last executing test programs:

14m15.232334581s ago: executing program 1 (id=879):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x156d, 0x0, 0x0, &(0x7f0000008800), &(0x7f0000008840))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000008880)=[0xbf, 0x2], 0x2)

14m13.036843227s ago: executing program 1 (id=883):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0)
close(0xffffffffffffffff)
r0 = socket$kcm(0xa, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$kcm(r0, 0x0, 0x20000001)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, 0x0, &(0x7f0000000080)}, 0x20)
getpid()
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'rose0\x00', {0x2, 0x0, @broadcast}})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x8, 0x3}}, './file0\x00'})
mount$afs(&(0x7f00000001c0)=ANY=[@ANYBLOB='%sy1:syz0.readonly\x00\x00'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x2008408, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

14m11.134848674s ago: executing program 1 (id=886):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
r4 = socket(0x1e, 0x4, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r4, r3, 0x0, 0x8010002b)
syz_clone3(0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

14m10.037038412s ago: executing program 1 (id=887):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810)

14m7.446213586s ago: executing program 1 (id=893):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x3)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)

14m6.156241799s ago: executing program 1 (id=894):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

13m49.666731501s ago: executing program 32 (id=894):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

10m26.010052331s ago: executing program 3 (id=1290):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

10m25.788560197s ago: executing program 3 (id=1292):
add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$damon_target_ids(r0, 0x0, 0xffffff8b)
r1 = socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101})
r2 = getpid()
sched_setscheduler(r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x78, r4})

10m23.232079031s ago: executing program 3 (id=1299):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

10m20.127619539s ago: executing program 0 (id=1304):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x156d, 0x0, 0x0, &(0x7f0000008800), &(0x7f0000008840))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000008880)=[0xbf, 0x2], 0x2)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000240)={0xffffffff, 0xffffffffffffffff, 0x35, {0x3, 0x5}, 0x2}, 0x1)

10m19.741625179s ago: executing program 0 (id=1306):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, 0x0, 0x10b8}, 0x588)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

10m13.942122673s ago: executing program 0 (id=1314):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x156d, 0x0, 0x0, &(0x7f0000008800), &(0x7f0000008840))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000008880)=[0xbf, 0x2], 0x2)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000240)={0xffffffff, 0xffffffffffffffff, 0x35, {0x3, 0x5}, 0x2}, 0x1)

10m13.798821957s ago: executing program 3 (id=1316):
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180))
sendto(r3, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60)

10m13.67142377s ago: executing program 0 (id=1317):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

10m12.612803826s ago: executing program 3 (id=1318):
mkdirat(0xffffffffffffff9c, 0x0, 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
keyctl$assume_authority(0x10, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r5=>0x0})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5})

10m11.582804163s ago: executing program 0 (id=1322):
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x1eb080, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277})
syz_usb_disconnect(0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0)

10m11.149499714s ago: executing program 3 (id=1324):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x80)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

10m8.507787299s ago: executing program 0 (id=1328):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$llc(0x1a, 0x802, 0x0)
readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x94)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0xfffffffb, 0x3}})
close_range(r2, r1, 0x2)

9m56.058326041s ago: executing program 33 (id=1324):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x80)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

9m53.331730179s ago: executing program 34 (id=1328):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$llc(0x1a, 0x802, 0x0)
readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x94)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0xfffffffb, 0x3}})
close_range(r2, r1, 0x2)

14.271162974s ago: executing program 4 (id=2447):
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpgid(0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x0, &(0x7f0000005380)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r2]}}], 0x70, 0xc000}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"})
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06008100000000000000000500"], 0x48)

10.558747377s ago: executing program 5 (id=2454):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48)
epoll_create(0x3ff)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xe, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x108, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cce261"], 0x0)

9.466363694s ago: executing program 4 (id=2457):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/210, &(0x7f0000000140)=0xd2)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000003a935c5ae399bdc73afffe880000000000000000000000000201ff02000000000000000000000000000186009078ff02020001000000f6ffffff0501c89600000500b6da89dfeee5b5a4ff729cd8a09075d8f46096cf5a7c5bcba72b180d7ec95b661aa7c845a1b8230641277349e7f8add15af861c5e8cca4"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x210800, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "dc016d847281bccc3819f06bb4058484"}, 0x11, 0x2)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')

9.335922537s ago: executing program 2 (id=2459):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='quota,iocharset=cp437,noquota,errors=continue,discard=0x00000\x00\x00000000004,errors=continue,quota,discard,grpquota,\x00'], 0x1, 0x60b9, &(0x7f0000013cc0)="$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")
fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0x1}]}}}], 0x18}}], 0x1, 0x44008004)
write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
mknodat(r5, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4)
getdents64(r4, 0x0, 0x0)

8.656700644s ago: executing program 4 (id=2460):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = dup(0xffffffffffffffff)
write$binfmt_elf32(r3, &(0x7f0000000bc0)=ANY=[], 0x58)
finit_module(r3, 0x0, 0x3)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0xa, 0x5, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x1, 0x0, &(0x7f0000000000))
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa10000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='romfs\x00', 0x200000, 0x0)

7.63195834s ago: executing program 2 (id=2461):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
readv(r3, &(0x7f0000000040), 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, 0x0, 0x604000, 0x82)
landlock_restrict_self(0xffffffffffffffff, 0x3)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0x3, 0xfffffffe})
close_range(r4, r4, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_SET_MAC_ACL(r3, 0x0, 0x5)
munmap$IORING_OFF_SQ_RING(0x0, 0x80000000)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)={0x18, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x4)

7.62226068s ago: executing program 5 (id=2462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r0)
write(0xffffffffffffffff, &(0x7f0000000300)='0xa4a7\n\x00', 0x7)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0)
ioctl$TIOCSBRK(r2, 0x5427)
ioctl$TCSBRK(r2, 0x5409, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0)
ioctl$TCSBRK(r3, 0x5409, 0x0)
close(r3)
close(r2)

7.59548909s ago: executing program 4 (id=2463):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48)
epoll_create(0x3ff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xe, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x108, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)

6.707886653s ago: executing program 6 (id=2466):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x6, 0x0, 'queue0\x00', 0x105})
mkdir(0x0, 0x124)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x2a05004, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r4, &(0x7f0000000780)='./file0\x00', 0x200)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fdatasync(r6)
sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x40040, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @empty, 0xfffff800}, 0x1c)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0)

6.707246903s ago: executing program 5 (id=2467):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff02000000000000000000000000000100000000000000000000ffff0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000a89eb81a"], 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utimes(&(0x7f0000000f80)='./file0\x00', 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)

6.588292435s ago: executing program 4 (id=2468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100"], 0x1c}}, 0x0)
syz_open_dev$vim2m(0x0, 0xd2a, 0x2)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280)={@my=0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00')
ioctl$TCSETSF(r1, 0x5404, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004840)

6.587965995s ago: executing program 2 (id=2469):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x800, @multicast2}, 0x10, 0x0}, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = open(0x0, 0x108943, 0x148)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, 0x0, 0x8000040)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x840)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r7, &(0x7f00000001c0), 0x0}, 0x20)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, 0x0, 0x0)
bind$unix(r8, 0x0, 0x0)

4.570154046s ago: executing program 2 (id=2470):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48)
epoll_create(0x3ff)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xe, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x108, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cce261"], 0x0)

4.569862596s ago: executing program 5 (id=2471):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x40000)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000016000000000000000100000080000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000007703495d02d216b00000000000000000000000000b82a"], 0x50)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, r5)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000d0}, 0x4004000)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c4, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0xb0)

4.565423846s ago: executing program 4 (id=2472):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
clock_getres(0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2c2c}, 0x18, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)

4.367871561s ago: executing program 6 (id=2473):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0})
pipe2(&(0x7f0000000380)={0x0, <r2=>0x0}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
splice(r3, 0x0, r2, 0x0, 0x7, 0x3)
syz_io_uring_setup(0x53bc, &(0x7f00000001c0)={0x0, 0x4aea, 0x8000, 0x3, 0x30b}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))
mmap$IORING_OFF_SQES(0x0, 0x7bee, 0x300000f, 0x80013, r0, 0x10000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300))
r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb)
r5 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r5, 0x0, 0x8, 'syz1\x00', 0x0})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000540)=0x7b1)
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200280600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
syz_emit_ethernet(0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

3.934738682s ago: executing program 6 (id=2474):
syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00')
socket$nl_route(0x10, 0x3, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200020010010000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty=0xe0000000}}}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

2.758254321s ago: executing program 6 (id=2475):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
openat(0xffffffffffffff9c, 0x0, 0x442, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f016, 0x2})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r6, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134014030d9"})

2.757720761s ago: executing program 5 (id=2476):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d"], 0x20)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x56, 0x1, {{'cmac(aes)\x00'}, 0x70, "f76c53a22efbe5b37da0debc7f83"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e)

2.705386183s ago: executing program 2 (id=2477):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48)
epoll_create(0x3ff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xe, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x108, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)

1.175990411s ago: executing program 6 (id=2478):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
mmap(&(0x7f000077e000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r3, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$inet(r4, 0x0, 0x52cc)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'})
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000002140)={{0x2, 0x4e24, @multicast2}, {0x6, @broadcast}, 0x2, {0x2, 0x4e20, @multicast1}, 'pimreg\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)

1.175056171s ago: executing program 5 (id=2479):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000004ac0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x3d, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@end, @timestamp={0x44, 0x18, 0xd1, 0x0, 0x4, [0x6, 0x65, 0xed, 0x4, 0x8]}]}}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0)
readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xf7a}], 0x10000000000000b7)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'pim6reg0\x00', 0x3})
setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$eJzslb+r01AUx7/3Ji9pfW5uLg4+8DmYJqm/lgfPxclB8Edxs9i0VFMrbQZbEPEvcHdzcPFfEKGu/hFSBVEQXdT5SnJvkptqSltbing+0JNv7j09OfeccAKCIP5bPrz/ORU/Dj5VABzFHmy1/tnIfbjm/67y7dGbK5cbT80Xb+2pUy1Gs5d+vglgcslApO6FEELf31PX6+CZvgGO00o3wOAofRscN5UOwHBL6bua7u8oEQbOnX7YanfDwI2NFxs/NvXZ/L4+YWhp+TFtfzga32uGYTDYmLBKKjf5kuVXAQ60/PR+OZDZulr9PHB4StfBcE3pi7DhOE5eEu38x808vjH3/BaWP+SuvvIx6U660p5xNrBkHXfm+MS1Xa0xAPtz719t9m1YRVgorOBlvmXIrbSjW0917QJm8aR/EVDYBtaf4QV7DUPk9aHsX5bqY3lfdO7vzu/y4WLvz6KVz+aneM5wSptPcpQ8Sz4Wtaj3oDYcjc90e81O0Anu+379vHvWdc/5tWQQSVsyA+P41WQ+HZGhY6plvhaz8LAZRQNP2uzelzY/QP4fnsw/jv2TSL4cDMeuzsb9DiB9KFM/nlxjtW+UJk8QBLFFToBlg9NMhfqaqA1LCOH/NvQIgiAIgiAIgiAIgvhn+BUAAP//aA9ZjQ==")
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', <r5=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000001050000000800"], 0x0, 0x42, 0x0, 0x1}, 0x28)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r5})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x40010, r6, 0x8f7e9000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009c, 0x0, 0x1}]})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x14)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

198.259355ms ago: executing program 2 (id=2480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f00000003c0)=""/79, 0x5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})

