2e6, 0x4, 0xffffff7f, 0x2, 0x8, 0x8000, 0x5, 0x0, 0x9, 0x10, 0x6, 0x200, 0x32, 0x7, 0x7f80000, 0x6, 0x8b, 0x8, 0x3, 0x101, 0xffffffff, 0x7, 0x7, 0x4641ebda, 0x9, 0x2, 0x0, 0xff, 0x0, 0x8319, 0x29e4, 0x200, 0x6, 0x10001, 0xc, 0xa, 0x3, 0x0, 0x2, 0x80000001, 0x7, 0x1, 0x1fe, 0x0, 0xd, 0x5, 0xf, 0x10, 0x0, 0x0, 0x1, 0x80000000, 0xa, 0x8, 0xffff, 0x6, 0x7, 0x9, 0x100, 0x7, 0x2, 0x6, 0x10, 0x0, 0x6, 0x7, 0x240, 0x80008, 0x5, 0x81, 0xaeb, 0xff, 0x0, 0x80000001, 0x8, 0xc17, 0x80, 0xffffff03, 0x5, 0x1, 0x3, 0x400, 0x7ff, 0xffff, 0x1, 0x4, 0x7, 0x7, 0x4, 0x1, 0x40, 0x0, 0xfffffff7, 0x0, 0x8, 0x5587, 0x40, 0x4, 0x3ff, 0x89e48883, 0x8, 0x281, 0x8, 0x8, 0x40, 0xffffffff, 0x4, 0x293d8b13, 0x45, 0xfe, 0x3ff, 0xfb1, 0xfffffffe, 0xc5, 0x9, 0x11d, 0x3, 0x9, 0x81, 0x73c2, 0x80000005, 0x1, 0x3, 0x4, 0x5, 0x81, 0x2, 0x40, 0x400, 0x7, 0x56e2, 0x31, 0xfffffffc, 0x5, 0x3, 0xd, 0xdb51, 0x2, 0x1, 0x8, 0x2, 0x1, 0x8a, 0x9, 0x8cb6, 0xb637, 0x4, 0x9, 0x7, 0x5b03, 0xfff, 0x8, 0x5, 0x81, 0x0, 0x4, 0x5d, 0x80000000, 0x0, 0xa, 0x4, 0xfffe, 0xc7, 0x5, 0x3, 0x6, 0x8, 0xa497, 0x6, 0x6, 0x6, 0x800, 0x5, 0x2, 0x1, 0x1fd8, 0x0, 0x7, 0xc, 0x7, 0x1, 0x82c, 0x84, 0x0, 0x95, 0x8, 0x6, 0x3, 0xd99, 0x94e, 0x0, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7000000, 0x7, 0x9, 0x3, 0xffffff5a, 0x20000000, 0x8, 0x8]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

2.23808388s ago: executing program 1 (id=1604):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = fcntl$dupfd(r0, 0x0, r4)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4)
write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000a, 0x0, 0x7ff, 0x2, 0x4, 0xd, 0x5, 0xa000, 0x6, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff74)

2.151780672s ago: executing program 5 (id=1605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c00)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x8}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0x8, 0xb709, 0x0, [{0x8, 0x1, 0x10, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.099582934s ago: executing program 8 (id=1606):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0xb, 0x9}}}}]}, 0x40}}, 0x4010004)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"})

1.890569801s ago: executing program 0 (id=1607):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

1.824803443s ago: executing program 8 (id=1608):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

873.084653ms ago: executing program 5 (id=1609):
r0 = openat$mixer(0xffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d06, &(0x7f0000000180))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendfile(r0, r1, 0x0, 0xff)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xb6, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r1, 0x0, 0x0, 0xc000, 0x0, 0x0)

780.868916ms ago: executing program 1 (id=1610):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000001c0)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

780.012946ms ago: executing program 8 (id=1611):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
creat(0x0, 0x12e)
r0 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x2)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x109081, 0x34)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

0s ago: executing program 0 (id=1612):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
read$fb(r2, &(0x7f00000022c0)=""/4096, 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

event} for writing: No such file or directory
[  161.761653][ T5559] fuse: Bad value for 'fd'
[  161.783967][ T5550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.829606][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.870105][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.906995][ T5516] device bridge_slave_0 entered promiscuous mode
[  161.916220][ T5544] tipc: Resetting bearer <eth:syzkaller0>
[  161.943173][ T5544] tipc: Disabling bearer <eth:syzkaller0>
[  161.978807][ T5563] device veth1_to_bond entered promiscuous mode
[  162.001113][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.008232][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.062675][ T5516] device bridge_slave_1 entered promiscuous mode
[  162.110298][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.443820][ T5572] loop5: detected capacity change from 0 to 256
[  163.774653][ T4524] Bluetooth: hci1: command 0x0409 tx timeout
[  163.783376][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.811886][ T5572] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  165.955422][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  165.968182][ T5516] team0: Port device team_slave_0 added
[  166.002785][ T5516] team0: Port device team_slave_1 added
[  166.101124][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.108117][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.116455][ T5577] loop6: detected capacity change from 0 to 2048
[  166.238677][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.299690][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.332'.
[  166.335816][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.342816][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.432081][ T5577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.532633][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.607569][ T5516] device hsr_slave_0 entered promiscuous mode
[  167.714126][ T5516] device hsr_slave_1 entered promiscuous mode
[  167.722950][ T5516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.732745][ T5516] Cannot create hsr debugfs directory
[  168.087806][   T23] Bluetooth: hci1: command 0x040f tx timeout
[  168.294744][ T5098] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh
[  168.320063][ T5098] UDF-fs: error (device loop6): udf_read_inode: (ino 1317) failed !bh
[  168.352830][ T5516] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  168.431297][ T5516] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  169.356147][ T5516] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  169.448508][ T5516] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  169.770282][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.918920][ T5516] 8021q: adding VLAN 0 to HW filter on device team0
[  169.939215][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.958455][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.000332][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.046095][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.079091][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.086207][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.141130][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.192224][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.252466][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.259659][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.311919][ T5622] Bluetooth: hci1: command 0x0419 tx timeout
[  170.561125][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.808102][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  171.102519][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  171.187716][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  171.255128][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  171.297891][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  171.332047][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.360671][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.398719][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  171.430806][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  171.472887][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  171.506724][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  171.522519][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.026456][ T4235] Bluetooth: hci2: command 0x0409 tx timeout
[  174.466718][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  174.478575][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  174.564605][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.601052][ T5657] chnl_net:caif_netlink_parms(): no params data found
[  174.728942][ T5657] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.761335][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.819650][ T5657] device bridge_slave_0 entered promiscuous mode
[  174.866828][ T5657] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.898016][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.919154][ T5657] device bridge_slave_1 entered promiscuous mode
[  174.976285][ T5657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.988376][ T5657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.078114][ T5701] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  175.180765][ T5657] team0: Port device team_slave_0 added
[  175.457422][ T5657] team0: Port device team_slave_1 added
[  175.477396][  T145] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.493059][ T1326] Bluetooth: hci2: command 0x041b tx timeout
[  177.653018][ T5657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.681747][ T5657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.796874][ T5657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.813187][ T5657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.821233][ T5657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.863073][ T5657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.891788][  T145] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.993937][  T145] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.033880][ T5657] device hsr_slave_0 entered promiscuous mode
[  178.045482][ T5657] device hsr_slave_1 entered promiscuous mode
[  178.072076][ T5657] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.094642][ T5657] Cannot create hsr debugfs directory
[  178.100297][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.123741][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.151117][  T145] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.264105][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.279422][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.300224][ T5516] device veth0_vlan entered promiscuous mode
[  178.330340][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.348668][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.386008][ T5516] device veth1_vlan entered promiscuous mode
[  178.480171][ T5516] device veth0_macvtap entered promiscuous mode
[  178.487712][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.495921][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.504327][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.513748][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.522869][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  178.545629][ T5516] device veth1_macvtap entered promiscuous mode
[  178.591391][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.602555][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.613876][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.624697][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.634802][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.645498][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.656278][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.666797][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.676694][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.687390][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.699702][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.722128][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  178.730494][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  178.739131][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  178.749946][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.760913][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.771960][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.782486][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.793115][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.804909][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.814794][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.825359][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.835223][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.845725][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.856881][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.873570][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  178.883213][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  178.929677][ T5516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.938440][ T5516] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.948952][ T5516] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.958294][ T5516] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.044258][ T5657] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  179.087446][ T5657] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  179.099863][ T5657] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  179.135188][ T5657] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  179.149651][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.166019][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.182268][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  179.216000][ T5448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.227954][ T5448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.258428][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  179.428364][ T5657] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.501255][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  179.517385][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  179.552116][ T5657] 8021q: adding VLAN 0 to HW filter on device team0
[  179.592811][ T5767] netlink: 10 bytes leftover after parsing attributes in process `syz.8.314'.
[  179.624945][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  179.649936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  179.676558][ T4523] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  179.676769][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.691202][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.712189][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  179.720567][ T4231] Bluetooth: hci2: command 0x040f tx timeout
[  179.755479][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.773277][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.812746][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.819932][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.475520][ T4524] Bluetooth: hci2: command 0x0419 tx timeout
[  183.630306][ T4523] usb 8-1: unable to read config index 0 descriptor/start: -71
[  183.659972][ T4523] usb 8-1: can't read configurations, error -71
[  183.996884][ T5793] Cannot find set identified by id 0 to match
[  184.008308][ T5657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.049192][ T5657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.078733][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  184.097206][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  184.258800][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  184.335651][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  184.389946][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  184.398927][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  184.415709][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  184.425229][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  184.434873][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  184.443518][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  184.462346][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  184.542433][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  184.559342][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.371'.
[  186.866206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  186.892785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  186.954865][ T5657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.012088][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.380'.
[  187.031784][ T5818] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  187.045887][ T5818] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821)
[  187.286461][ T5831] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  187.369486][  T145] device hsr_slave_0 left promiscuous mode
[  187.388824][  T145] device hsr_slave_1 left promiscuous mode
[  187.449804][  T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.458177][  T145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.619064][  T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.783289][  T145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.241076][ T4772] Bluetooth: hci3: command 0x0406 tx timeout
[  188.400101][  T145] device bridge_slave_1 left promiscuous mode
[  188.406381][  T145] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.698265][  T145] device bridge_slave_0 left promiscuous mode
[  190.327719][  T145] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.501994][  T145] device veth1_macvtap left promiscuous mode
[  191.508111][  T145] device veth0_macvtap left promiscuous mode
[  191.525344][  T145] device veth1_vlan left promiscuous mode
[  191.531568][  T145] device veth0_vlan left promiscuous mode
[  192.094751][  T145] team0 (unregistering): Port device team_slave_1 removed
[  192.135883][  T145] team0 (unregistering): Port device team_slave_0 removed
[  192.159870][  T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.192196][  T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.269239][  T145] bond0 (unregistering): Released all slaves
[  192.345017][ T5877] device syzkaller0 entered promiscuous mode
[  192.830675][ T2303] hid (null): unknown global tag 0xd
[  192.836362][ T2303] hid (null): unknown global tag 0xda
[  192.970786][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.990644][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.010767][ T2303] hid-generic 0005:0001:0002.0004: collection stack underflow
[  193.018645][ T2303] hid-generic 0005:0001:0002.0004: item 0 1 0 12 parsing failed
[  193.026630][ T2303] hid-generic: probe of 0005:0001:0002.0004 failed with error -22
[  194.017189][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.055650][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.088153][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.105922][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.131874][ T5657] device veth0_vlan entered promiscuous mode
[  194.174324][ T5657] device veth1_vlan entered promiscuous mode
[  194.290678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.306845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.323193][ T5657] device veth0_macvtap entered promiscuous mode
[  194.355930][ T5657] device veth1_macvtap entered promiscuous mode
[  194.410238][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.628715][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.847963][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.992906][ T5905] Cannot find set identified by id 0 to match
[  195.474957][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.538077][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.573276][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.604833][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.643764][ T5925] loop7: detected capacity change from 0 to 4096
[  195.658771][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.693251][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.713697][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.818344][ T5657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.844289][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.865898][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.880351][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.945024][ T5925] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  195.963485][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.973691][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.984762][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.994850][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.005505][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.019972][ T5657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.030660][ T5657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.042128][ T5657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.060695][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  196.108629][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  196.151126][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  196.180700][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  196.200771][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  196.265844][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  196.454315][ T5657] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.469773][ T5657] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.478582][ T5657] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.487716][ T5657] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.721762][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.729628][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.318422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  200.391582][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.424304][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.434499][ T5966] loop5: detected capacity change from 0 to 512
[  200.479895][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  201.521213][ T5966] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  201.778979][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  201.786606][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  202.908959][ T5966] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  203.086067][ T5966] EXT4-fs (loop5): 1 truncate cleaned up
[  203.117495][ T5966] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  205.266642][ T6013] loop7: detected capacity change from 0 to 1024
[  205.479336][ T6013] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  206.258356][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.9.425'.
[  206.543091][ T6013] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Out of memory
[  206.599344][ T6013] EXT4-fs error (device loop7): ext4_setattr:5586: inode #15: comm syz.7.421: mark_inode_dirty error
[  206.681545][ T6013] EXT4-fs error (device loop7) in ext4_setattr:5645: Out of memory
[  206.728455][ T6012] attempt to access beyond end of device
[  206.728455][ T6012] loop7: rw=1, want=3606377192, limit=1024
[  206.810623][ T6012] EXT4-fs warning (device loop7): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1803188595)
[  206.873534][ T6012] Buffer I/O error on device loop7, logical block 1803188595
[  206.905508][ T6012] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Out of memory
[  206.950909][ T6012] EXT4-fs error (device loop7): mpage_map_and_submit_extent:2524: inode #15: comm syz.7.421: mark_inode_dirty error
[  206.994884][ T6012] EXT4-fs error (device loop7): mpage_map_and_submit_extent:2528: comm syz.7.421: Failed to mark inode 15 dirty
[  207.034015][ T6012] attempt to access beyond end of device
[  207.034015][ T6012] loop7: rw=1, want=3403208900, limit=1024
[  207.087061][ T6012] EXT4-fs warning (device loop7): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1701604449)
[  207.151173][ T6012] Buffer I/O error on device loop7, logical block 1701604449
[  207.857692][ T5989] EXT4-fs warning (device loop7): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7546266866099511129
[  208.029875][ T5093] EXT4-fs (loop7): Inode 15 (ffff888075fc3bd0): i_reserved_data_blocks (1) not cleared!
[  208.158084][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.429'.
[  208.240392][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.429'.
[  208.420416][ T6097] netlink: 'syz.9.429': attribute type 4 has an invalid length.
[  208.468740][ T6097] netlink: 152 bytes leftover after parsing attributes in process `syz.9.429'.
[  208.564622][ T6097] .`: renamed from bond0
[  208.652396][ T6104] loop8: detected capacity change from 0 to 512
[  209.804277][ T6104] EXT4-fs (loop8): external journal device major/minor numbers have changed
[  209.909152][ T6130] x_tables: duplicate underflow at hook 2
[  210.350063][ T6104] block device autoloading is deprecated and will be removed.
[  210.397963][ T6104] EXT4-fs (loop8): external journal has bad superblock
[  210.611065][ T6144] overlayfs: failed to clone upperpath
[  210.794376][ T6146] overlayfs: failed to clone upperpath
[  210.812566][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.7.440'.
[  211.804053][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'.
[  212.120794][ T6161] loop5: detected capacity change from 0 to 512
[  212.145722][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.9.445'.
[  212.458547][ T6161] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  212.518061][ T6161] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.907685][   T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  214.063158][ T6196] device syzkaller0 entered promiscuous mode
[  214.113630][ T6201] loop7: detected capacity change from 0 to 512
[  214.186080][   T23] usb 10-1: Using ep0 maxpacket: 16
[  214.222114][ T6201] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  214.283830][ T6205] loop8: detected capacity change from 0 to 1024
[  214.294954][ T6201] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.325048][   T23] usb 10-1: config 0 has an invalid interface number: 34 but max is 0
[  214.333391][   T23] usb 10-1: config 0 has no interface number 0
[  214.339689][   T23] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  214.351892][   T23] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  214.372617][ T6201] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback.
[  214.484761][ T6205] EXT4-fs (loop8): Ignoring removed orlov option
[  214.494740][ T6205] EXT4-fs (loop8): Ignoring removed oldalloc option
[  214.555765][   T23] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  214.583661][ T6205] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  214.584279][   T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.652311][   T23] usb 10-1: Product: syz
[  214.667601][   T23] usb 10-1: Manufacturer: syz
[  214.684949][   T23] usb 10-1: SerialNumber: syz
[  214.697774][ T6205] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,init_itable=0x0000000000000002,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,oldalloc,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: none.
[  214.700770][   T23] usb 10-1: config 0 descriptor??
[  214.752572][ T6191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  214.767311][ T6191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  215.050651][ T6191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  215.073127][ T6191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  215.329763][   T23] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  215.381928][ T6251] device syzkaller0 entered promiscuous mode
[  215.907338][ T6251] tipc: Started in network mode
[  216.001558][ T6251] tipc: Node identity 9eb745c6cdb6, cluster identity 4711
[  216.136365][ T6251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.432386][ T6250] tipc: Resetting bearer <eth:syzkaller0>
[  216.510671][ T6250] tipc: Disabling bearer <eth:syzkaller0>
[  217.183225][ T6269] netlink: 'syz.1.479': attribute type 1 has an invalid length.
[  217.254578][ T6269] netlink: 'syz.1.479': attribute type 4 has an invalid length.
[  217.262272][ T6269] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.479'.
[  217.328959][   T23] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  217.359396][   T23] asix: probe of 10-1:0.34 failed with error -71
[  217.415821][   T23] usb 10-1: USB disconnect, device number 2
[  217.521701][ T6272] device syzkaller0 entered promiscuous mode
[  217.544653][ T6272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.580111][ T6271] tipc: Resetting bearer <eth:syzkaller0>
[  217.673154][ T6271] tipc: Disabling bearer <eth:syzkaller0>
[  217.956515][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.474'.
[  218.542264][   T26] audit: type=1804 audit(1780944738.642:4): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.481" name="bus" dev="ramfs" ino=40762 res=1 errno=0
[  219.517160][   T26] audit: type=1804 audit(1780944738.914:5): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.481" name="bus" dev="ramfs" ino=40762 res=1 errno=0
[  221.699282][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.488'.