0s ago: executing program 6 (id=2481):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='file f_subset.c +p\n', 0x13)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00')
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000540)='dummy_udc.0', 0xb)
clock_nanosleep(0x0, 0x0, &(0x7f0000000580)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000640)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000680)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000700)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000740)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000780)={0x0, 0x5f5e100}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000840)='\n', 0x1)

kernel console output (not intermixed with test programs):

0x0c25 length: 249 > 3
[  799.785271][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  800.215763][ T9951] Bluetooth: hci0: command tx timeout
[  800.352625][ T9051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.592311][ T9051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.613720][T11469] chnl_net:caif_netlink_parms(): no params data found
[  800.634695][T11496] lo speed is unknown, defaulting to 1000
[  800.779056][ T9051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.278748][ T9051] bond0: (slave netdevsim0): Releasing backup interface
[  801.318473][ T9951] Bluetooth: hci4: unexpected event for opcode 0x2019
[  801.496979][ T9051] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  801.588061][ T9051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.792018][T11525] netlink: 'syz.2.1360': attribute type 3 has an invalid length.
[  801.808302][T11469] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.815450][T11469] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.851047][T11469] bridge_slave_0: entered allmulticast mode
[  801.859514][T11469] bridge_slave_0: entered promiscuous mode
[  801.870964][T11469] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.882394][T11469] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.891343][T11469] bridge_slave_1: entered allmulticast mode
[  801.903681][T11469] bridge_slave_1: entered promiscuous mode
[  801.911093][ T9951] Bluetooth: hci2: command tx timeout
[  802.073727][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'.
[  802.225832][ T9951] Bluetooth: hci0: command tx timeout
[  802.367084][T11469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.552316][T11469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.966755][T11538] futex_wake_op: syz.4.1362 tries to shift op by 32; fix this program
[  803.032590][T11469] team0: Port device team_slave_0 added
[  803.044592][ T9051] tipc: Left network mode
[  803.078241][T11469] team0: Port device team_slave_1 added
[  803.102780][T11496] chnl_net:caif_netlink_parms(): no params data found
[  803.985845][ T9951] Bluetooth: hci2: command tx timeout
[  804.026691][T11469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  804.033667][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  804.082972][T11469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  804.096131][T11469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  804.103142][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  804.130194][T11469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  804.305796][ T9951] Bluetooth: hci0: command tx timeout
[  804.393541][T11496] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.403362][T11496] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.415156][T11496] bridge_slave_0: entered allmulticast mode
[  804.423957][T11496] bridge_slave_0: entered promiscuous mode
[  804.450908][T11469] hsr_slave_0: entered promiscuous mode
[  804.461019][T11469] hsr_slave_1: entered promiscuous mode
[  804.474708][T11469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  804.489600][T11469] Cannot create hsr debugfs directory
[  804.551443][T11496] bridge0: port 2(bridge_slave_1) entered blocking state
[  804.564716][T11496] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.574781][T11496] bridge_slave_1: entered allmulticast mode
[  804.588613][T11496] bridge_slave_1: entered promiscuous mode
[  804.673690][T11496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  804.757715][T11496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  804.893420][ T9051] bond2: (slave gretap1): Releasing active interface
[  805.003243][T11496] team0: Port device team_slave_0 added
[  805.042870][T11496] team0: Port device team_slave_1 added
[  805.136875][T11496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  805.167093][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.211879][T11496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  805.225447][T11496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  805.232772][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.263281][T11496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  805.393584][   T27] kauditd_printk_skb: 59 callbacks suppressed
[  805.393631][   T27] audit: type=1804 audit(1785517401.631:400): pid=11574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1367" name="bus" dev="ramfs" ino=25058 res=1 errno=0
[  805.587623][   T27] audit: type=1804 audit(1785517401.641:401): pid=11574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1367" name="bus" dev="ramfs" ino=25058 res=1 errno=0
[  806.065742][ T9951] Bluetooth: hci2: command tx timeout
[  806.727953][T11585] loop4: detected capacity change from 0 to 64
[  806.855966][T11469] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  807.019291][T11469] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  807.126973][T11496] hsr_slave_0: entered promiscuous mode
[  807.136828][T11496] hsr_slave_1: entered promiscuous mode
[  807.144151][T11496] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  807.241664][T11591] syz.4.1369: attempt to access beyond end of device
[  807.241664][T11591] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64
[  807.256478][T11591] Buffer I/O error on dev loop4, logical block 8388608, lost async page write
[  807.470295][T11496] Cannot create hsr debugfs directory
[  807.653332][ T9051] hsr_slave_0: left promiscuous mode
[  807.679366][ T9051] hsr_slave_1: left promiscuous mode
[  807.689834][ T9051] bridge_slave_1: left allmulticast mode
[  807.715562][ T9051] bridge_slave_1: left promiscuous mode
[  807.739061][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.758082][ T9051] bridge_slave_0: left allmulticast mode
[  807.767717][ T9051] bridge_slave_0: left promiscuous mode
[  807.790182][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.859477][ T9051] veth1_macvtap: left promiscuous mode
[  807.876017][ T9051] veth0_macvtap: left promiscuous mode
[  807.881720][ T9051] veth1_vlan: left promiscuous mode
[  807.912733][ T9051] veth0_vlan: left promiscuous mode
[  808.153584][ T9951] Bluetooth: hci2: command tx timeout
[  808.871804][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  808.886596][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  808.908330][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  810.581978][ T9051] bond2 (unregistering): Released all slaves
[  810.748990][ T9051] bond1 (unregistering): (slave veth3): Releasing active interface
[  810.772075][ T9051] bond1 (unregistering): Released all slaves
[  813.549858][T11624] NILFS (nbd2): device size too small
[  813.550683][ T9051] team0 (unregistering): Port device team_slave_1 removed
[  813.621740][ T9051] team0 (unregistering): Port device team_slave_0 removed
[  813.672924][ T9051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  813.682946][ T9051] bond_slave_1 (unregistering): left promiscuous mode
[  813.732895][ T9051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  813.744411][ T9051] bond_slave_0 (unregistering): left promiscuous mode
[  814.123314][ T9051] bond0 (unregistering): Released all slaves
[  814.183945][T11469] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  814.193633][T11469] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  814.213095][T11615] syz_tun: entered allmulticast mode
[  814.223134][T11615] syz_tun: left allmulticast mode
[  814.255942][T11617] netlink: 'syz.2.1376': attribute type 1 has an invalid length.
[  814.266854][T11617] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  814.331040][T11621] vlan2: entered allmulticast mode
[  814.344490][T11621] veth0_to_bond: entered allmulticast mode
[  814.737104][T11632] loop2: detected capacity change from 0 to 1024
[  814.776872][T11632] EXT4-fs: Ignoring removed bh option
[  814.793339][ T9051] IPVS: stop unused estimator thread 0...
[  814.823816][T11469] 8021q: adding VLAN 0 to HW filter on device bond0
[  814.852400][T11632] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  814.874039][T11469] 8021q: adding VLAN 0 to HW filter on device team0
[  814.925086][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.932335][ T9292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  814.977981][T11632] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002]
[  814.998082][T11632] System zones: 0-1, 3-12
[  815.027330][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.034462][ T9292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  815.036991][T11632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.382643][T11469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  815.394544][T11469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  815.848398][T11496] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  815.943537][T11496] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  815.962400][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  815.979432][T11496] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  816.019886][T11496] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  816.295958][ T6539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.522029][T11668] loop2: detected capacity change from 0 to 256
[  817.740163][ T6539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.791695][T11668] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d)
[  818.118354][   T27] audit: type=1800 audit(1785517414.371:402): pid=11667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1381" name="file1" dev="loop2" ino=1048669 res=0 errno=0
[  818.143535][T11667] syz.2.1381: attempt to access beyond end of device
[  818.143535][T11667] loop2: rw=0, sector=184, nr_sectors = 2239 limit=256
[  818.158864][T11667] syz.2.1381: attempt to access beyond end of device
[  818.158864][T11667] loop2: rw=0, sector=2423, nr_sectors = 2048 limit=256
[  818.175838][T11667] syz.2.1381: attempt to access beyond end of device
[  818.175838][T11667] loop2: rw=0, sector=4471, nr_sectors = 2056 limit=256
[  818.194605][T11667] syz.2.1381: attempt to access beyond end of device
[  818.194605][T11667] loop2: rw=0, sector=6527, nr_sectors = 2384 limit=256
[  818.221378][T11667] syz.2.1381: attempt to access beyond end of device
[  818.221378][T11667] loop2: rw=0, sector=8911, nr_sectors = 4096 limit=256
[  818.251534][T11667] syz.2.1381: attempt to access beyond end of device
[  818.251534][T11667] loop2: rw=0, sector=13007, nr_sectors = 4096 limit=256
[  818.290671][T11667] syz.2.1381: attempt to access beyond end of device
[  818.290671][T11667] loop2: rw=0, sector=17103, nr_sectors = 6272 limit=256
[  818.340492][T11667] syz.2.1381: attempt to access beyond end of device
[  818.340492][T11667] loop2: rw=0, sector=23375, nr_sectors = 6416 limit=256
[  818.758945][ T6539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.144814][T11469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  820.581006][ T6539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.500722][T11496] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.549971][T11496] 8021q: adding VLAN 0 to HW filter on device team0
[  821.702234][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.709459][ T9053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  822.319758][ T6539] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.411995][T11727] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.419217][T11727] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.801077][ T6539] tipc: Left network mode
[  822.864822][T11469] veth0_vlan: entered promiscuous mode
[  822.902503][T11469] veth1_vlan: entered promiscuous mode
[  823.072742][T11469] veth0_macvtap: entered promiscuous mode
[  823.622036][T11469] veth1_macvtap: entered promiscuous mode
[  824.088018][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.146497][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.593037][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.638243][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.689034][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.751544][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.910696][T11469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  825.024626][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  825.471619][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.656296][T11469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  825.785428][T11469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.797296][T11469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  825.826220][T11496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.082628][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'.
[  827.035025][T11469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  827.124541][T11469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  827.344389][T11469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  827.482900][T11469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  829.196110][ T6554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.225663][ T6554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.268034][ T6539] IPVS: stopping master sync thread 9673 ...
[  830.325906][ T6567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.344899][ T6567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.470798][ T6539] hsr_slave_0: left promiscuous mode
[  831.478981][ T6539] hsr_slave_1: left promiscuous mode
[  831.486585][ T6539] batman_adv: batadv0: Interface deactivated: dummy0
[  831.493473][ T6539] batman_adv: batadv0: Removing interface: dummy0
[  831.502343][ T6539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  831.531723][ T6539] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.546856][ T6539] team0: left allmulticast mode
[  831.576361][ T6539] team_slave_0: left allmulticast mode
[  831.594201][ T6539] team_slave_1: left allmulticast mode
[  831.618024][ T6539] team0: left promiscuous mode
[  831.658994][ T6539] team_slave_0: left promiscuous mode
[  831.705867][ T6539] team_slave_1: left promiscuous mode
[  831.715562][ T6539] bridge0: port 3(team0) entered disabled state
[  831.742818][ T6539] bridge_slave_1: left allmulticast mode
[  832.123384][ T6539] bridge_slave_1: left promiscuous mode
[  832.188331][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.367100][ T6539] bridge_slave_0: left allmulticast mode
[  832.373714][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.390631][T11853] loop4: detected capacity change from 0 to 512
[  832.468387][T11853] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  832.527752][T11853] EXT4-fs (loop4): 1 truncate cleaned up
[  832.536701][ T6539] veth1_macvtap: left promiscuous mode
[  833.124098][T11858] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  833.906810][ T6539] veth0_macvtap: left promiscuous mode
[  833.913218][ T6539] veth1_vlan: left promiscuous mode
[  833.931631][ T6539] veth0_vlan: left promiscuous mode
[  833.938186][T11853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  834.979756][ T9801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  835.012267][  T174] infiniband syz2: ib_query_port failed (-19)
[  835.143338][ T6539] team0 (unregistering): Port device bridge1 removed
[  842.333748][ T6539] team0 (unregistering): Port device team_slave_1 removed
[  842.412263][ T6539] team0 (unregistering): Port device team_slave_0 removed
[  842.470883][ T6539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  842.562377][ T6539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.044825][ T6539] bond0 (unregistering): Released all slaves
[  843.175466][T11496] veth0_vlan: entered promiscuous mode
[  843.224252][T11905] pimreg: entered allmulticast mode
[  843.232547][T11907] pimreg: left allmulticast mode
[  843.288103][T11496] veth1_vlan: entered promiscuous mode
[  843.576946][T11496] veth0_macvtap: entered promiscuous mode
[  844.328719][T11927] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  844.330982][T11496] veth1_macvtap: entered promiscuous mode
[  844.344498][T11927] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  844.358490][T11927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  844.447873][T11496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  844.525785][T11496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  844.577081][T11496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  844.621428][T11496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  844.866883][T11496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  844.902400][T11496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  845.568959][T11496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  845.713121][T11496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  845.748929][T11496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  845.765763][T11496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  845.785768][T11496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  845.808116][T11496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  845.833266][T11496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  845.855119][T11496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  845.905056][T11496] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  845.963396][T11496] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  846.037665][T11496] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  846.046624][T11496] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  848.623742][T11963] syzkaller0: entered promiscuous mode
[  848.637121][T11963] syzkaller0: entered allmulticast mode
[  848.689191][T11727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.711594][T11727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.724854][ T6539] IPVS: stop unused estimator thread 0...
[  848.831536][T11733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.856291][T11733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.019675][T12002] loop4: detected capacity change from 0 to 1024
[  852.517262][T12013] loop5: detected capacity change from 0 to 512
[  852.654758][T12013] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  854.166527][T12013] EXT4-fs (loop5): 1 truncate cleaned up
[  854.237069][T12013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.836113][T12035] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  856.572326][T11469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.803664][T12080] futex_wake_op: syz.4.1448 tries to shift op by 144; fix this program
[  863.336114][T12097] dummy_hcd dummy_hcd.0: remove, state 4
[  863.342585][T12097] usb usb1: USB disconnect, device number 1
[  863.385673][T12097] dummy_hcd dummy_hcd.0: stopped
[  863.390675][T12097] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  865.087936][T12117] loop2: detected capacity change from 0 to 512
[  865.138213][T12117] EXT4-fs: Ignoring removed i_version option
[  865.164911][T12117] EXT4-fs: Ignoring removed nobh option
[  865.173269][T12117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  865.200642][T12117] EXT4-fs (loop2): 1 truncate cleaned up
[  865.208858][T12117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  866.213883][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.610359][T12141] loop2: detected capacity change from 0 to 32768
[  867.674388][T12141] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  867.930174][T12141] XFS (loop2): Ending clean mount
[  867.943466][T12141] XFS (loop2): Quotacheck needed: Please wait.
[  868.231406][T12158] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  868.838320][T12141] XFS (loop2): Quotacheck: Done.
[  869.888263][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  870.310214][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  870.317581][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  870.329632][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  872.101805][T12185] loop6: detected capacity change from 0 to 1024
[  872.744010][T12197] 9pnet_virtio: no channels available for device syz
[  876.911221][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'.
[  878.383301][T12236] loop5: detected capacity change from 0 to 1024
[  878.819207][ T7308] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  884.530839][ T9951] Bluetooth: hci0: unknown advertising packet type: 0x65
[  884.531022][ T9951] Bluetooth: hci0: unknown advertising packet type: 0x20
[  884.538647][ T9951] Bluetooth: hci0: Malformed LE Event: 0x02
[  887.049997][T12328] loop6: detected capacity change from 0 to 512
[  887.435168][T12328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  887.910898][T12328] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  890.831189][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  891.765004][T12362] loop6: detected capacity change from 0 to 1024
[  891.815018][T12362] EXT4-fs: Ignoring removed bh option
[  891.847496][T12362] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  891.994869][T12362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002]
[  892.026865][T12362] System zones: 0-1, 3-12
[  892.076963][T12362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  892.176984][T12364] loop5: detected capacity change from 0 to 40427
[  892.185555][T12364] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  892.194389][T12364] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  892.208450][T12364] F2FS-fs (loop5): invalid crc value
[  892.246960][ T9951] Bluetooth: hci4: unexpected event for opcode 0x0c25
[  892.358986][T12364] F2FS-fs (loop5): Found nat_bits in checkpoint
[  892.700840][T12364] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  892.708195][T12364] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  892.899554][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  893.099365][T12381] syz.5.1502: attempt to access beyond end of device
[  893.099365][T12381] loop5: rw=34817, sector=77824, nr_sectors = 32 limit=40427
[  893.794757][T12391] loop6: detected capacity change from 0 to 128
[  895.724845][T12404] loop2: detected capacity change from 0 to 512
[  895.799231][T12404] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1510: invalid indirect mapped block 256 (level 2)
[  895.848203][T12404] EXT4-fs (loop2): 2 truncates cleaned up
[  895.897240][T12404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  896.573011][T12404] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  897.124589][T12421] loop2: detected capacity change from 0 to 8
[  897.512915][T12413] SQUASHFS error: lzo decompression failed, data probably corrupt
[  897.521574][T12413] SQUASHFS error: Failed to read block 0x0: -5
[  897.528618][T12413] SQUASHFS error: lzo decompression failed, data probably corrupt
[  897.536641][T12413] SQUASHFS error: Failed to read block 0x0: -5
[  903.780078][T12500] loop5: detected capacity change from 0 to 128
[  909.707657][T12558] loop4: detected capacity change from 0 to 512
[  909.713290][T12560] loop2: detected capacity change from 0 to 128
[  909.721612][T12558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  910.041172][T12558] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1543: corrupted xattr entries
[  910.113325][T12558] EXT4-fs (loop4): Remounting filesystem read-only
[  910.598048][T12570] loop6: detected capacity change from 0 to 32768
[  910.770638][T12558] EXT4-fs (loop4): 1 truncate cleaned up
[  911.259911][T12558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  911.272926][T12570] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  911.415551][T12570] XFS (loop6): Ending clean mount
[  912.405813][T11496] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  912.615682][ T9801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  915.655911][T12617] loop6: detected capacity change from 0 to 512
[  916.382039][T12617] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.1546: iget: bad i_size value: 38620345925642
[  916.461519][T12617] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1546: couldn't read orphan inode 15 (err -117)
[  916.508490][T12617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  917.587687][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  919.593575][T12657] loop4: detected capacity change from 0 to 32768
[  920.188194][T12657] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  920.304722][T12657] XFS (loop4): Ending clean mount
[  920.624967][ T9801] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  922.044386][T12694] futex_wake_op: syz.2.1552 tries to shift op by 144; fix this program
[  922.765678][T12663] Bluetooth: hci0: command 0x0406 tx timeout
[  923.110361][T12696] loop6: detected capacity change from 0 to 512
[  923.234817][T12696] EXT4-fs: Ignoring removed i_version option
[  923.334567][T12696] EXT4-fs: Ignoring removed nobh option
[  923.485350][T12696] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  923.945782][T12696] EXT4-fs (loop6): 1 truncate cleaned up
[  923.992871][T12696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  927.179176][ T9951] Bluetooth: hci2: command 0x0406 tx timeout
[  927.462232][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.856751][T12768] loop6: detected capacity change from 0 to 512
[  930.952114][T12768] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  931.750755][T12768] EXT4-fs (loop6): 1 truncate cleaned up
[  931.786623][T12768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  931.844606][T12778] loop4: detected capacity change from 0 to 512
[  932.222179][T12778] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1571: invalid indirect mapped block 256 (level 2)
[  932.539629][T12778] EXT4-fs (loop4): 2 truncates cleaned up
[  932.572717][T12778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  932.726320][T12787] loop5: detected capacity change from 0 to 512
[  932.745663][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  932.747385][T12787] EXT4-fs: Ignoring removed i_version option
[  932.773573][T12787] EXT4-fs: Ignoring removed nobh option
[  932.833479][T12787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  933.077956][T12778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.194416][T12787] EXT4-fs (loop5): 1 truncate cleaned up
[  933.396417][T12787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  934.091603][T12797] loop4: detected capacity change from 0 to 8
[  934.151243][T12797] SQUASHFS error: lzo decompression failed, data probably corrupt
[  934.159288][T12797] SQUASHFS error: Failed to read block 0x0: -5
[  934.165589][T12797] SQUASHFS error: lzo decompression failed, data probably corrupt
[  934.173809][T12797] SQUASHFS error: Failed to read block 0x0: -5
[  934.890625][T11469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  936.059859][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  936.073029][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  936.088588][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  940.971594][T12849] loop5: detected capacity change from 0 to 512
[  941.003056][T12849] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1587: invalid indirect mapped block 256 (level 2)
[  941.042366][T12849] EXT4-fs (loop5): 2 truncates cleaned up
[  941.094188][T12849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  941.127366][T12849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.794208][T12866] loop5: detected capacity change from 0 to 8
[  942.815682][T12866] SQUASHFS error: lzo decompression failed, data probably corrupt
[  942.823769][T12866] SQUASHFS error: Failed to read block 0x0: -5
[  942.830090][T12866] SQUASHFS error: lzo decompression failed, data probably corrupt
[  942.839646][T12866] SQUASHFS error: Failed to read block 0x0: -5
[  943.502833][T12862] loop4: detected capacity change from 0 to 4096
[  943.518804][T12862] EXT4-fs: inline encryption not supported
[  943.584717][T12862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  943.628021][T12862] EXT4-fs (loop4): Test dummy encryption mode enabled
[  943.671736][T12862] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  943.754073][T12877] loop2: detected capacity change from 0 to 256
[  943.768934][T12877] exfat: Deprecated parameter 'namecase'
[  943.774932][T12877] exfat: Deprecated parameter 'namecase'