[  222.536008][ T6360] loop9: detected capacity change from 0 to 256
[  227.392584][ T6400] loop5: detected capacity change from 0 to 8
[  229.134353][ T6400] SQUASHFS error: lzo decompression failed, data probably corrupt
[  229.452032][ T6400] SQUASHFS error: Failed to read block 0x91: -5
[  229.458339][ T6400] SQUASHFS error: Unable to read metadata cache entry [8f]
[  229.568217][ T6400] SQUASHFS error: Unable to read inode 0x11f
[  229.928914][ T6429] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4832] was attempted by "$x`vO¤xŒH`³ã•ÕCBnÜ€º·yòü>
bêwìæx\x1bL5? CÝ­8`d…ªþ»‘Jgø39TÃÝ&¨tWCmË<º¨\x1bRbyÑ VqÔ/‰�\x5cDw,XT,µWû[esôÿ—‘Ô\x0d1‘\x07þ^òÐÖ|À;dˆg8 Î꥛~åu²}GÇõg6W]ìMìòþlxMð=æMäh\x09¶5²$ªZ†å¹EOÞ1Jc�Å&µOÌPÒ5y9\x0dNiï£IÌ<òâ5ÞÐŽñÒd\x22ÐT*ÙɢsÌx)›�
«Ê¯\x22v:¤øÕ|M\x0aµ
…´Ïõ)\x0bøê‹»wRIð˜ åð‘¤ê‹×â;øH¶P?LtœM[w̲SØ7—&åQ瑃ƒ½¡�Y‘=NÞÝ�˜\x22“Í߆FSÜB¨Ò˜”Rxë‹9ʼnR_4¦~}�eà�¢}xçböH\x0d ã%Ç„Þ‘RÀ]€c“Éx‚8‡m‘5'y¨úZ«xÀú^M¢šïy=:å:ÄUVvÒ¼b�8‹¡s\x0d0ácŠ£äAßL˜Û=ýø×;¹Òk«�[i½†qK”gú´@©8ÊZ\x22&€iy?± m9�Ÿ•d©ŠÐ<5ð]ìp2w­Óø´A³¯1ëȦ4qLctG�9NÆï_f2so pÜ)™^�ÔFISn08¢a¯µS²*Ä’½rXùé\x1b/\x22`¬W×rwr\x22ß!7³ëX˜~ñ ¬öÓ°¯é€DÖEp­÷7ÖeÝh¦NkÃ2I£s
„û,>r_<º-œ!à}�ÛjnW8-‡lñeÍÚðQÝßî–Å’6Dg�fr·ZÒ!ÀV\x0bÛ¡¶ßá*À¡ö>óØýåħk?p>n¯U�±³`I‡±ù¶æWŽí ×ô™ú\x1bØßD´ˆ6Öùòó…÷›Ãþ\x5cjì¼óÕÉv†ç(‚ª¯=ª}tŒxôp:ñÔ�ç§ÞŽØ_Æõç´ÕÕ½ü<‹('ôµ�(tc©(ÏÖ®¿#2®o¢Ú�0xæåÄY4W .vôÅoD´Sâ\x0cXæ¿©šV‚,¤5a#zkP—däÀó 0a.
[  230.149153][ T6441] device veth0 entered promiscuous mode
[  230.391865][ T6449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.440882][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'.
[  231.367755][ T6445] device syzkaller0 entered promiscuous mode
[  231.414717][ T6444] tipc: Resetting bearer <eth:syzkaller0>
[  231.523973][ T6444] tipc: Disabling bearer <eth:syzkaller0>
[  232.134476][ T6477] netem: change failed
[  235.062277][ T6512] netlink: 'syz.7.532': attribute type 21 has an invalid length.
[  235.105632][ T6512] netlink: 132 bytes leftover after parsing attributes in process `syz.7.532'.
[  237.736985][ T4771] Bluetooth: hci4: command 0x0406 tx timeout
[  241.979591][ T6567] loop9: detected capacity change from 0 to 4096
[  242.847676][ T6590] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa
[  242.926653][ T6592] blktrace: Concurrent blktraces are not allowed on loop0
[  243.045175][ T6600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  243.242515][ T6607] loop8: detected capacity change from 0 to 512
[  243.371021][ T5657] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22.
[  243.377513][ T5657] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  244.799395][ T6607] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.553: invalid indirect mapped block 10 (level 1)
[  244.822952][ T6621] overlayfs: failed to clone upperpath
[  244.863641][ T6625] overlayfs: failed to clone upperpath
[  244.890993][ T6607] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.553: invalid indirect mapped block 8 (level 1)
[  244.965883][ T6607] EXT4-fs (loop8): 1 truncate cleaned up
[  245.046050][ T6607] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: none.
[  245.663718][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.561'.
[  246.841277][ T6632] loop5: detected capacity change from 0 to 8192
[  248.000253][ T6650] xt_CT: No such helper "snmp_trap"
[  253.089069][ T6710] netlink: 'syz.9.574': attribute type 4 has an invalid length.
[  256.189201][ T6784] bridge0: port 1(syz_tun) entered disabled state
[  256.366636][ T6786] device syz_tun left promiscuous mode
[  256.435123][ T6786] bridge0: port 1(syz_tun) entered disabled state
[  256.948501][ T6803] 9pnet_virtio: no channels available for device syz
[  258.904657][   T23] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  259.214735][   T23] usb 10-1: Using ep0 maxpacket: 32
[  259.439154][   T23] usb 10-1: unable to get BOS descriptor or descriptor too short
[  259.514015][   T23] usb 10-1: unable to read config index 0 descriptor/start: -71
[  259.530518][   T23] usb 10-1: can't read configurations, error -71
[  259.602268][ T6854] loop5: detected capacity change from 0 to 512
[  259.754381][ T6854] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,noinit_itable,,errors=continue. Quota mode: writeback.
[  259.857278][ T6854] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.026311][ T6854] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.616: corrupted xattr block 33
[  260.120873][ T6854] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.616: corrupted xattr block 33
[  260.322743][ T6854] fscrypt (loop5, inode 15): Error -117 getting encryption context
[  261.171636][ T6875] 9pnet_virtio: no channels available for device syz
[  262.417034][ T6886] loop8: detected capacity change from 0 to 256
[  262.528552][ T6886] FAT-fs (loop8): Directory bread(block 64) failed
[  262.535169][ T6886] FAT-fs (loop8): Directory bread(block 65) failed
[  262.542608][ T6886] FAT-fs (loop8): Directory bread(block 66) failed
[  262.549164][ T6886] FAT-fs (loop8): Directory bread(block 67) failed
[  262.555822][ T6886] FAT-fs (loop8): Directory bread(block 68) failed
[  262.562430][ T6886] FAT-fs (loop8): Directory bread(block 69) failed
[  262.569016][ T6886] FAT-fs (loop8): Directory bread(block 70) failed
[  262.575611][ T6886] FAT-fs (loop8): Directory bread(block 71) failed
[  262.582363][ T6886] FAT-fs (loop8): Directory bread(block 72) failed
[  262.588909][ T6886] FAT-fs (loop8): Directory bread(block 73) failed
[  264.132365][ T4231] Bluetooth: hci0: command 0x0406 tx timeout
[  264.249315][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.8.613'.
[  267.660433][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  267.666828][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  269.456677][ T6966] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  269.580344][ T6961] loop8: detected capacity change from 0 to 8192
[  271.071024][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.7.635'.
[  272.194593][ T7006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  273.270729][ T7023] netlink: 232 bytes leftover after parsing attributes in process `syz.8.643'.
[  277.360273][ T7069] loop8: detected capacity change from 0 to 1024
[  277.424342][ T7069] EXT4-fs (loop8): Ignoring removed bh option
[  277.507409][ T7069] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,bh,init_itable,. Quota mode: none.
[  277.764624][ T7069] gadgetfs: Unknown parameter 'lowerdir'
[  277.795088][ T7069] overlayfs: missing 'lowerdir'
[  280.007776][   T23] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  280.402196][   T23] usb 9-1: Using ep0 maxpacket: 32
[  280.644618][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.9.666'.
[  281.194525][   T23] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.301246][   T23] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  281.526108][   T23] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  281.535226][   T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.546666][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.669'.
[  281.597754][   T23] usb 9-1: Product: syz
[  281.630101][   T23] usb 9-1: Manufacturer: syz
[  281.645873][   T23] usb 9-1: SerialNumber: syz
[  281.683639][   T23] usb 9-1: config 0 descriptor??
[  282.139256][ T7155] loop9: detected capacity change from 0 to 128
[  283.732381][ T4771] usb 9-1: USB disconnect, device number 2
[  283.757316][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.9.679'.
[  285.267854][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.8.684'.
[  285.549492][ T7210] loop9: detected capacity change from 0 to 256
[  285.581669][ T7211] x_tables: unsorted underflow at hook 4
[  287.791259][ T7238] capability: warning: `syz.1.696' uses 32-bit capabilities (legacy support in use)
[  291.502516][ T4520] Bluetooth: hci1: command 0x0406 tx timeout
[  294.810143][  T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.153738][  T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.373656][  T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.461202][ T7370] tipc: Started in network mode
[  296.466116][ T7370] tipc: Node identity 2007ff, cluster identity 4711
[  296.487885][ T7370] tipc: Node number set to 2099199
[  296.626138][  T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.202664][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.730'.
[  299.406180][ T7401] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  299.535362][ T7401] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  299.582861][ T7401] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  299.609464][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.735'.
[  299.635922][ T7401] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  299.910388][ T7401] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  301.300910][ T7432] xt_hashlimit: size too large, truncated to 1048576
[  301.380824][ T7432] xt_hashlimit: invalid rate
[  301.629354][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.9.742'.
[  301.656678][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.9.742'.
[  303.701459][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.9.742'.
[  303.750033][ T7443] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  304.029772][ T5622] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  304.953274][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.752'.
[  306.362117][ T7487] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  306.402790][ T7487] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  306.456309][ T7487] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  306.480171][ T7487] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  306.502073][ T7487] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  306.518199][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.7.752'.
[  306.562828][ T7479] 8021q: adding VLAN 0 to HW filter on device bond1
[  306.700026][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  306.726249][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.758'.
[  307.858489][ T7507] .`: (slave bond_slave_0): Releasing backup interface
[  309.045241][ T7549] overlayfs: failed to clone upperpath
[  309.841033][ T7517] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.850175][ T7517] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.860353][ T7517] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.869508][ T7517] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.234423][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.774'.
[  310.355495][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  310.377330][ T7561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.496655][  T144] device hsr_slave_0 left promiscuous mode
[  312.559726][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.581456][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.603142][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.703246][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.780348][  T144] device bridge_slave_1 left promiscuous mode
[  313.208980][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.609522][  T144] device bridge_slave_0 left promiscuous mode
[  313.629447][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.748101][  T144] device veth1_macvtap left promiscuous mode
[  313.754179][  T144] device veth0_macvtap left promiscuous mode
[  313.813229][  T144] device veth1_vlan left promiscuous mode
[  313.839157][  T144] device veth0_vlan left promiscuous mode
[  315.218064][  T144] team0 (unregistering): Port device team_slave_1 removed
[  315.249091][  T144] team0 (unregistering): Port device team_slave_0 removed
[  315.272466][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.303923][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.457447][  T144] bond0 (unregistering): Released all slaves
[  315.534748][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.789'.
[  315.671617][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.796'.
[  315.711346][ T7652] tipc: Cannot configure node identity twice
[  318.296165][ T7685] loop9: detected capacity change from 0 to 131072
[  318.366293][ T7685] XFS: ikeep mount option is deprecated.
[  318.553288][ T7685] XFS (loop9): Mounting V5 Filesystem
[  318.672810][ T7685] XFS (loop9): Starting recovery (logdev: internal)
[  318.712262][ T7685] XFS (loop9): Ending recovery (logdev: internal)
[  319.094421][ T7727] netlink: 140 bytes leftover after parsing attributes in process `syz.5.822'.
[  319.113989][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.822'.
[  319.820665][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.7.816'.
[  319.922399][ T5657] XFS (loop9): Unmounting Filesystem
[  326.764791][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'.
[  326.787547][ T7812] xt_CT: No such helper "syz1"
[  327.024048][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'.
[  327.203427][ T7832] autofs4:pid:7832:autofs_fill_super: called with bogus options
[  327.982715][ T7838] loop9: detected capacity change from 0 to 8
[  328.052814][ T7838] SQUASHFS error: zlib decompression failed, data probably corrupt
[  328.060937][ T7838] SQUASHFS error: Failed to read block 0x9b: -5
[  328.067330][ T7838] SQUASHFS error: Unable to read metadata cache entry [99]
[  328.074623][ T7838] SQUASHFS error: Unable to read inode 0x127
[  334.037130][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  334.043524][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  334.825273][  T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.579306][  T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.867963][ T7902] infiniband syz2: set down
[  336.879800][  T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.928788][ T7902] infiniband syz2: added ipvlan0
[  337.379344][  T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.419961][ T7902] infiniband syz2: Couldn't open port 1
[  337.837460][ T7902] RDS/IB: syz2: added
[  337.842121][ T7902] smc: adding ib device syz2 with port count 1
[  337.959421][ T7954] device syzkaller0 entered promiscuous mode
[  337.992234][ T7902] smc:    ib device syz2 port 1 has pnetid 
[  347.390885][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.9.866'.
[  347.476598][ T8010] bridge1: port 1(veth3) entered blocking state
[  347.505583][ T8010] bridge1: port 1(veth3) entered disabled state
[  347.522260][ T8010] device veth3 entered promiscuous mode
[  347.627002][ T8014] bridge1: port 2(veth5) entered blocking state
[  347.639295][ T8014] bridge1: port 2(veth5) entered disabled state
[  347.663166][ T8014] device veth5 entered promiscuous mode
[  348.931298][ T8035] tipc: Started in network mode
[  348.936222][ T8035] tipc: Node identity 4, cluster identity 4711
[  348.971148][ T8035] tipc: Node number set to 4
[  351.796292][  T144] device hsr_slave_0 left promiscuous mode
[  351.808575][  T144] device hsr_slave_1 left promiscuous mode
[  351.849246][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.856736][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.871926][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.885853][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.901763][  T144] device bridge_slave_1 left promiscuous mode
[  351.917261][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.939458][  T144] device bridge_slave_0 left promiscuous mode
[  351.953127][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.020517][  T144] device veth1_macvtap left promiscuous mode
[  352.027178][  T144] device veth0_macvtap left promiscuous mode
[  352.072752][  T144] device veth1_vlan left promiscuous mode
[  352.339618][  T144] device veth0_vlan left promiscuous mode
[  353.781770][  T144] team0 (unregistering): Port device team_slave_1 removed
[  353.812570][  T144] team0 (unregistering): Port device team_slave_0 removed
[  353.834024][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.854822][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  353.973290][  T144] bond0 (unregistering): Released all slaves
[  354.056722][ T8072] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  354.072005][ T8072] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  354.081793][ T8072] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  354.097219][ T8072] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  354.109151][ T8072] device geneve2 entered promiscuous mode
[  354.121543][ T8072] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  354.133431][ T8072] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  354.151679][ T8072] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  354.163809][ T8072] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  354.199603][ T8078] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  355.472794][ T4523] Bluetooth: hci0: command 0x0409 tx timeout
[  357.838335][ T4235] Bluetooth: hci0: command 0x041b tx timeout
[  358.717272][ T8168] loop8: detected capacity change from 0 to 4096
[  358.732430][ T8092] chnl_net:caif_netlink_parms(): no params data found
[  359.059786][ T8168] EXT4-fs (loop8): inline encryption not supported
[  359.331460][ T8168] EXT4-fs (loop8): Test dummy encryption mode enabled
[  359.595779][ T8168] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  359.700963][ T8168] System zones: 0-5
[  359.762868][ T8168] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  359.892321][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.961370][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.973310][ T8092] device bridge_slave_0 entered promiscuous mode
[  360.006026][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.057006][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.094443][ T4235] Bluetooth: hci0: command 0x040f tx timeout
[  360.119822][ T8092] device bridge_slave_1 entered promiscuous mode
[  360.155781][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.627703][ T8197] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.892401][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.073301][ T8092] team0: Port device team_slave_0 added
[  361.118205][ T8092] team0: Port device team_slave_1 added
[  361.173163][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.197491][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.267099][ T4235] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  361.316514][ T8092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.372687][ T8208] ./file0: Can't open blockdev
[  361.387655][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.394651][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.540562][ T8092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.579251][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.9.911'.
[  361.641769][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.9.911'.
[  361.652238][ T4235] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  361.673657][ T4235] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.701956][ T4235] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  361.899558][ T4235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.846912][ T4235] usb 9-1: config 0 descriptor??
[  363.852400][ T4523] Bluetooth: hci0: command 0x0419 tx timeout
[  364.076284][ T8092] device hsr_slave_0 entered promiscuous mode
[  364.115878][ T8092] device hsr_slave_1 entered promiscuous mode
[  365.233306][ T4235] usbhid 9-1:0.0: can't add hid device: -71
[  365.239356][ T4235] usbhid: probe of 9-1:0.0 failed with error -71
[  366.223188][ T4235] usb 9-1: USB disconnect, device number 4
[  366.377253][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.9.919'.
[  366.556238][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.9.919'.
[  366.650777][ T8277] device bridge0 entered promiscuous mode
[  367.436573][ T8277] device ip6gretap0 entered promiscuous mode
[  367.463302][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  369.443644][ T8330] loop9: detected capacity change from 0 to 1024
[  370.176653][ T8330] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  370.293411][ T8330] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  370.408692][ T8092] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  370.422283][ T8328] EXT4-fs error (device loop9): ext4_map_blocks:741: inode #15: block 3: comm syz.9.931: lblock 3 mapped to illegal pblock 3 (length 3)
[  370.453809][ T8092] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  370.494377][ T8092] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  370.541946][ T8092] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  370.564941][ T8328] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  370.656969][ T8328] EXT4-fs (loop9): This should not happen!! Data will be lost
[  370.656969][ T8328] 
[  370.750900][ T8330] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #15: block 3: comm syz.9.931: lblock 3 mapped to illegal pblock 3 (length 1)
[  370.769018][ T8330] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #15: block 3: comm syz.9.931: lblock 3 mapped to illegal pblock 3 (length 1)
[  370.795298][ T8330] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #15: block 3: comm syz.9.931: lblock 3 mapped to illegal pblock 3 (length 1)
[  370.951766][ T8352] xt_socket: unknown flags 0x4c
[  371.466920][ T8338] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  371.522899][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.576511][ T8328] EXT4-fs error (device loop9): ext4_ext_remove_space:2929: inode #15: comm syz.9.931: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  371.581360][ T8092] 8021q: adding VLAN 0 to HW filter on device team0
[  371.629071][ T8328] EXT4-fs error (device loop9) in ext4_setattr:5645: Corrupt filesystem
[  371.648094][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  371.680231][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  371.705412][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  371.734163][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  371.751989][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.759181][ T5360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.665704][ T8367] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  372.695614][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  372.734353][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  372.899147][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.906302][ T5360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.051847][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  374.061196][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  374.405439][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  374.424899][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  375.530916][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  375.562373][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  375.586963][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  375.614113][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.937'.
[  375.623044][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.937'.
[  375.704738][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  375.721439][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  375.763822][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  375.952725][ T8092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  376.003971][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  377.565354][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  377.607190][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  377.619758][ T8414] overlayfs: bad mount option "redirect_dir=off:/"
[  379.481560][  T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.602046][  T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  379.699241][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.707106][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  379.729223][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  379.750594][ T8441] IPVS: Unknown mcast interface: vcan0
[  379.791574][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  379.838971][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  380.132886][  T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.365855][  T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  380.745393][ T8092] device veth0_vlan entered promiscuous mode
[  380.793357][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  380.827092][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  380.916999][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  381.021727][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  381.044971][ T4291] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  381.333466][ T4291] usb 10-1: Using ep0 maxpacket: 32
[  381.822097][ T4291] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  381.834521][ T4291] usb 10-1: config 0 has no interface number 0
[  381.842763][  T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.873316][  T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  381.897145][ T8092] device veth1_vlan entered promiscuous mode
[  382.026114][ T8092] device veth0_macvtap entered promiscuous mode
[  382.035979][ T8092] device veth1_macvtap entered promiscuous mode
[  382.052808][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.063400][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.068358][ T8474] loop8: detected capacity change from 0 to 164
[  382.074113][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.090607][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.112472][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.379174][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.487567][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.602713][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.811263][ T4291] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  382.825620][ T4291] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.834803][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.845349][ T4291] usb 10-1: Product: syz
[  382.849636][ T4291] usb 10-1: Manufacturer: syz
[  382.872817][ T4291] usb 10-1: SerialNumber: syz
[  382.874938][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  382.895893][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  382.908289][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  382.915858][ T4291] usb 10-1: config 0 descriptor??