[  943.781629][T12877] exfat: Unknown parameter 'zero_size_dir'
[  944.643178][T12862] System zones: 0-5
[  944.676973][T12862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  945.623725][   T27] audit: type=1800 audit(1785517537.104:403): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1588" name="file1" dev="loop4" ino=15 res=0 errno=0
[  947.419300][ T9801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  947.836175][T12895] ubi0: attaching mtd0
[  947.843510][T12895] ubi0: scanning is finished
[  948.307237][T12895] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  948.342963][T12895] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  948.350833][T12895] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  948.357819][T12895] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  948.365345][T12895] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  948.372267][T12895] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  948.380370][T12895] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3645485242
[  948.390412][T12895] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  948.487233][T12897] ubi0: background thread "ubi_bgt0d" started, PID 12897
[  956.085000][T12961] loop6: detected capacity change from 0 to 32768
[  956.180757][T12961] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  956.243462][T12970] Bluetooth: MGMT ver 1.22
[  956.669589][T12961] XFS (loop6): Ending clean mount
[  956.696050][T12961] XFS (loop6): Quotacheck needed: Please wait.
[  957.481148][T12961] XFS (loop6): Quotacheck: Done.
[  958.335261][T11496] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  960.129762][T13001] pimreg: entered allmulticast mode
[  960.414779][T13001] pimreg: left allmulticast mode
[  963.412574][   T27] audit: type=1800 audit(1785517553.742:404): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1619" name="bus" dev="ramfs" ino=30239 res=0 errno=0
[  965.712942][ T5874] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  966.388872][ T5874] usb 3-1: Using ep0 maxpacket: 16
[  966.446067][ T5874] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  966.490835][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.521376][ T5874] usb 3-1: Product: syz
[  966.540058][ T5874] usb 3-1: Manufacturer: syz
[  966.591281][ T5874] usb 3-1: SerialNumber: syz
[  966.614545][ T5874] usb 3-1: config 0 descriptor??
[  966.629530][ T5874] usb 3-1: selecting invalid altsetting 1
[  966.642713][ T5874] technisat-usb2: could not set alternate setting to 0
[  968.134896][ T5874] technisat-usb2: firmware version: 0.0
[  968.147629][ T5874] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  968.817951][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  968.948667][T13056] technisat-usb2: i2c-error: out failed 00 = -22
[  968.963524][ T5874] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[  968.973128][ T5874] usb 3-1: media controller created
[  969.030582][ T5874] technisat-usb2: i2c-error: out failed 53 = -22
[  969.101513][ T5874] dvb-usb: MAC address reading failed.
[  969.133231][T13101] sctp: [Deprecated]: syz.4.1645 (pid 13101) Use of int in max_burst socket option deprecated.
[  969.133231][T13101] Use struct sctp_assoc_value instead
[  969.259506][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  970.672907][ T5874] DVB: Unable to find symbol stv090x_attach()
[  970.681068][ T5874] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[  972.165276][ T5874] rc_core: IR keymap rc-technisat-usb2 not found
[  972.209793][ T5874] Registered IR keymap rc-empty
[  973.304273][ T5874] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  973.933564][ T5874] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7
[  973.998486][ T5874] dvb-usb: schedule remote query interval to 100 msecs.
[  974.025349][ T5874] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[  974.405600][T13176] loop5: detected capacity change from 0 to 8192
[  974.576607][T13176] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  974.590351][T13176] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  974.602487][T13176] REISERFS (device loop5): using ordered data mode
[  974.609122][T13176] reiserfs: using flush barriers
[  974.620487][T13176] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  974.641453][T13176] REISERFS (device loop5): checking transaction log (loop5)
[  974.664188][T13176] REISERFS (device loop5): Using r5 hash to sort names
[  974.681568][T13176] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  974.886081][ T2196] dvb-usb: error -71 while querying for an remote control event.
[  974.975618][ T5874] usb 3-1: USB disconnect, device number 2
[  976.410759][T13191] loop6: detected capacity change from 0 to 512
[  976.418511][T13191] EXT4-fs: Ignoring removed i_version option
[  976.431684][T13191] EXT4-fs: Ignoring removed nobh option
[  976.561397][T13191] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  977.477829][ T5874] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[  977.533644][T13191] EXT4-fs (loop6): 1 truncate cleaned up
[  977.539972][T13191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  978.628084][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  978.743403][T13200] netlink: 'syz.2.1647': attribute type 10 has an invalid length.
[  979.846895][T13200] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  979.854510][T13200] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  979.959249][T13203] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  983.133839][T13237] loop2: detected capacity change from 0 to 32768
[  984.326203][T13237] (syz.2.1654,13237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  984.344022][T13237] (syz.2.1654,13237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  984.410815][T13237] (syz.2.1654,13237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  984.428387][T13237] (syz.2.1654,13237,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  984.473716][T13237] JBD2: Ignoring recovery information on journal
[  985.466801][T13237] JBD2: journal reset failed
[  985.471456][T13237] (syz.2.1654,13237,0):ocfs2_journal_load:1168 ERROR: Failed to load journal!
[  985.480389][T13237] (syz.2.1654,13237,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4
[  987.047864][T13260] loop2: detected capacity change from 0 to 64
[  989.247053][T13286] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  989.858026][T13282] loop2: detected capacity change from 0 to 256
[  995.016313][T13326] syzkaller0: entered promiscuous mode
[  995.021888][T13326] syzkaller0: entered allmulticast mode
[  995.982905][T13326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  996.094439][T13325] tipc: Resetting bearer <eth:syzkaller0>
[  996.218383][T13325] tipc: Disabling bearer <eth:syzkaller0>
[  996.322420][T13344] loop5: detected capacity change from 0 to 256
[  996.903257][T13359] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  997.254510][T13363] capability: warning: `syz.6.1669' uses 32-bit capabilities (legacy support in use)
[  997.712513][T13365] loop4: detected capacity change from 0 to 256
[  997.805027][T13365] FAT-fs (loop4): Directory bread(block 64) failed
[  997.805098][T13365] FAT-fs (loop4): Directory bread(block 65) failed
[  997.805188][T13365] FAT-fs (loop4): Directory bread(block 66) failed
[  997.805214][T13365] FAT-fs (loop4): Directory bread(block 67) failed
[  997.805301][T13365] FAT-fs (loop4): Directory bread(block 68) failed
[  997.805326][T13365] FAT-fs (loop4): Directory bread(block 69) failed
[  997.805423][T13365] FAT-fs (loop4): Directory bread(block 70) failed
[  997.805449][T13365] FAT-fs (loop4): Directory bread(block 71) failed
[  997.805549][T13365] FAT-fs (loop4): Directory bread(block 72) failed
[  997.805575][T13365] FAT-fs (loop4): Directory bread(block 73) failed
[  997.867816][T13365] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  999.829703][T13384] syzkaller0: entered promiscuous mode
[  999.829725][T13384] syzkaller0: entered allmulticast mode
[  999.864898][T13384] tipc: Started in network mode
[  999.864933][T13384] tipc: Node identity 32a7847ee1b8, cluster identity 4711
[  999.865874][T13384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  999.895616][T13384] tipc: Resetting bearer <eth:syzkaller0>
[ 1000.004607][T13383] tipc: Resetting bearer <eth:syzkaller0>
[ 1000.073395][T13383] tipc: Disabling bearer <eth:syzkaller0>
[ 1002.185792][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1002.185906][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1002.188207][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1005.612859][T13430] loop6: detected capacity change from 0 to 128
[ 1006.428395][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'.
[ 1011.988077][T13483] loop2: detected capacity change from 0 to 32768
[ 1012.229213][T13483] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1013.861782][ T5780] ocfs2: Unmounting device (7,2) on (node local)
[ 1015.552205][T13522] bridge0: entered promiscuous mode
[ 1015.558736][T13522] vlan2: entered promiscuous mode
[ 1017.126520][T13536] loop5: detected capacity change from 0 to 64
[ 1017.143648][T13536] hfs: unable to parse mount options
[ 1017.719686][T13538] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1017.734396][ T1197] IPVS: starting estimator thread 0...
[ 1018.139326][T13540] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1020.874346][T13561] loop6: detected capacity change from 0 to 1024
[ 1023.916494][T13580] loop5: detected capacity change from 0 to 32768
[ 1023.996738][T13580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1722 (13580)
[ 1024.016714][T13580] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1024.026933][T13580] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1024.035546][T13580] BTRFS info (device loop5): use zlib compression, level 3
[ 1024.042806][T13580] BTRFS info (device loop5): turning on sync discard
[ 1024.050173][T13580] BTRFS info (device loop5): using free space tree
[ 1024.361743][T13580] BTRFS info (device loop5): enabling ssd optimizations
[ 1026.426767][   T27] audit: type=1800 audit(1785517611.799:405): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1722" name="file1" dev="loop5" ino=260 res=0 errno=0
[ 1027.692637][T11469] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1029.380587][T13640] bond1: option xmit_hash_policy: invalid value (6)
[ 1029.959921][T13640] bond1 (unregistering): Released all slaves
[ 1031.622845][T13661] loop4: detected capacity change from 0 to 128
[ 1032.666511][   T27] audit: type=1326 audit(1785517617.832:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1033.735588][   T27] audit: type=1326 audit(1785517617.832:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1035.068875][   T27] audit: type=1326 audit(1785517617.832:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1035.380325][   T27] audit: type=1326 audit(1785517617.832:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1035.554682][   T27] audit: type=1326 audit(1785517617.832:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1035.580229][   T27] audit: type=1326 audit(1785517617.832:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1035.604450][   T27] audit: type=1326 audit(1785517617.832:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1035.637529][   T27] audit: type=1326 audit(1785517617.832:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1035.749067][   T27] audit: type=1326 audit(1785517617.832:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1037.071570][   T27] audit: type=1326 audit(1785517617.832:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.4.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1039.889223][T13701] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1039.964011][T13703] SET target dimension over the limit!
[ 1040.796621][T13712] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[ 1042.562130][T13732] loop5: detected capacity change from 0 to 512
[ 1043.131427][T13732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1043.219444][T13732] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1045.485837][T13751] xt_hashlimit: max too large, truncated to 1048576
[ 1045.926151][T11469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1046.496783][T13759] trusted_key: syz.6.1749 sent an empty control message without MSG_MORE.
[ 1048.443061][T13769] loop2: detected capacity change from 0 to 8192
[ 1048.533371][T13769] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1048.601801][T13769] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[ 1048.611960][T13769] REISERFS (device loop2): using ordered data mode
[ 1048.620622][T13769] reiserfs: using flush barriers
[ 1048.784290][T13769] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1048.909789][T13769] REISERFS (device loop2): checking transaction log (loop2)
[ 1048.961024][T13769] REISERFS (device loop2): Using r5 hash to sort names
[ 1049.028246][T13769] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 1050.751952][T13808] loop5: detected capacity change from 0 to 128
[ 1051.673128][   T27] kauditd_printk_skb: 13 callbacks suppressed
[ 1051.673178][   T27] audit: type=1326 audit(1785517636.323:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1051.966442][   T27] audit: type=1326 audit(1785517636.323:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.075154][   T27] audit: type=1326 audit(1785517636.323:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.191040][   T27] audit: type=1326 audit(1785517636.323:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.237153][   T27] audit: type=1326 audit(1785517636.323:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.282526][   T27] audit: type=1326 audit(1785517636.323:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.336497][   T27] audit: type=1326 audit(1785517636.323:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.406265][   T27] audit: type=1326 audit(1785517636.323:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.499853][   T27] audit: type=1326 audit(1785517636.323:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.559348][   T27] audit: type=1326 audit(1785517636.323:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13806 comm="syz.5.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a4f9e019 code=0x7ffc0000
[ 1052.956389][T13851] loop6: detected capacity change from 0 to 2048