[  382.918718][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  382.934793][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  382.950884][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  383.477443][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.509283][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.529791][ T8485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.553634][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.590100][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.615925][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.670564][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.730856][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.770559][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.866270][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.889613][  T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.931142][  T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  383.974771][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  384.004521][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  384.057053][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  384.187987][ T4291] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  384.196996][ T4291] usb 10-1: selecting invalid altsetting 1
[  384.202943][ T4291] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  384.220464][ T4291] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  384.231298][ T4291] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  384.240020][ T4291] usb 10-1: media controller created
[  384.260564][ T8092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.269664][ T8092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.277182][ T4291] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  384.280475][ T8092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.312895][ T4291] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  385.322954][ T4291] zl10353_read_register: readreg error (reg=127, ret==-71)
[  385.331070][ T8092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.753296][ T4291] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  386.012020][ T4291] usb 10-1: USB disconnect, device number 5
[  386.245426][ T8509] serio: Serial port ptm0
[  386.363257][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.375055][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.417512][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  387.199533][ T8532] netlink: 88 bytes leftover after parsing attributes in process `syz.5.972'.
[  387.293214][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.306651][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.310111][  T144] tipc: Left network mode
[  387.329833][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  388.850844][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.980'.
[  388.872310][ T8556] device team1 entered promiscuous mode
[  388.878642][ T8556] 8021q: adding VLAN 0 to HW filter on device team1
[  392.862254][ T8614] device syzkaller0 entered promiscuous mode
[  392.935540][ T8606] loop8: detected capacity change from 0 to 2048
[  392.982794][ T8606] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  393.069695][ T8606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.039957][  T144] device hsr_slave_0 left promiscuous mode
[  394.059883][  T144] device hsr_slave_1 left promiscuous mode
[  394.100683][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.258280][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.316599][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.334756][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.395728][  T144] device bridge_slave_1 left promiscuous mode
[  394.402402][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.421834][  T144] device bridge_slave_0 left promiscuous mode
[  394.437542][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.489497][  T144] device veth1_macvtap left promiscuous mode
[  394.504021][  T144] device veth0_macvtap left promiscuous mode
[  394.533524][  T144] device veth1_vlan left promiscuous mode
[  394.542278][  T144] device veth0_vlan left promiscuous mode
[  394.967234][  T144] bond1 (unregistering): (slave geneve2): Releasing backup interface
[  394.984032][  T144] bond1 (unregistering): Released all slaves
[  395.122947][ T4241] smc: removing ib device syz2
[  397.422795][  T144] team0 (unregistering): Port device team_slave_1 removed
[  397.524086][  T144] team0 (unregistering): Port device team_slave_0 removed
[  397.599811][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.665317][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.913503][  T144] bond0 (unregistering): Released all slaves
[  399.143266][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  399.149670][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  404.998197][ T8753] loop8: detected capacity change from 0 to 256
[  405.091982][ T8753] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  405.190928][ T8753] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  405.275840][ T8753] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  406.684726][ T8766] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  410.011464][ T8828] batman_adv: batadv0: Adding interface: dummy0
[  410.502360][ T8828] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.548376][ T8828] batman_adv: batadv0: Interface activated: dummy0
[  410.611613][ T8834] batadv0: mtu less than device minimum
[  410.660536][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.673877][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.686524][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.699322][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.712034][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.724682][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.737374][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.750165][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  410.762914][ T8834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  412.334095][ T8870] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  412.451755][ T8879] netlink: 'syz.1.1055': attribute type 10 has an invalid length.
[  412.543017][ T8879] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  412.618240][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1056'.
[  412.924061][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  414.110759][   T23] usb 1-1: Using ep0 maxpacket: 16
[  414.211424][ T8907] bridge0: port 3(erspan0) entered blocking state
[  414.247806][ T8907] bridge0: port 3(erspan0) entered disabled state
[  414.260566][   T23] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.272637][ T8907] device erspan0 entered promiscuous mode
[  414.278755][ T8907] bridge0: port 3(erspan0) entered blocking state
[  414.285275][ T8907] bridge0: port 3(erspan0) entered forwarding state
[  414.326457][   T23] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.377005][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[  414.411289][ T8917] device erspan0 left promiscuous mode
[  414.416976][ T8917] bridge0: port 3(erspan0) entered disabled state
[  414.442333][   T23] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  414.451648][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.477092][   T23] usb 1-1: config 0 descriptor??
[  415.580187][   T23] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0
[  415.607407][   T23] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0
[  415.615042][   T23] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0
[  415.636696][   T23] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0
[  415.700199][   T23] hid-generic 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  417.333349][   T23] usb 1-1: USB disconnect, device number 2
[  417.369905][ T8932] fido_id[8932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  419.025029][ T8973] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  420.314146][   T26] audit: type=1800 audit(2000000032.028:6): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1081" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  420.885287][ T9000] loop0: detected capacity change from 0 to 512
[  427.983272][ T9066] loop9: detected capacity change from 0 to 1024
[  428.283011][ T9066] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  428.344877][ T9069] loop8: detected capacity change from 0 to 256
[  428.522970][ T9069] FAT-fs (loop8): Directory bread(block 64) failed
[  428.557950][ T9069] FAT-fs (loop8): Directory bread(block 65) failed
[  428.577093][ T9091] EXT4-fs warning (device loop9): ext4_rmdir:3243: inode #11: comm syz.9.1100: empty directory 'file0' has too many links (111)
[  428.588116][ T9069] FAT-fs (loop8): Directory bread(block 66) failed
[  428.650506][ T9094] overlayfs: failed to clone lowerpath
[  428.660907][ T9069] FAT-fs (loop8): Directory bread(block 67) failed
[  428.667614][ T9069] FAT-fs (loop8): Directory bread(block 68) failed
[  428.712343][ T9069] FAT-fs (loop8): Directory bread(block 69) failed
[  428.735602][ T9069] FAT-fs (loop8): Directory bread(block 70) failed
[  428.743956][ T9069] FAT-fs (loop8): Directory bread(block 71) failed
[  428.750844][ T9069] FAT-fs (loop8): Directory bread(block 72) failed
[  428.779727][ T9069] FAT-fs (loop8): Directory bread(block 73) failed
[  428.806378][ T9101] device batadv_slave_0 entered promiscuous mode
[  428.834697][ T9099] device batadv_slave_0 left promiscuous mode
[  428.944692][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1108'.
[  429.546648][ T9122] netlink: 'syz.1.1112': attribute type 1 has an invalid length.
[  430.455505][ T9125] 8021q: adding VLAN 0 to HW filter on device bond3
[  430.473305][   T26] audit: type=1800 audit(2000000041.522:7): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1104" name="bus" dev="ramfs" ino=49155 res=0 errno=0
[  430.552120][ T9125] bond2: (slave bond3): making interface the new active one
[  430.614085][ T9125] bond2: (slave bond3): Enslaving as an active interface with an up link
[  430.761609][ T9127] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  432.302429][   T26] audit: type=1804 audit(2000000043.234:8): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1119" name="bus" dev="ramfs" ino=48973 res=1 errno=0
[  432.397206][ T9156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1121'.
[  432.497695][   T26] audit: type=1804 audit(2000000043.262:9): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1119" name="bus" dev="ramfs" ino=48973 res=1 errno=0
[  433.919062][ T9183] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  433.948564][ T9183] team0 (unregistering): Port device team_slave_0 removed
[  433.988282][ T9183] team0 (unregistering): Failed to send options change via netlink (err -105)
[  434.009774][ T9183] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  434.027732][ T9183] team0 (unregistering): Port device team_slave_1 removed
[  434.085767][ T9182] net_ratelimit: 11 callbacks suppressed
[  434.085847][ T9182] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  434.162065][ T9190] netlink: 'syz.8.1129': attribute type 1 has an invalid length.
[  434.623558][ T9205] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  435.819452][ T9217] device syzkaller0 entered promiscuous mode
[  440.045594][ T9261] batman_adv: batadv0: Adding interface: dummy0
[  440.077163][ T9261] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.671714][ T9273] loop8: detected capacity change from 0 to 512
[  440.887741][ T9261] batman_adv: batadv0: Interface activated: dummy0
[  440.965954][ T9270] batadv0: mtu less than device minimum
[  441.024899][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.037830][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.050676][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.063502][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.076302][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.089111][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.101893][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.114676][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.127502][ T9270] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.228636][ T9288] Error parsing options; rc = [-22]
[  441.275101][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'.
[  441.710567][ T9273] EXT4-fs (loop8): Ignoring removed orlov option
[  443.702760][ T9273] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  443.725865][ T9273] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  443.810608][ T9273] EXT4-fs: failed to create workqueue
[  443.847889][ T9273] EXT4-fs (loop8): mount failed
[  445.702014][ T9319] loop9: detected capacity change from 0 to 128
[  446.083485][ T9329] device syzkaller0 entered promiscuous mode
[  446.489015][ T9335] loop8: detected capacity change from 0 to 4096
[  446.636261][ T9335] ntfs: volume version 3.1.
[  449.156425][ T9351] loop0: detected capacity change from 0 to 1024
[  449.203574][ T9351] EXT4-fs (loop0): Test dummy encryption mode enabled
[  449.246846][ T9351] EXT4-fs (loop0): inline encryption not supported
[  449.331019][ T9351] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  449.478033][ T9359] netlink: 'syz.5.1165': attribute type 10 has an invalid length.
[  449.525372][ T8851] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.623789][ T5657] syz-executor (5657) used greatest stack depth: 19920 bytes left
[  449.649082][   T26] audit: type=1804 audit(2000000059.463:10): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1164" name="/newroot/34/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  449.665602][ T8851] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  449.795186][ T8851] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.815671][ T8851] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  450.859338][ T8851] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.882171][ T8851] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  451.002651][ T9379] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  451.042161][ T8851] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.098410][ T8851] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  451.216916][   T26] audit: type=1326 audit(2000000060.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  451.408268][   T26] audit: type=1326 audit(2000000061.006:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.279416][   T26] audit: type=1326 audit(2000000061.006:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.360199][   T26] audit: type=1326 audit(2000000061.006:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.398900][   T26] audit: type=1326 audit(2000000061.006:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.427247][   T26] audit: type=1326 audit(2000000061.006:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.452559][   T26] audit: type=1326 audit(2000000061.006:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.477463][   T26] audit: type=1326 audit(2000000061.072:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.502332][   T26] audit: type=1326 audit(2000000061.072:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.5.1176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  452.659630][ T8851] tipc: Left network mode
[  452.764248][ T8851] device ip6gretap0 left promiscuous mode
[  452.926006][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1181'.
[  453.288712][ T9411] chnl_net:caif_netlink_parms(): no params data found
[  453.679804][ T9411] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.690415][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.720044][ T9411] device bridge_slave_0 entered promiscuous mode
[  453.846956][ T9411] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.854223][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.862631][ T9411] device bridge_slave_1 entered promiscuous mode
[  453.941904][ T9411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.145555][ T9411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.596285][ T4771] Bluetooth: hci2: command 0x0409 tx timeout
[  455.185085][ T9411] team0: Port device team_slave_0 added
[  455.193483][ T9411] team0: Port device team_slave_1 added
[  455.319874][ T9411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.355129][ T9411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.431809][ T9411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.444817][ T9411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.451906][ T9411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.478750][ T9411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.342653][ T9411] device hsr_slave_0 entered promiscuous mode
[  456.382139][ T9411] device hsr_slave_1 entered promiscuous mode
[  456.411052][ T9411] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  456.430217][ T9411] Cannot create hsr debugfs directory
[  456.485152][ T9491] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1191'.
[  456.505693][ T9488] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  456.604189][ T9461] orangefs_mount: mount request failed with -4
[  456.627426][ T8851] device bridge0 left promiscuous mode
[  456.633895][ T8851] device veth5 left promiscuous mode
[  456.646809][ T8851] bridge1: port 2(veth5) entered disabled state
[  456.671690][ T8851] device veth3 left promiscuous mode
[  456.681009][ T8851] bridge1: port 1(veth3) entered disabled state
[  456.714015][ T8851] device hsr_slave_0 left promiscuous mode
[  456.726346][ T8851] device hsr_slave_1 left promiscuous mode
[  456.740033][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.755841][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.774019][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.797260][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.830541][ T4771] Bluetooth: hci2: command 0x041b tx timeout
[  456.845383][ T8851] device bridge_slave_1 left promiscuous mode
[  456.858705][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.873733][ T8851] device bridge_slave_0 left promiscuous mode
[  456.887131][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.122771][ T8851] device veth1_macvtap left promiscuous mode
[  457.153089][ T8851] device veth0_macvtap left promiscuous mode
[  457.159509][ T8851] device veth1_vlan left promiscuous mode
[  457.165758][ T8851] device veth0_vlan left promiscuous mode
[  457.972292][ T8851] bond0 (unregistering): (slave geneve2): Releasing backup interface
[  457.994698][ T8851] bond0 (unregistering): Released all slaves
[  458.014409][ T8851] bond1 (unregistering): Released all slaves
[  458.809592][ T9520] Invalid ELF header magic: != ELF
[  459.173648][   T21] Bluetooth: hci2: command 0x040f tx timeout
[  459.355158][ T8851] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.433586][ T8851] .` (unregistering): Released all slaves
[  459.951764][ T9491] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1191'.
[  460.609469][ T9535] loop8: detected capacity change from 0 to 256
[  460.778626][ T9532] netlink: 'syz.0.1200': attribute type 2 has an invalid length.
[  460.787358][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1202'.
[  460.869454][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  460.869534][   T26] audit: type=1800 audit(2000000069.958:44): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1201" name="file1" dev="loop8" ino=1048654 res=0 errno=0
[  460.881682][ T9535] exFAT-fs (loop8): hint_cluster is invalid (17)
[  460.938697][ T9535] exFAT-fs (loop8): error, invalid dentry access beyond EOF (clu : 5, eidx : 129)
[  460.952382][ T9535] exFAT-fs (loop8): Filesystem has been set read-only
[  460.965046][ T9535] exFAT-fs (loop8): error, invalid dentry access beyond EOF (clu : 5, eidx : 129)
[  461.353095][ T4771] Bluetooth: hci2: command 0x0419 tx timeout
[  461.674093][ T9556] syz.8.1208[9556] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  461.674228][ T9556] syz.8.1208[9556] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  462.570540][ T9411] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  462.717983][ T9565] loop0: detected capacity change from 0 to 512
[  462.773718][ T9411] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  462.867284][ T9411] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  462.891221][ T9565] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  463.891039][ T9411] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  463.912898][ T9565] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1211: invalid indirect mapped block 32768 (level 2)
[  464.003961][ T9565] EXT4-fs (loop0): 1 orphan inode deleted
[  464.009943][ T9565] EXT4-fs (loop0): 1 truncate cleaned up
[  464.031418][ T9565] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,nolazytime,,errors=continue. Quota mode: none.
[  464.617940][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  464.634395][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  465.309318][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1217'.
[  465.633849][ T9588] team0: Port device team_slave_1 removed
[  466.513556][ T9411] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.532517][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1220'.
[  466.622720][ T9602] netlink: 'syz.5.1223': attribute type 11 has an invalid length.
[  466.651888][ T9411] 8021q: adding VLAN 0 to HW filter on device team0
[  466.728575][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  466.742479][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  466.792778][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  466.817330][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  466.827848][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.834929][ T8991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.858211][ T4772] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  466.881922][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  466.906516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  466.918907][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  466.944605][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.951712][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.066213][ T4772] usb 9-1: Using ep0 maxpacket: 16
[  468.094444][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  468.229985][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  468.454835][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  468.594668][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  468.712561][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  468.782075][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  468.841766][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  468.862646][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  468.886596][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  468.951293][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  468.975150][ T4772] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.984972][ T4772] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  468.986430][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  469.034909][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  469.039053][ T4772] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  469.072983][ T4772] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.107244][ T4772] usb 9-1: config 0 descriptor??
[  469.208357][ T9630] tipc: Failed to remove unknown binding: 66,0,0/0:2147399478/2147399480
[  469.217682][ T9630] tipc: Failed to remove unknown binding: 66,0,0/0:2147399478/2147399479
[  469.228532][ T9630] tipc: Failed to remove unknown binding: 66,0,0/0:2147399478/2147399480
[  469.237620][ T9630] tipc: Failed to remove unknown binding: 66,0,0/0:2147399478/2147399479
[  469.297791][ T4772] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  469.952202][ T4520] usb 9-1: USB disconnect, device number 5
[  470.717276][ T8868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  470.856013][ T8868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  471.275972][ T9411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.916450][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1242'.
[  473.078850][ T9692] 8021q: adding VLAN 0 to HW filter on device bond1
[  473.156773][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  473.183212][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  473.250198][ T9699] device bond0 entered promiscuous mode
[  473.280013][ T9699] device bond_slave_0 entered promiscuous mode
[  473.308584][ T9699] device bond_slave_1 entered promiscuous mode
[  473.325589][ T9699] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  473.341390][ T9699] bond1: (slave macvlan2): making interface the new active one
[  473.362586][ T9699] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  473.422808][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  473.436975][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  473.496592][ T9411] device veth0_vlan entered promiscuous mode
[  473.508474][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  473.521833][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  473.545050][ T9411] device veth1_vlan entered promiscuous mode
[  473.706792][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  473.733118][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  473.741308][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  473.750036][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  473.771205][ T9411] device veth0_macvtap entered promiscuous mode
[  473.814977][ T9411] device veth1_macvtap entered promiscuous mode
[  473.841841][ T9411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.855531][ T9411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.870041][ T9411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.891189][ T9411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.904563][ T9411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.919534][ T9411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.939621][ T9411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.948266][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  473.965677][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  473.991298][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  474.002128][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  474.017467][ T9411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.036473][ T9411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.058091][ T9411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.074519][ T9411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.085623][ T9411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.103465][ T9411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.121004][ T9411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.138662][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  474.153829][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  474.176321][ T9411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.199100][ T9411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.221429][ T9411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.243958][ T9411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.390226][ T8844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.403837][ T8844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.425319][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  474.561883][ T8851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.581419][ T8851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.605678][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  474.831505][ T9736] overlayfs: failed to clone upperpath
[  477.938877][ T9759] loop8: detected capacity change from 0 to 512
[  478.056060][ T9759] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  478.114257][ T9759] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  478.218527][ T9759] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.1257: corrupted in-inode xattr
[  478.238804][ T9759] EXT4-fs (loop8): Remounting filesystem read-only
[  478.254466][ T9759] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.1257: couldn't read orphan inode 15 (err -117)
[  478.324330][ T9759] EXT4-fs (loop8): Remounting filesystem read-only
[  478.341122][ T9771] netlink: 'syz.4.1259': attribute type 11 has an invalid length.
[  478.356605][ T9759] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,dioread_lock,mblk_io_submit,errors=remount-ro,nombcache,. Quota mode: none.
[  478.725216][ T9771] loop4: detected capacity change from 0 to 512
[  478.745491][ T9771] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  478.875545][ T9771] EXT4-fs (loop4): orphan cleanup on readonly fs
[  478.988511][ T9771] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  479.052776][ T9771] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  479.084164][ T9771] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1259: bad orphan inode 768
[  479.130570][ T9771] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback.
[  479.274399][ T9771] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  479.541558][ T9771] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4.