[ 1055.638805][T13851] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[ 1056.562799][T13859] netlink: 'syz.2.1761': attribute type 10 has an invalid length.
[ 1056.572135][T13859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1761'.
[ 1058.063775][T13859] team0: Port device geneve0 added
[ 1060.091043][T13893] loop2: detected capacity change from 0 to 128
[ 1060.314081][T13897] bridge0: entered promiscuous mode
[ 1060.320646][T13897] vlan2: entered promiscuous mode
[ 1061.412497][   T27] kauditd_printk_skb: 39 callbacks suppressed
[ 1061.414963][   T27] audit: type=1326 audit(1785517645.194:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1061.717886][   T27] audit: type=1326 audit(1785517645.194:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1061.743250][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1061.819210][   T27] audit: type=1326 audit(1785517645.204:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1061.969767][   T27] audit: type=1326 audit(1785517645.204:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1062.920172][   T27] audit: type=1326 audit(1785517645.204:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1063.305937][   T27] audit: type=1326 audit(1785517645.204:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1063.389025][   T27] audit: type=1326 audit(1785517645.204:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1063.415782][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1063.687267][   T27] audit: type=1326 audit(1785517645.204:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1063.698461][T13926] loop6: detected capacity change from 0 to 512
[ 1064.356024][   T27] audit: type=1326 audit(1785517645.204:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1064.392841][   T27] audit: type=1326 audit(1785517645.204:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13890 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1064.437349][T13932] loop4: detected capacity change from 0 to 1024
[ 1064.444643][T13926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1065.181468][T13938] 9pnet_virtio: no channels available for device syz
[ 1066.098404][T13948] loop5: detected capacity change from 0 to 256
[ 1066.109834][T13948] exfat: Deprecated parameter 'utf8'
[ 1066.480574][T13948] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[ 1066.765866][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1067.233658][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1067.244237][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1067.253696][T13964] wg1: entered promiscuous mode
[ 1067.258637][T13964] wg1: entered allmulticast mode
[ 1067.283454][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1069.751128][T13975] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1069.788788][T13975] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001
[ 1069.799725][T13975] comedi comedi0: 8255: I/O port conflict (0x3,4)
[ 1069.807352][T13975] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[ 1069.815368][T13975] comedi comedi0: 8255: I/O port conflict (0x5,4)
[ 1069.822109][T13975] comedi comedi0: 8255: I/O port conflict (0x4,4)
[ 1069.829049][T13975] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4)
[ 1069.837255][T13975] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4)
[ 1069.845298][T13975] comedi comedi0: 8255: I/O port conflict (0x2,4)
[ 1069.852018][T13975] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[ 1069.865650][T13975] comedi comedi0: 8255: I/O port conflict (0xc3,4)
[ 1069.872657][T13975] comedi comedi0: 8255: I/O port conflict (0x1000007,4)
[ 1069.879846][T13975] comedi comedi0: 8255: I/O port conflict (0x1,4)
[ 1069.886626][T13975] comedi comedi0: 8255: I/O port conflict (0x10003,4)
[ 1069.895930][T13975] comedi comedi0: 8255: I/O port conflict (0x801000,4)
[ 1069.902991][T13975] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4)
[ 1069.910318][T13975] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[ 1069.917219][T13975] comedi comedi0: 8255: I/O port conflict (0x1001010,4)
[ 1069.928553][T13978] netlink: 'syz.5.1785': attribute type 1 has an invalid length.
[ 1069.936522][T13978] netlink: 'syz.5.1785': attribute type 2 has an invalid length.
[ 1069.950915][T13975] comedi comedi0: 8255: I/O port conflict (0x1ff,4)
[ 1069.958043][T13975] comedi comedi0: 8255: I/O port conflict (0x8,4)
[ 1069.964743][T13975] comedi comedi0: 8255: I/O port conflict (0x3,4)
[ 1069.971475][T13975] comedi comedi0: 8255: I/O port conflict (0x8001,4)
[ 1069.978444][T13975] comedi comedi0: 8255: I/O port conflict (0x7,4)
[ 1069.985167][T13975] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[ 1069.992190][T13975] comedi comedi0: 8255: I/O port conflict (0x5,4)
[ 1069.999125][T13975] comedi comedi0: 8255: I/O port conflict (0x3,4)
[ 1070.006414][T13975] comedi comedi0: 8255: I/O port conflict (0xfffd,4)
[ 1071.604308][T13916] IPVS: starting estimator thread 0...
[ 1071.718605][T13979] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1071.736627][T13982] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1071.821114][T13985] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1073.991096][T13996] loop2: detected capacity change from 0 to 512
[ 1074.023518][T13996] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1790: corrupted inode contents
[ 1074.090719][T13996] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1074.258159][T13996] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1790: corrupted inode contents
[ 1074.279736][T13996] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.1790: mark_inode_dirty error
[ 1074.292297][T13996] EXT4-fs (loop2): 1 orphan inode deleted
[ 1074.299159][T13996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1075.989090][T14017] loop6: detected capacity change from 0 to 1024
[ 1076.004352][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.050203][T14020] loop5: detected capacity change from 0 to 1024
[ 1076.107786][T14020] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block
[ 1076.107786][T14020] 
[ 1076.403752][T14026] loop2: detected capacity change from 0 to 512
[ 1076.448547][T14026] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[ 1076.839682][T14027] bridge1: entered promiscuous mode
[ 1077.903622][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'.
[ 1079.964465][T14063] netlink: 'syz.4.1799': attribute type 10 has an invalid length.
[ 1079.979112][T14063] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1799'.
[ 1080.140761][T14063] team0: Port device geneve0 added
[ 1083.624367][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1084.007515][   T27] kauditd_printk_skb: 13 callbacks suppressed
[ 1084.007581][   T27] audit: type=1326 audit(1785517666.596:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1084.592188][   T27] audit: type=1326 audit(1785517666.634:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1085.033828][   T27] audit: type=1326 audit(1785517666.634:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1086.710194][   T27] audit: type=1326 audit(1785517666.634:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1086.786020][   T27] audit: type=1326 audit(1785517666.634:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1086.935959][   T27] audit: type=1326 audit(1785517666.634:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1087.074541][   T27] audit: type=1326 audit(1785517666.634:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1087.074585][   T27] audit: type=1326 audit(1785517666.634:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1087.074621][   T27] audit: type=1326 audit(1785517666.634:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1087.074655][   T27] audit: type=1326 audit(1785517666.643:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.1805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1091.707321][T14153] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1094.950163][T14195] netlink: 'syz.5.1823': attribute type 10 has an invalid length.
[ 1094.958605][T14195] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1823'.
[ 1095.070477][T14195] team0: Port device geneve0 added
[ 1095.285587][T14205] loop5: detected capacity change from 0 to 512
[ 1095.330520][T14207] loop4: detected capacity change from 0 to 1024
[ 1095.869118][T14210] sctp: [Deprecated]: syz.2.1827 (pid 14210) Use of int in max_burst socket option deprecated.
[ 1095.869118][T14210] Use struct sctp_assoc_value instead
[ 1096.104760][T14205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1096.522423][T14216] bridge1: entered promiscuous mode
[ 1097.983053][T11469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1098.332461][T14233] bridge0: entered promiscuous mode
[ 1098.338191][T14233] vlan2: entered promiscuous mode
[ 1102.982931][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'.
[ 1102.996310][T14287] sctp: [Deprecated]: syz.5.1841 (pid 14287) Use of int in max_burst socket option deprecated.
[ 1102.996310][T14287] Use struct sctp_assoc_value instead
[ 1103.125615][T14282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1840'.
[ 1105.288326][T14322] loop2: detected capacity change from 0 to 32768
[ 1105.473763][T14322] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1105.511210][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1105.566251][T14322] XFS (loop2): Ending clean mount
[ 1105.586505][T14322] XFS (loop2): Quotacheck needed: Please wait.
[ 1105.667273][T14322] XFS (loop2): Quotacheck: Done.
[ 1106.460863][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1111.895215][T14386] loop2: detected capacity change from 0 to 1024
[ 1112.617356][T14395] bridge2: entered promiscuous mode
[ 1112.968719][   T27] kauditd_printk_skb: 63 callbacks suppressed
[ 1112.968733][   T27] audit: type=1326 audit(1785517693.678:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.075820][   T27] audit: type=1326 audit(1785517693.678:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.111213][   T27] audit: type=1326 audit(1785517693.678:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.137332][   T27] audit: type=1326 audit(1785517693.678:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.168850][   T27] audit: type=1326 audit(1785517693.697:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.203132][   T27] audit: type=1326 audit(1785517693.697:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.266233][   T27] audit: type=1326 audit(1785517693.697:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.291402][   T27] audit: type=1326 audit(1785517693.697:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.316328][   T27] audit: type=1326 audit(1785517693.697:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1113.341995][   T27] audit: type=1326 audit(1785517693.697:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.4.1864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593819e019 code=0x7ffc0000
[ 1115.505063][T14431] loop5: detected capacity change from 0 to 2048
[ 1115.575280][T14431] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[ 1117.577987][T14442] netlink: 'syz.6.1875': attribute type 10 has an invalid length.
[ 1117.586127][T14442] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1875'.
[ 1117.909217][T14446] loop5: detected capacity change from 0 to 1024
[ 1118.886895][T14442] team0: Port device geneve0 added
[ 1118.913760][T14452] bridge1: entered promiscuous mode
[ 1119.303515][T14462] sctp: [Deprecated]: syz.6.1880 (pid 14462) Use of int in max_burst socket option deprecated.
[ 1119.303515][T14462] Use struct sctp_assoc_value instead
[ 1122.915065][T14495] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1125.870648][T14533] syzkaller0: entered promiscuous mode
[ 1126.009466][T14533] syzkaller0: entered allmulticast mode
[ 1126.756059][T14533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1126.772010][T14532] tipc: Resetting bearer <eth:syzkaller0>
[ 1127.043024][T14532] tipc: Disabling bearer <eth:syzkaller0>
[ 1127.843690][T14555] loop4: detected capacity change from 0 to 32768
[ 1127.871909][T14555] (syz.4.1901,14555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1127.888988][T14555] (syz.4.1901,14555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1127.923996][T14555] (syz.4.1901,14555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1127.957946][T14555] (syz.4.1901,14555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1127.982532][T14555] JBD2: Ignoring recovery information on journal
[ 1128.018390][T14555] (syz.4.1901,14555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1128.032559][T14555] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1128.064453][T14555] (syz.4.1901,14555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1128.092163][T14555] (syz.4.1901,14555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[ 1128.214889][T14552] (syz.4.1901,14552,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[ 1128.248311][T14552] (syz.4.1901,14552,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC.
[ 1128.262393][T14552] (syz.4.1901,14552,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af
[ 1128.275476][T14552] (syz.4.1901,14552,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[ 1128.284878][T14552] (syz.4.1901,14552,1):ocfs2_quota_read:201 ERROR: status = -5
[ 1128.292652][T14552] __quota_error: 120 callbacks suppressed
[ 1128.292666][T14552] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5
[ 1128.307697][T14552] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[ 1128.317279][T14552] (syz.4.1901,14552,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[ 1128.328212][T14552] (syz.4.1901,14552,1):ocfs2_mknod:314 ERROR: status = -5
[ 1128.336083][T14552] (syz.4.1901,14552,1):ocfs2_mknod:502 ERROR: status = -5
[ 1128.343911][T14552] (syz.4.1901,14552,1):ocfs2_create:676 ERROR: status = -5
[ 1128.520528][ T9801] ocfs2: Unmounting device (7,4) on (node local)
[ 1131.356280][T14602] loop4: detected capacity change from 0 to 128
[ 1133.350956][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1133.357356][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1133.366408][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1133.441197][T14616] loop6: detected capacity change from 0 to 32768
[ 1133.491020][T14616] (syz.6.1915,14616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1133.505692][T14616] (syz.6.1915,14616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1133.539057][T14616] (syz.6.1915,14616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1133.553831][T14616] (syz.6.1915,14616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1133.571459][T14616] JBD2: Ignoring recovery information on journal
[ 1133.606694][T14616] (syz.6.1915,14616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1133.620444][T14616] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1133.629744][T14616] (syz.6.1915,14616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1133.655333][T14616] (syz.6.1915,14616,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[ 1133.739244][T14613] (syz.6.1915,14613,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[ 1133.756214][T14613] (syz.6.1915,14613,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC.
[ 1133.769796][T14613] (syz.6.1915,14613,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af
[ 1133.782538][T14613] (syz.6.1915,14613,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[ 1133.791152][T14613] (syz.6.1915,14613,1):ocfs2_quota_read:201 ERROR: status = -5
[ 1133.798731][T14613] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 5
[ 1133.808157][T14613] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[ 1133.817667][T14613] (syz.6.1915,14613,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[ 1133.825557][T14613] (syz.6.1915,14613,1):ocfs2_mknod:314 ERROR: status = -5
[ 1133.832876][T14613] (syz.6.1915,14613,1):ocfs2_mknod:502 ERROR: status = -5
[ 1133.840117][T14613] (syz.6.1915,14613,1):ocfs2_create:676 ERROR: status = -5
[ 1134.042553][T11496] ocfs2: Unmounting device (7,6) on (node local)
[ 1134.582675][T14628] netlink: 'syz.6.1917': attribute type 10 has an invalid length.
[ 1134.590774][T14628] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1917'.
[ 1137.469919][T14657] loop2: detected capacity change from 0 to 128
[ 1138.695972][T14665] syzkaller0: entered promiscuous mode
[ 1138.701600][T14665] syzkaller0: entered allmulticast mode
[ 1138.720251][T14665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1138.760800][T14665] tipc: Resetting bearer <eth:syzkaller0>
[ 1138.799172][T14664] tipc: Resetting bearer <eth:syzkaller0>
[ 1138.832230][T14664] tipc: Disabling bearer <eth:syzkaller0>
[ 1139.003733][T14671] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[ 1142.685529][T14706] loop5: detected capacity change from 0 to 32768
[ 1142.714088][T14706] (syz.5.1933,14706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1142.727921][T14706] (syz.5.1933,14706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1142.795114][T14706] (syz.5.1933,14706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1142.809269][T14706] (syz.5.1933,14706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1142.830266][T14706] JBD2: Ignoring recovery information on journal
[ 1142.897128][T14706] (syz.5.1933,14706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1142.910871][T14706] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1142.930983][T14706] (syz.5.1933,14706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1142.955934][T14706] (syz.5.1933,14706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[ 1143.060279][T14702] (syz.5.1933,14702,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[ 1143.081094][T14702] (syz.5.1933,14702,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC.
[ 1143.094706][T14702] (syz.5.1933,14702,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af
[ 1143.108252][T14702] (syz.5.1933,14702,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[ 1143.116836][T14702] (syz.5.1933,14702,0):ocfs2_quota_read:201 ERROR: status = -5
[ 1143.124995][T14702] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 5
[ 1143.134029][T14702] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[ 1143.143402][T14702] (syz.5.1933,14702,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[ 1143.151411][T14702] (syz.5.1933,14702,0):ocfs2_mknod:314 ERROR: status = -5
[ 1143.158646][T14702] (syz.5.1933,14702,0):ocfs2_mknod:502 ERROR: status = -5
[ 1143.165803][T14702] (syz.5.1933,14702,0):ocfs2_create:676 ERROR: status = -5
[ 1143.373022][T11469] ocfs2: Unmounting device (7,5) on (node local)
[ 1147.713589][T14745] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1943'.
[ 1150.504009][T14769] loop4: detected capacity change from 0 to 32768
[ 1150.527666][T14769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1951 (14769)
[ 1150.593263][T14769] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1150.603851][T14769] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[ 1150.612466][T14769] BTRFS info (device loop4): use zlib compression, level 3
[ 1150.619840][T14769] BTRFS info (device loop4): turning on sync discard
[ 1150.626772][T14769] BTRFS info (device loop4): using free space tree
[ 1150.705115][T14769] BTRFS info (device loop4): enabling ssd optimizations
[ 1151.979641][   T27] audit: type=1800 audit(1785517729.342:704): pid=14790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1951" name="file1" dev="loop4" ino=260 res=0 errno=0
[ 1152.394201][ T9801] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1153.558461][T14803] loop2: detected capacity change from 0 to 2048
[ 1153.635548][T14803] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 1153.672891][T14803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1153.696812][ T7565] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (7565)
[ 1154.678252][T14815] loop2: detected capacity change from 0 to 16
[ 1155.767074][T14831] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00
[ 1155.985575][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1964'.
[ 1157.137805][T14850] loop4: detected capacity change from 0 to 256
[ 1157.165049][T14850] exfat: Deprecated parameter 'namecase'
[ 1157.183328][T14850] exfat: Deprecated parameter 'namecase'
[ 1157.195794][T14850] exfat: Unknown parameter 'zero_size_dir'
[ 1157.541949][T14855] loop5: detected capacity change from 0 to 1024
[ 1157.569600][T14855] hfsplus: failed to load extents file
[ 1158.533850][ T7308] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1160.179970][T14883] loop5: detected capacity change from 0 to 128
[ 1162.455217][T14905] loop2: detected capacity change from 0 to 32768
[ 1162.476374][T14905] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[ 1164.656501][ T7308] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[ 1166.272216][T14939] 9pnet_fd: Insufficient options for proto=fd
[ 1166.354539][T14940] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1988'.
[ 1166.573294][T14939] netlink: 'syz.6.1987': attribute type 10 has an invalid length.
[ 1167.239623][T14942] xt_hashlimit: max too large, truncated to 1048576
[ 1167.816206][T14944] loop4: detected capacity change from 0 to 256
[ 1167.840233][T14939] team0: Port device netdevsim0 added
[ 1167.891431][T14944] FAT-fs (loop4): Directory bread(block 64) failed
[ 1167.925191][T14944] FAT-fs (loop4): Directory bread(block 65) failed
[ 1167.948004][T14944] FAT-fs (loop4): Directory bread(block 66) failed
[ 1167.968944][T14944] FAT-fs (loop4): Directory bread(block 67) failed
[ 1168.000660][T14944] FAT-fs (loop4): Directory bread(block 68) failed
[ 1168.025436][T14944] FAT-fs (loop4): Directory bread(block 69) failed
[ 1168.045980][T14944] FAT-fs (loop4): Directory bread(block 70) failed
[ 1168.053274][T14944] FAT-fs (loop4): Directory bread(block 71) failed
[ 1168.090257][T14944] FAT-fs (loop4): Directory bread(block 72) failed
[ 1168.100970][T14944] FAT-fs (loop4): Directory bread(block 73) failed
[ 1168.112865][T14952] loop6: detected capacity change from 0 to 128
[ 1168.142396][T14952] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1168.205631][T14952] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1168.693287][T14962] syz.4.1991: attempt to access beyond end of device
[ 1168.693287][T14962] loop4: rw=524288, sector=1768, nr_sectors = 4 limit=256
[ 1168.712169][T14962] syz.4.1991: attempt to access beyond end of device
[ 1168.712169][T14962] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256
[ 1168.737606][   T27] audit: type=1800 audit(1785517745.873:705): pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1991" name="file1" dev="loop4" ino=1048685 res=0 errno=0
[ 1169.333999][T11496] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1170.374761][T14976] loop2: detected capacity change from 0 to 32768
[ 1170.410698][T14976] (syz.2.1998,14976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1170.424558][T14976] (syz.2.1998,14976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1170.468913][T14976] (syz.2.1998,14976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1170.482794][T14976] (syz.2.1998,14976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1170.498594][T14976] JBD2: Ignoring recovery information on journal
[ 1170.549128][T14976] (syz.2.1998,14976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[ 1170.562848][T14976] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1170.573027][T14976] (syz.2.1998,14976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[ 1170.590176][T14976] (syz.2.1998,14976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[ 1170.689223][T14972] (syz.2.1998,14972,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[ 1170.709274][T14972] (syz.2.1998,14972,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC.
[ 1170.722804][T14972] (syz.2.1998,14972,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af
[ 1170.735492][T14972] (syz.2.1998,14972,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[ 1170.744180][T14972] (syz.2.1998,14972,1):ocfs2_quota_read:201 ERROR: status = -5
[ 1170.751787][T14972] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5
[ 1170.760809][T14972] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[ 1170.770229][T14972] (syz.2.1998,14972,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[ 1170.778219][T14972] (syz.2.1998,14972,1):ocfs2_mknod:314 ERROR: status = -5
[ 1170.785396][T14972] (syz.2.1998,14972,1):ocfs2_mknod:502 ERROR: status = -5
[ 1170.792915][T14972] (syz.2.1998,14972,1):ocfs2_create:676 ERROR: status = -5
[ 1171.811687][ T5780] ocfs2: Unmounting device (7,2) on (node local)
[ 1172.356174][T14999] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1174.041522][T15009] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[ 1177.284049][    T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1177.757600][    T8] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1177.777628][    T8] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1177.787088][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1178.438511][    T8] usb 7-1: Product: syz
[ 1178.442744][    T8] usb 7-1: Manufacturer: syz
[ 1178.447459][    T8] usb 7-1: SerialNumber: syz
[ 1179.128163][T15042] binder: 15041:15042 ioctl c018620c 200000000780 returned -22
[ 1179.205904][    T8] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1180.330069][    C1] usblp0: nonzero write bulk status received: -71
[ 1180.339807][T11761] usb 7-1: USB disconnect, device number 2
[ 1180.373819][T15075] usblp0: removed
[ 1180.573757][T15085] loop2: detected capacity change from 0 to 256
[ 1181.091949][T15085] FAT-fs (loop2): Directory bread(block 64) failed
[ 1181.126635][T15085] FAT-fs (loop2): Directory bread(block 65) failed
[ 1181.146763][T15085] FAT-fs (loop2): Directory bread(block 66) failed
[ 1181.161815][T15085] FAT-fs (loop2): Directory bread(block 67) failed
[ 1181.183447][T15085] FAT-fs (loop2): Directory bread(block 68) failed
[ 1181.217755][T15085] FAT-fs (loop2): Directory bread(block 69) failed
[ 1181.224434][T15085] FAT-fs (loop2): Directory bread(block 70) failed
[ 1181.259002][T15085] FAT-fs (loop2): Directory bread(block 71) failed
[ 1181.270824][T15085] FAT-fs (loop2): Directory bread(block 72) failed
[ 1181.295303][T15085] FAT-fs (loop2): Directory bread(block 73) failed
[ 1181.449363][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2023'.
[ 1181.853110][T15097] syz.2.2021: attempt to access beyond end of device
[ 1181.853110][T15097] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256
[ 1181.869947][T15097] syz.2.2021: attempt to access beyond end of device
[ 1181.869947][T15097] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256
[ 1182.259511][   T27] audit: type=1800 audit(1785517758.183:706): pid=15097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2021" name="file1" dev="loop2" ino=1048686 res=0 errno=0
[ 1185.927192][T15136] loop4: detected capacity change from 0 to 128
[ 1186.518338][T15136] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1186.559437][T15136] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1186.857674][T15156] loop6: detected capacity change from 0 to 512
[ 1187.259387][T15156] EXT4-fs (loop6): can't mount with both data=journal and dax
[ 1187.416424][ T9801] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1191.506964][T15206] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1193.336356][T15214] netlink: 'syz.6.2044': attribute type 2 has an invalid length.
[ 1193.752617][T15222] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[ 1193.816928][T15222] batman_adv: batadv0: Adding interface: wlan0
[ 1193.896763][T15222] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1194.151621][T15222] batman_adv: batadv0: Interface activated: wlan0
[ 1198.157531][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'.
[ 1198.261874][T15283] bridge_slave_1: left allmulticast mode
[ 1198.386068][T15283] bridge_slave_1: left promiscuous mode
[ 1198.395348][T15283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.416487][T15283] bridge_slave_0: left allmulticast mode
[ 1198.467991][T15283] bridge_slave_0: left promiscuous mode
[ 1198.479949][T15283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1198.546972][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1198.553651][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1198.562848][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1198.776503][T15279] netlink: 'syz.6.2059': attribute type 2 has an invalid length.
[ 1199.131648][T15307] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1201.040023][T15322] bond0: left promiscuous mode
[ 1201.044939][T15322] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[ 1201.053598][T15322] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1201.893604][T15322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1203.689647][ T2196] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1205.206437][ T2196] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1205.227159][ T2196] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1205.250092][ T2196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1205.275733][ T2196] usb 6-1: Product: syz