[  483.095759][ T1326] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  484.560989][ T1326] usb 9-1: Using ep0 maxpacket: 32
[  484.857322][ T9892] loop4: detected capacity change from 0 to 32768
[  484.936055][ T1326] usb 9-1: unable to read config index 0 descriptor/start: -71
[  484.946141][ T1326] usb 9-1: can't read configurations, error -71
[  484.999690][ T9892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1286 (9892)
[  485.066354][ T9892] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  485.075402][ T9892] BTRFS info (device loop4): turning on sync discard
[  485.082170][ T9892] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  485.091715][ T9892] BTRFS info (device loop4): use zstd compression, level 3
[  485.099120][ T9892] BTRFS info (device loop4): turning on async discard
[  485.106006][ T9892] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  485.116719][ T9892] BTRFS info (device loop4): trying to use backup root at mount time
[  485.124944][ T9892] BTRFS info (device loop4): enabling auto defrag
[  485.133852][ T9892] BTRFS info (device loop4): using free space tree
[  485.140732][ T9892] BTRFS info (device loop4): has skinny extents
[  488.674651][ T9892] BTRFS error (device loop4): open_ctree failed: -12
[  488.717917][ T7956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (7956)
[  488.874093][ T9974] netlink: 'syz.1.1296': attribute type 12 has an invalid length.
[  490.127634][ T9997] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  490.398890][ T9963] Bluetooth: hci0: command 0x0406 tx timeout
[  492.181900][T10024] device syzkaller0 entered promiscuous mode
[  493.533437][T10058] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5516] was attempted by ""[10058]
[  493.627981][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'.
[  494.376367][T10046] 8021q: adding VLAN 0 to HW filter on device bond4
[  494.408157][T10053] device macvlan2 entered promiscuous mode
[  494.450108][T10055] bond4: (slave vti0): refused to change device type
[  494.460070][T10064] xt_connbytes: Forcing CT accounting to be enabled
[  494.511958][T10064] xt_CT: No such helper "netbios-ns"
[  500.587122][T10140] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000
[  503.288924][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'.
[  503.345401][T10175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1348'.
[  503.468350][T10175] device geneve2 entered promiscuous mode
[  504.169660][T10206] netlink: 'syz.8.1355': attribute type 10 has an invalid length.
[  504.313930][T10206] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  505.624994][T10226] loop4: detected capacity change from 0 to 1024
[  505.661329][T10226] EXT4-fs (loop4): Test dummy encryption mode enabled
[  505.684344][T10226] EXT4-fs (loop4): inline encryption not supported
[  505.733936][T10226] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  506.006740][   T26] audit: type=1804 audit(2000000112.173:45): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1361" name="/newroot/21/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  506.438733][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1362'.
[  506.460062][T10205] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  506.512581][T10239] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1362'.
[  508.259622][T10284] netlink: 'syz.8.1373': attribute type 1 has an invalid length.
[  509.412427][T10298] loop4: detected capacity change from 0 to 2048
[  510.113090][T10310] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  510.553280][T10314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  510.694779][T10318] netlink: 'syz.1.1382': attribute type 1 has an invalid length.
[  510.876952][ T5242] net_ratelimit: 10 callbacks suppressed
[  510.876971][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.847739][T10318] device bond5 entered promiscuous mode
[  512.487960][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.502915][T10318] 8021q: adding VLAN 0 to HW filter on device bond5
[  513.585832][ T8868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.608031][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.045981][ T8839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.070800][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.078991][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.183485][T10354] loop4: detected capacity change from 0 to 512
[  514.236969][T10354] EXT4-fs (loop4): Ignoring removed oldalloc option
[  514.285069][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.604531][ T8860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.937585][T10354] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  515.062218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.851220][T10375] tipc: Failed to remove unknown binding: 66,0,0/2099199:1043689721/1043689722
[  517.384913][T10376] tipc: Failed to remove unknown binding: 66,0,0/2099199:3480049720/3480049722
[  517.783740][ T4771] net_ratelimit: 5 callbacks suppressed
[  517.783758][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.535697][T10402] loop8: detected capacity change from 0 to 512
[  519.627034][T10402] FAT-fs (loop8): bogus logical sector size 0
[  519.634713][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'.
[  519.683696][T10402] FAT-fs (loop8): Can't find a valid FAT filesystem
[  519.750252][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.780463][   T26] audit: type=1326 audit(2000000125.062:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  519.847692][T10413] 8021q: adding VLAN 0 to HW filter on device bond1
[  519.852158][   T26] audit: type=1326 audit(2000000125.100:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  519.854533][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.879211][   T26] audit: type=1326 audit(2000000125.100:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  519.887169][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.915155][   T26] audit: type=1326 audit(2000000125.100:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  519.922518][ T8860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.005854][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.014876][T10415] device bond1 entered promiscuous mode
[  520.124949][T10415] 8021q: adding VLAN 0 to HW filter on device bond1
[  520.232997][   T26] audit: type=1326 audit(2000000125.100:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  520.452967][T10415] team0: Port device bond1 added
[  520.787252][T10419] device team_slave_1 entered promiscuous mode
[  520.801662][   T26] audit: type=1326 audit(2000000125.109:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  520.878382][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.903547][   T26] audit: type=1326 audit(2000000125.109:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  520.948562][T10419] team0: Port device team_slave_1 removed
[  520.958762][T10419] bond1: (slave team_slave_1): Enslaving as an active interface with an up link
[  520.988433][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  521.017055][   T26] audit: type=1326 audit(2000000125.109:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  521.065876][   T26] audit: type=1326 audit(2000000125.109:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  521.225354][ T8851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.243250][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.292190][   T26] audit: type=1326 audit(2000000125.119:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.5.1405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa6cb7b6e59 code=0x7ffc0000
[  521.317044][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.690854][T10464] hugetlbfs: syz.8.1416 (10464): Using mlock ulimits for SHM_HUGETLB is deprecated
[  524.269492][ T4771] net_ratelimit: 1 callbacks suppressed
[  524.269508][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.295713][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.345499][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.595611][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.899686][T10496] netlink: 'syz.8.1424': attribute type 1 has an invalid length.
[  526.178569][T10496] device bond2 entered promiscuous mode
[  533.020034][  T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.035293][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  533.123582][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  533.130183][T10496] 8021q: adding VLAN 0 to HW filter on device bond2
[  533.136178][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.162983][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.190747][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.229983][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.309435][T10504] bond2: (slave erspan1): making interface the new active one
[  533.375286][T10504] device erspan1 entered promiscuous mode
[  533.383806][T10504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.384524][T10523] loop4: detected capacity change from 0 to 1024
[  533.418122][T10504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.849398][T10504] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  534.189585][T10512] device bridge0 entered promiscuous mode
[  534.220613][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.228826][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.253935][T10504] syz.8.1424 (10504) used greatest stack depth: 19736 bytes left
[  534.263445][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  534.327300][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.439738][T10530] loop8: detected capacity change from 0 to 2048
[  537.095939][T10530] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none.
[  537.824956][T10548] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1436'.
[  537.863522][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'.
[  537.998091][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'.
[  538.047458][T10548] netlink: 'syz.1.1436': attribute type 11 has an invalid length.
[  538.745801][  T144] net_ratelimit: 10 callbacks suppressed
[  538.745820][  T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.682898][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.990046][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.998253][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.139994][T10586] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.208945][T10586] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  542.263904][T10586] bond1: (slave macvlan3): making interface the new active one
[  542.296460][T10597] futex_wake_op: syz.0.1446 tries to shift op by 144; fix this program
[  542.299447][T10586] bond1: (slave macvlan3): Enslaving as an active interface with an up link
[  542.362607][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1445'.
[  542.378603][T10582] loop4: detected capacity change from 0 to 4096
[  542.392713][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  542.408258][T10582] EXT4-fs (loop4): Test dummy encryption mode enabled
[  542.473503][T10582] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  542.535876][T10595] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  542.734596][T10615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1450'.
[  542.764667][ T8860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.847236][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.204690][T10641] Set syz0 is full, maxelem 0 reached
[  544.218566][T10642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.296925][T10642] tipc: Resetting bearer <eth:syzkaller0>
[  544.486627][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.626313][ T8839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.697626][T10648] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1456'.
[  544.706727][T10648] batman_adv: batadv0: Interface deactivated: dummy0
[  544.996397][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.371665][T10648] batman_adv: batadv0: Removing interface: dummy0
[  545.560724][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.762464][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.866870][ T8839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.213873][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.279806][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.956599][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.246913][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.323920][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.410568][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.428794][T10695] bond0: (slave dummy0): Releasing backup interface
[  551.609208][T10695] bond2: (slave bond3): Releasing backup interface
[  551.688490][T10727] xt_CONNSECMARK: invalid mode: 0
[  552.194655][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.351176][T10695] bond2: (slave bond3): the permanent HWaddr of slave - 0e:6c:22:0c:78:fa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  552.473767][T10695] bond2: (slave gretap1): making interface the new active one
[  552.505017][T10695] bond2: (slave gretap1): Releasing backup interface
[  552.522564][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.533422][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.580679][T10695] bond1: (slave macvlan3): Releasing active interface
[  552.614798][T10695] bond1: (slave macvlan3): the permanent HWaddr of slave - 0e:d7:f8:79:bd:15 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  552.726563][T10695] bond1: (slave ip6gretap1): making interface the new active one
[  552.771962][T10695] bond1: (slave ip6gretap1): Releasing active interface
[  553.160576][T10742] netem: change failed
[  553.741216][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.228003][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.836128][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.344686][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.718708][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.772095][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.844344][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.203077][ T8839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.447282][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.484000][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.546071][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.647785][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.764650][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.343719][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.709807][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  563.127585][ T8842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.280785][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.481197][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.581576][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.977041][ T8868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.008816][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.483643][T10932] overlayfs: failed to clone lowerpath
[  565.545982][T10936] overlayfs: failed to clone lowerpath
[  565.716546][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.377263][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.554558][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.807244][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.945133][ T8868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.218483][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.253680][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.370674][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.802269][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.914381][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.977242][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.188641][T11016] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1531'.