[ 1205.279965][ T2196] usb 6-1: Manufacturer: syz
[ 1205.307056][ T2196] usb 6-1: SerialNumber: syz
[ 1205.662902][T12663] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11
[ 1206.012207][T15350] binder: 15349:15350 ioctl c018620c 200000000780 returned -22
[ 1206.271037][ T2196] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1207.002333][    C0] usblp0: nonzero write bulk status received: -71
[ 1207.019917][ T5874] usb 6-1: USB disconnect, device number 2
[ 1207.163894][T15370] usblp0: removed
[ 1208.781537][T15390] loop5: detected capacity change from 0 to 512
[ 1208.805456][T15390] EXT4-fs (loop5): can't mount with both data=journal and dax
[ 1213.527410][T15421] loop5: detected capacity change from 0 to 8
[ 1214.636650][T11761] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1215.395582][T11761] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1216.046068][T11761] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1216.068945][T11761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1216.090531][T11761] usb 5-1: Product: syz
[ 1216.094749][T11761] usb 5-1: Manufacturer: syz
[ 1216.110267][T11761] usb 5-1: SerialNumber: syz
[ 1216.438486][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'.
[ 1217.585886][T15427] binder: 15426:15427 ioctl c018620c 200000000780 returned -22
[ 1217.696576][T11761] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1218.582372][T15465] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11496] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15465]
[ 1218.619544][    C1] usblp0: nonzero write bulk status received: -71
[ 1218.645586][T13916] usb 5-1: USB disconnect, device number 3
[ 1218.675949][T13916] usblp0: removed
[ 1221.690514][T15490] loop4: detected capacity change from 0 to 256
[ 1222.024139][T15490] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1222.035375][T15490] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[ 1222.618174][T15500] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1223.316711][T15490] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1223.937343][T12663] Bluetooth: hci0: command 0x0406 tx timeout
[ 1225.405618][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'.
[ 1226.346332][T15523] input: syz1 as /devices/virtual/input/input12
[ 1227.957565][T15532] loop5: detected capacity change from 0 to 16
[ 1228.581050][T15532] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1235.175168][T15582] loop5: detected capacity change from 0 to 64
[ 1235.227128][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'.
[ 1235.248091][T15587] bridge_slave_1: left allmulticast mode
[ 1235.260625][T15587] bridge_slave_1: left promiscuous mode
[ 1235.275905][T15587] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1235.311295][T15587] bridge_slave_0: left allmulticast mode
[ 1235.321066][T15587] bridge_slave_0: left promiscuous mode
[ 1235.435631][T15587] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1236.602430][T15609] loop4: detected capacity change from 0 to 64
[ 1236.722706][   T27] audit: type=1800 audit(1785517809.471:707): pid=15609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2133" name="file1" dev="loop4" ino=21 res=0 errno=0
[ 1236.788994][T15607] loop6: detected capacity change from 0 to 8192
[ 1238.028701][ T9801] hfs: node 4:3 still has 1 user(s)!
[ 1240.215581][T15633] 
: renamed from bond_slave_0
[ 1240.734151][   T27] audit: type=1326 audit(1785517812.904:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.2.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1240.734203][   T27] audit: type=1326 audit(1785517812.904:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.2.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1240.734240][   T27] audit: type=1326 audit(1785517813.006:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.2.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1240.734276][   T27] audit: type=1326 audit(1785517813.006:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.2.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1240.734315][   T27] audit: type=1326 audit(1785517813.006:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.2.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22d79e019 code=0x7ffc0000
[ 1240.863272][T15635] tty tty2: ldisc open failed (-12), clearing slot 1
[ 1242.478014][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2142'.
[ 1242.494591][T15662] bridge_slave_1: left allmulticast mode
[ 1242.526356][T15662] bridge_slave_1: left promiscuous mode
[ 1242.534562][T15662] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1242.593162][T15662] bridge_slave_0: left allmulticast mode
[ 1242.618782][T15662] bridge_slave_0: left promiscuous mode
[ 1242.639060][T15668] loop4: detected capacity change from 0 to 8
[ 1242.786790][T15662] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1247.810207][T12663] Bluetooth: hci2: command 0x0406 tx timeout
[ 1249.340202][T15717] loop6: detected capacity change from 0 to 8
[ 1249.565561][ T7565] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1250.605205][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2160'.
[ 1253.970682][T15762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1253.978689][T15762] IPv6: NLM_F_CREATE should be set when creating new route
[ 1253.985939][T15762] IPv6: NLM_F_CREATE should be set when creating new route
[ 1253.993188][T15762] IPv6: NLM_F_CREATE should be set when creating new route
[ 1254.823672][T15771] tipc: Started in network mode
[ 1254.831358][T15771] tipc: Node identity 4, cluster identity 4711
[ 1254.837739][T15771] tipc: Node number set to 4
[ 1256.618904][T15779] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2173'.
[ 1256.755764][T15783] netlink: 'syz.6.2172': attribute type 1 has an invalid length.
[ 1256.851525][T15783] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1256.949530][T15787] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1257.081532][T15787] bond1: (slave bond0): making interface the new active one
[ 1257.094634][T15787] bond1: (slave bond0): Enslaving as an active interface with an up link
[ 1259.057818][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2177'.
[ 1262.261508][T15823] loop5: detected capacity change from 0 to 512
[ 1262.272999][T15823] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1262.299906][T15823] EXT4-fs (loop5): 1 truncate cleaned up
[ 1262.962168][T15823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1263.458377][T15832] loop4: detected capacity change from 0 to 32768
[ 1263.897402][T11469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1263.929135][T15832] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1264.083518][T15832] XFS (loop4): Ending clean mount
[ 1264.171447][T15832] XFS (loop4): Quotacheck needed: Please wait.
[ 1264.225246][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1264.234454][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1264.243586][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1264.318682][T15832] XFS (loop4): Quotacheck: Done.
[ 1265.008301][ T9801] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1265.473466][T15870] ipt_REJECT: ECHOREPLY no longer supported.
[ 1265.662741][ T5768] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1266.204352][ T5768] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1266.229412][ T5768] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1266.281530][ T5768] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1266.301768][ T5768] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1268.096480][ T5768] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1268.158863][ T5768] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1268.172638][ T5768] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1268.193244][ T5768] usb 6-1: Product: syz
[ 1268.202369][ T5768] usb 6-1: Manufacturer: syz
[ 1268.215195][ T5768] cdc_wdm 6-1:1.0: skipping garbage
[ 1268.226522][ T5768] cdc_wdm 6-1:1.0: skipping garbage
[ 1268.244438][ T5768] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1268.260621][ T5768] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1269.522400][ T5768] usb 6-1: USB disconnect, device number 3
[ 1270.486851][T15901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1270.570940][T15901] batadv_slave_1: entered promiscuous mode
[ 1271.179461][T15911] befs: (nullb0): invalid magic header
[ 1272.251973][ T2196] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1272.697876][ T2196] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1272.718779][ T2196] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1272.729156][ T2196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.740678][ T2196] usb 3-1: config 0 descriptor??
[ 1272.905653][ T2196] pwc: Askey VC010 type 2 USB webcam detected.
[ 1273.221959][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1273.231800][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1273.295806][ T2196] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1273.457484][ T2196] pwc: recv_control_msg error -32 req 02 val 2700
[ 1273.587632][T15924] loop4: detected capacity change from 0 to 512
[ 1273.658069][T15924] EXT4-fs: Ignoring removed bh option
[ 1273.707686][T15924] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1273.887879][T15924] EXT4-fs (loop4): 1 truncate cleaned up
[ 1273.898854][T15924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1274.327926][T15934] IPVS: Error connecting to the multicast addr
[ 1274.742311][ T9801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1274.820745][ T2196] pwc: recv_control_msg error -71 req 04 val 1000
[ 1274.907051][ T2196] pwc: recv_control_msg error -71 req 04 val 1300
[ 1274.930906][ T2196] pwc: recv_control_msg error -71 req 04 val 1400
[ 1274.960285][ T2196] pwc: recv_control_msg error -71 req 02 val 2000
[ 1275.002088][ T2196] pwc: recv_control_msg error -71 req 02 val 2100
[ 1275.038909][ T2196] pwc: recv_control_msg error -71 req 04 val 1500
[ 1275.062486][ T2196] pwc: recv_control_msg error -71 req 02 val 2500
[ 1275.084262][ T2196] pwc: recv_control_msg error -71 req 02 val 2400
[ 1275.166458][ T2196] pwc: recv_control_msg error -71 req 02 val 2600
[ 1276.046020][ T2196] pwc: recv_control_msg error -71 req 02 val 2900
[ 1276.148143][T15943] JFS: discard option not supported on device
[ 1276.195188][ T2196] pwc: recv_control_msg error -71 req 02 val 2800
[ 1276.416246][ T2196] pwc: recv_control_msg error -71 req 04 val 1100
[ 1276.439487][T15943] syz.6.2210: attempt to access beyond end of device
[ 1276.439487][T15943] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1276.454009][T15943] syz.6.2210: attempt to access beyond end of device
[ 1276.454009][T15943] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1276.475399][T15943] Mount JFS Failure: -5
[ 1276.481850][T15943] jfs_mount failed w/return code = -5
[ 1276.541506][ T2196] pwc: recv_control_msg error -71 req 04 val 1200
[ 1276.586079][ T2196] pwc: Registered as video103.
[ 1276.713512][ T2196] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[ 1276.803081][ T2196] usb 3-1: USB disconnect, device number 3
[ 1277.494250][T15955] block device autoloading is deprecated and will be removed.
[ 1278.712651][T15968] loop4: detected capacity change from 0 to 128
[ 1278.725462][T15968] ext4: Unknown parameter 'fsmagic'
[ 1278.780170][ T7565] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1278.864073][T15968] loop4: detected capacity change from 0 to 4096
[ 1278.864328][ T7565] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1278.913830][ T7565] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1278.931260][T15968] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1278.952360][ T7565] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1278.983267][T15968] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1279.014283][T15968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1279.339848][T15978] loop6: detected capacity change from 0 to 512
[ 1279.669265][T15978] EXT4-fs: Ignoring removed bh option
[ 1279.725605][T15978] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1279.898143][T15978] EXT4-fs (loop6): 1 truncate cleaned up
[ 1279.943193][ T9801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1279.947140][T15978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1280.401430][T15990] IPVS: Error connecting to the multicast addr
[ 1280.801507][T11496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1281.109046][T15996] loop6: detected capacity change from 0 to 128
[ 1281.515588][T16003] IPVS: Error connecting to the multicast addr
[ 1281.717644][T16005] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[11496] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16005]
[ 1282.488880][T16017] loop6: detected capacity change from 0 to 4096
[ 1282.522549][T16017] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[ 1282.722370][T16017] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[ 1282.835701][T16017] ntfs3: loop6: failed to convert "c46c" to cp936
[ 1283.588403][T16040] loop4: detected capacity change from 0 to 512
[ 1283.598459][T16040] EXT4-fs: Ignoring removed i_version option
[ 1283.642023][T16040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1283.650642][T16040] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1283.674181][T16040] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1283.687170][T16040] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1283.698329][T16040] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1283.731517][T16040] EXT4-fs (loop4): Cannot turn on quotas: error -117
[ 1283.762712][T16040] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1283.971757][T16040] EXT4-fs (loop4): Remounting filesystem read-only
[ 1283.979657][T16040] EXT4-fs (loop4): 1 truncate cleaned up
[ 1283.991849][T16040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1284.014387][T16040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1284.877393][T16056] syz_tun: entered allmulticast mode
[ 1285.779751][T16067] IPVS: Error connecting to the multicast addr
[ 1285.857151][    C0] hrtimer: interrupt took 48277 ns
[ 1286.632931][T16084] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1286.757872][ T9951] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11
[ 1288.938881][T16097] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1288.978275][T16097] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1289.773107][T16102] loop6: detected capacity change from 0 to 512
[ 1289.780139][T16102] EXT4-fs: Ignoring removed i_version option
[ 1289.789663][T16102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1289.798589][T16102] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1290.461938][T16102] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1290.469441][T16102] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1290.479610][T16102] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1290.509967][T16102] EXT4-fs (loop6): Cannot turn on quotas: error -117
[ 1290.517915][T16102] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1290.547624][T16102] EXT4-fs (loop6): Remounting filesystem read-only
[ 1290.555769][T16102] EXT4-fs (loop6): 1 truncate cleaned up
[ 1290.562834][T16102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1290.576993][T16102] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1291.521186][T16119] IPVS: Unknown mcast interface: vcan0
[ 1291.641366][T16120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1291.678676][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'.
[ 1291.696148][T16120] batadv_slave_1: entered promiscuous mode
[ 1291.715023][T16124] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1293.295499][T16134] syz_tun: entered allmulticast mode
[ 1295.771709][T16167] loop5: detected capacity change from 0 to 512
[ 1295.781701][T16167] EXT4-fs: Ignoring removed i_version option
[ 1295.938519][T16167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1295.946997][T16167] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1296.072066][T16167] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1296.081509][T16167] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6).
[ 1296.091603][T16167] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1296.122631][T16167] EXT4-fs (loop5): Cannot turn on quotas: error -117
[ 1296.160963][T16167] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1296.204628][T16167] EXT4-fs (loop5): Remounting filesystem read-only
[ 1296.211507][T16167] EXT4-fs (loop5): 1 truncate cleaned up
[ 1296.218553][T16167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1296.232610][T16167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1296.776858][T16181] befs: (nullb0): invalid magic header
[ 1297.114611][    T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1297.295428][T16183] syz_tun: entered allmulticast mode
[ 1297.450671][    T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1297.471025][    T8] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1297.480987][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1297.492801][    T8] usb 7-1: config 0 descriptor??
[ 1297.500682][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[ 1297.962867][    T8] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1297.963828][T16180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1297.978305][T16180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1298.210703][    T8] pwc: recv_control_msg error -32 req 02 val 2700
[ 1299.734503][    T8] pwc: recv_control_msg error -71 req 04 val 1000
[ 1299.784975][    T8] pwc: recv_control_msg error -71 req 04 val 1300
[ 1299.794130][    T8] pwc: recv_control_msg error -71 req 04 val 1400
[ 1299.802000][    T8] pwc: recv_control_msg error -71 req 02 val 2000
[ 1299.809266][    T8] pwc: recv_control_msg error -71 req 02 val 2100
[ 1299.816124][    T8] pwc: recv_control_msg error -71 req 04 val 1500
[ 1299.824282][    T8] pwc: recv_control_msg error -71 req 02 val 2500
[ 1299.844314][    T8] pwc: recv_control_msg error -71 req 02 val 2400
[ 1299.855859][    T8] pwc: recv_control_msg error -71 req 02 val 2600
[ 1300.029341][    T8] pwc: recv_control_msg error -71 req 02 val 2900
[ 1300.158617][    T8] pwc: recv_control_msg error -71 req 02 val 2800
[ 1300.257697][    T8] pwc: recv_control_msg error -71 req 04 val 1100
[ 1300.338620][    T8] pwc: recv_control_msg error -71 req 04 val 1200
[ 1300.556802][    T8] pwc: Registered as video103.
[ 1300.720997][    T8] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14
[ 1300.969542][    T8] usb 7-1: USB disconnect, device number 3
[ 1303.872963][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2277'.
[ 1305.127410][T16269] netlink: 'syz.4.2282': attribute type 9 has an invalid length.
[ 1306.077895][T16282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2286'.
[ 1306.401844][T16287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2286'.
[ 1312.328527][T16336] loop4: detected capacity change from 0 to 16
[ 1313.418064][T16336] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1313.510597][ T7565] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1317.922178][T16383] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1320.523687][T16412] loop5: detected capacity change from 0 to 256
[ 1321.139776][T16414] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 1323.482003][T16430] loop4: detected capacity change from 0 to 512
[ 1323.544264][T16430] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1323.555956][T16430] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[ 1323.567886][T16430] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2319: Corrupt directory, running e2fsck is recommended
[ 1323.603019][T16430] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[ 1323.616724][T16430] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.2319: corrupted in-inode xattr: e_name out of bounds
[ 1323.716433][T16430] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2319: couldn't read orphan inode 15 (err -117)
[ 1323.752138][T16430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1323.872566][ T9801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1324.166520][T16448] futex_wake_op: syz.4.2322 tries to shift op by 144; fix this program
[ 1325.921803][T16457] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1325.932943][   T27] audit: type=1326 audit(1785517892.927:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16453 comm="syz.5.2326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40a4f9e019 code=0x0
[ 1325.968374][T12663] Bluetooth: hci2: command 0x0406 tx timeout
[ 1326.762435][T16472] input: syz0 as /devices/virtual/input/input15
[ 1327.156230][T16476] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1327.863190][T16492] syz.6.2331(16492): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1328.737242][   T27] audit: type=1326 audit(1785517894.676:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1328.762902][   T27] audit: type=1326 audit(1785517894.676:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1328.787718][   T27] audit: type=1326 audit(1785517894.676:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1328.929302][   T27] audit: type=1326 audit(1785517894.676:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1328.953469][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1329.337709][   T27] audit: type=1326 audit(1785517894.676:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1329.380810][   T27] audit: type=1326 audit(1785517894.676:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1329.405317][   T27] audit: type=1326 audit(1785517894.676:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1329.440018][   T27] audit: type=1326 audit(1785517894.676:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1329.543348][   T27] audit: type=1326 audit(1785517894.676:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.6.2331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa1aff9e019 code=0x7ffc0000
[ 1329.973794][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1329.980612][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1330.133747][ T1292] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1330.896842][  T174] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1331.049034][T16529] can: request_module (can-proto-3) failed.
[ 1331.100019][  T174] usb 7-1: Using ep0 maxpacket: 16
[ 1331.107960][  T174] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1331.120880][  T174] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1331.140688][T16533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1331.144516][  T174] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1331.160125][  T174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.186882][  T174] usb 7-1: Product: syz
[ 1331.208801][  T174] usb 7-1: Manufacturer: syz
[ 1331.228392][  T174] usb 7-1: SerialNumber: syz
[ 1331.498390][T16543] loop4: detected capacity change from 0 to 256
[ 1331.512369][  T174] usb 7-1: 0:2 : does not exist
[ 1331.521078][T16543] exfat: Deprecated parameter 'namecase'
[ 1331.542315][  T174] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1331.551690][T16543] exfat: Deprecated parameter 'namecase'
[ 1331.562700][T16543] exfat: Unknown parameter 'zero_size_dir'
[ 1331.607437][  T174] usb 7-1: USB disconnect, device number 4
[ 1331.692180][ T7565] udevd[7565]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1335.257441][T16582] loop6: detected capacity change from 0 to 512
[ 1335.333848][T16584] netlink: 'syz.5.2353': attribute type 1 has an invalid length.
[ 1335.392026][T16582] FAT-fs (loop6): bogus number of FAT sectors
[ 1335.412769][T16582] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1335.468515][T16584] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1335.704004][T16587] bond1: (slave geneve3): making interface the new active one
[ 1336.274332][T16587] bond1: (slave geneve3): Enslaving as an active interface with an up link
[ 1336.529696][T16604] loop6: detected capacity change from 0 to 128
[ 1336.548186][T16598] netem: change failed
[ 1336.624704][T16604] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1336.779870][T16604] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1338.414195][T11496] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1339.136348][T16632] Process accounting resumed
[ 1340.703053][T16651] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1341.130285][   T27] kauditd_printk_skb: 20 callbacks suppressed
[ 1341.130302][   T27] audit: type=1326 audit(1785517906.762:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16644 comm="syz.2.2368" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd22d79e019 code=0x0
[ 1341.159869][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1345.340909][T16673] netlink: 'syz.6.2376': attribute type 11 has an invalid length.
[ 1345.361416][T16673] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2376'.
[ 1345.425092][T16673] ip6erspan0: entered allmulticast mode
[ 1345.478476][T16673] ALSA: mixer_oss: invalid OSS volume ''
[ 1346.083544][   T27] audit: type=1800 audit(1785517911.439:744): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2378" name="host_addr" dev="configfs" ino=42461 res=0 errno=0
[ 1347.358186][T12663] Bluetooth: hci0: unexpected event for opcode 0x0c26
[ 1348.079567][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2382'.
[ 1348.288967][T16700] ip6t_srh: unknown srh match flags  FF3F
[ 1348.985023][T16709] loop5: detected capacity change from 0 to 128
[ 1349.669149][T16709] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1349.729215][T16709] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1350.583457][T16717] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1350.630930][T16722] block nbd6: NBD_DISCONNECT
[ 1350.687388][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'.
[ 1350.746604][T16724] loop4: detected capacity change from 0 to 256
[ 1351.174532][T11469] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1355.195836][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'.
[ 1355.246702][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'.
[ 1355.297442][T16756] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1355.380376][T16756] bond2: (slave bond0): making interface the new active one
[ 1355.388309][T16756] bond2: (slave bond0): Enslaving as an active interface with an up link
[ 1357.732416][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'.
[ 1359.550896][T16833] loop5: detected capacity change from 0 to 512
[ 1359.588122][T16833] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1359.751080][T16833] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[ 1359.771069][T16833] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[ 1359.825494][T16835] loop4: detected capacity change from 0 to 32768
[ 1359.838635][T16833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1361.193767][T11736] read_mapping_page failed!
[ 1361.201928][T11469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1361.222742][T11736] ERROR: (device loop4): txCommit: 
[ 1361.222742][T11736] 
[ 1361.281131][T11736] jfs_write_inode: jfs_commit_inode failed!
[ 1361.427712][T16851] loop5: detected capacity change from 0 to 2048
[ 1362.017568][T16851] loop5: detected capacity change from 0 to 1024
[ 1365.087116][T16896] 
@0Ů: renamed from dummy0 (while UP)
[ 1366.038226][T16909] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[ 1370.616346][T16944] netlink: 'syz.6.2437': attribute type 10 has an invalid length.
[ 1370.685779][T16944] team0: Port device dummy0 added
[ 1373.788777][T16970] cgroup: fork rejected by pids controller in /syz4
[ 1375.963377][T17080] loop6: detected capacity change from 0 to 4096
[ 1376.006247][T17080] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1376.095710][T17080] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[ 1376.146256][T17080] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1376.171727][T17080] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1376.214334][T17080] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1376.235033][T17080] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 1376.501030][T17080] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1376.651997][T17080] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1376.866484][T17080] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1376.875262][T17080] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 1376.928012][T17080] ntfs: volume version 3.1.
[ 1377.836095][T12663] Bluetooth: hci0: ACL packet for unknown connection handle 200
[ 1377.854551][T17100] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1377.896684][T17100] input: syz0 as /devices/virtual/input/input17
[ 1380.075764][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2447'.
[ 1380.094725][T17123] siw: device registration error -23
[ 1380.