[  572.345085][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.133236][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.486906][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.876288][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.273497][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.680275][T11079] ipt_REJECT: TCP_RESET invalid for non-tcp
[  576.391701][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.447224][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.863450][ T9962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.774291][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.289209][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.387943][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.403553][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.448847][ T8842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.458573][T11099] device syzkaller0 entered promiscuous mode
[  581.681965][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.350326][T11129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.359841][T11129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.368235][T11129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.376704][T11129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.224027][ T8844] net_ratelimit: 127 callbacks suppressed
[  583.224049][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.920005][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.051052][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.238457][ T8868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.333418][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.462088][T11171] device bond0 entered promiscuous mode
[  585.467713][T11171] device bond_slave_0 entered promiscuous mode
[  585.492771][T11171] device bond_slave_1 entered promiscuous mode
[  585.550068][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.475845][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.013462][T11193] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  587.122760][ T5242] Bluetooth: hci2: command 0x0406 tx timeout
[  587.183018][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.406992][ T8851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.945667][ T8842] net_ratelimit: 1 callbacks suppressed
[  588.945688][ T8842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.066015][ T5242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.505789][T11254] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  590.153288][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.798591][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.827601][ T8851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.266819][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.046517][ T8868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.287729][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.426658][ T8868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.344697][ T9964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.434047][T11338] loop4: detected capacity change from 0 to 512
[  594.456293][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.494296][T11345] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  594.519554][T11346] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  594.586206][T11338] EXT4-fs (loop4): Ignoring removed oldalloc option
[  594.602899][T11338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  594.704820][T11346] syzkaller0: mtu less than device minimum
[  594.753259][T11338] EXT4-fs (loop4): 1 truncate cleaned up
[  594.759522][T11338] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000007,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  595.710282][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.535205][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.536323][ T8844] 
[  596.545677][ T8844] ============================================
[  596.551841][ T8844] WARNING: possible recursive locking detected
[  596.558004][ T8844] syzkaller #0 Not tainted
[  596.562433][ T8844] --------------------------------------------
[  596.568593][ T8844] kworker/u4:21/8844 is trying to acquire lock:
[  596.574843][ T8844] ffff88805f725a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1fd1/0x2f80
[  596.576537][T11338] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1602: Invalid inode table block 3235117944 in block_group 0
[  596.587037][ T8844] 
[  596.587037][ T8844] but task is already holding lock:
[  596.587047][ T8844] ffff888062e0d258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1120/0x2f80
[  596.587107][ T8844] 
[  596.587107][ T8844] other info that might help us debug this:
[  596.587114][ T8844]  Possible unsafe locking scenario:
[  596.587114][ T8844] 
[  596.587119][ T8844]        CPU0
[  596.587123][ T8844]        ----
[  596.587126][ T8844]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock);
[  596.587141][ T8844]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock);
[  596.587155][ T8844] 
[  596.587155][ T8844]  *** DEADLOCK ***
[  596.587155][ T8844] 
[  596.587160][ T8844]  May be due to missing lock nesting notation
[  596.587160][ T8844] 
[  596.587166][ T8844] 9 locks held by kworker/u4:21/8844:
[  596.587177][ T8844]  #0: ffff88801f751938 ((wq_completion)bond2#2){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  596.667112][T11338] EXT4-fs error (device loop4): empty_inline_dir:1847: inode #12: comm syz.4.1602: error -117 getting inode 12 block
[  596.672963][ T8844]  #1: ffffc9000304fd00 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  596.713255][ T8844]  #2: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  596.714008][T11378] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1602: Invalid inode table block 3235117944 in block_group 0
[  596.722714][ T8844]  #3: ffffffff8c31f3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  596.722777][ T8844]  #4: ffff888062e0d258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1120/0x2f80
[  596.722825][ T8844]  #5: ffff8880264e6498 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x162/0x4b0
[  596.767732][ T8844]  #6: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  596.777135][ T8844]  #7: ffffffff8c31f3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  596.786749][ T8844]  #8: ffffffff8c31f3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  596.796358][ T8844] 
[  596.796358][ T8844] stack backtrace:
[  596.802260][ T8844] CPU: 1 PID: 8844 Comm: kworker/u4:21 Not tainted syzkaller #0
[  596.809905][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  596.819975][ T8844] Workqueue: bond2 bond_alb_monitor
[  596.825204][ T8844] Call Trace:
[  596.828547][ T8844]  <TASK>
[  596.831544][ T8844]  dump_stack_lvl+0x188/0x250
[  596.836354][ T8844]  ? show_regs_print_info+0x20/0x20
[  596.841625][ T8844]  ? load_image+0x400/0x400
[  596.846166][ T8844]  __lock_acquire+0x1236/0x7d10
[  596.851118][ T8844]  ? mark_lock+0x94/0x320
[  596.855468][ T8844]  ? verify_lock_unused+0x140/0x140
[  596.860692][ T8844]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  596.866699][ T8844]  ? mark_lock+0x94/0x320
[  596.871046][ T8844]  ? __lock_acquire+0x13bc/0x7d10
[  596.876101][ T8844]  lock_acquire+0x19e/0x400
[  596.880628][ T8844]  ? __dev_queue_xmit+0x1fd1/0x2f80
[  596.885857][ T8844]  ? read_lock_is_recursive+0x10/0x10
[  596.891251][ T8844]  ? rcu_read_lock_bh_held+0x76/0xf0
[  596.896635][ T8844]  ? rcu_read_lock_held+0x40/0x40
[  596.901685][ T8844]  ? verify_lock_unused+0x140/0x140
[  596.906912][ T8844]  _raw_spin_lock+0x2a/0x40
[  596.911523][ T8844]  ? __dev_queue_xmit+0x1fd1/0x2f80
[  596.916744][ T8844]  __dev_queue_xmit+0x1fd1/0x2f80
[  596.921786][ T8844]  ? rcu_lockdep_current_cpu_online+0x35/0x130
[  596.927955][ T8844]  ? dev_queue_xmit+0x20/0x20
[  596.932654][ T8844]  ? mark_lock+0x94/0x320
[  596.937007][ T8844]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  596.943014][ T8844]  ? lock_chain_count+0x20/0x20
[  596.947895][ T8844]  ? rcu_lock_acquire+0x30/0x30
[  596.952764][ T8844]  ? ip_finish_output2+0x8f7/0x10a0
[  596.957989][ T8844]  ? ip_finish_output2+0xaba/0x10a0
[  596.963216][ T8844]  ip_finish_output2+0xc87/0x10a0
[  596.968268][ T8844]  ? __ip_local_out+0x5e0/0x5e0
[  596.973143][ T8844]  ? ip_fragment+0x210/0x210
[  596.977758][ T8844]  ? ip_mc_finish_output+0x250/0x250
[  596.983071][ T8844]  ? ip_finish_output+0x3e8/0x4b0
[  596.988130][ T8844]  ip_output+0x2c0/0x3e0
[  596.992393][ T8844]  iptunnel_xmit+0x4d6/0x8e0
[  596.997092][ T8844]  ip_tunnel_xmit+0x1905/0x2280
[  597.001973][ T8844]  ? ip4_dst_hoplimit+0x2a0/0x2a0
[  597.007025][ T8844]  ? gre_build_header+0x25b/0x8c0
[  597.012135][ T8844]  erspan_xmit+0x9d5/0x15a0
[  597.016669][ T8844]  dev_hard_start_xmit+0x2a5/0x7e0
[  597.021811][ T8844]  sch_direct_xmit+0x25a/0x4b0
[  597.026596][ T8844]  ? mrp_pdu_append_vecattr_event+0x1590/0x1590
[  597.032866][ T8844]  __dev_queue_xmit+0x179f/0x2f80
[  597.037918][ T8844]  ? dev_queue_xmit+0x20/0x20
[  597.042611][ T8844]  ? __netdev_alloc_skb+0x121/0x4c0
[  597.047889][ T8844]  ? __alloc_skb+0x750/0x750
[  597.052504][ T8844]  ? memset+0x1e/0x40
[  597.056580][ T8844]  ? alb_send_lp_vid+0x387/0x660
[  597.061539][ T8844]  alb_send_learning_packets+0x125/0x2d0
[  597.067198][ T8844]  ? try_to_wake_up+0x3d4/0x1050
[  597.072235][ T8844]  ? bond_alb_monitor+0x1760/0x1760
[  597.077458][ T8844]  ? netdev_lower_get_next_private_rcu+0x9b/0xf0
[  597.083805][ T8844]  bond_alb_monitor+0x3ab/0x1760
[  597.088765][ T8844]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  597.094773][ T8844]  ? bond_alb_xmit+0x40/0x40
[  597.099384][ T8844]  ? try_to_wake_up+0x6cf/0x1050
[  597.104343][ T8844]  ? _raw_spin_unlock_irq+0x1f/0x40
[  597.109562][ T8844]  process_one_work+0x85f/0x1010
[  597.114526][ T8844]  ? worker_detach_from_pool+0x240/0x240
[  597.120175][ T8844]  ? lockdep_hardirqs_off+0x70/0x100
[  597.125548][ T8844]  ? _raw_spin_lock_irq+0xb7/0xf0
[  597.130590][ T8844]  ? _raw_spin_lock_irqsave+0x100/0x100
[  597.136158][ T8844]  ? wq_worker_running+0x97/0x170
[  597.141207][ T8844]  worker_thread+0xaa6/0x1290
[  597.145913][ T8844]  ? lockdep_hardirqs_on+0x94/0x140
[  597.151131][ T8844]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  597.157047][ T8844]  kthread+0x436/0x520
[  597.161137][ T8844]  ? rcu_lock_release+0x20/0x20
[  597.166009][ T8844]  ? kthread_blkcg+0xd0/0xd0
[  597.170617][ T8844]  ret_from_fork+0x1f/0x30
[  597.175102][ T8844]  </TASK>
[  597.178245][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.199254][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.594001][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.281165][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.770861][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.903018][    C1] net_ratelimit: 1 callbacks suppressed
[  599.903034][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.977725][ T8844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.512501][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.843734][ T4520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.175061][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.284820][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  601.291229][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  601.616823][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.361738][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.725672][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.537766][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.837296][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.943093][ T4241] net_ratelimit: 3 callbacks suppressed
[  605.943111][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.062190][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog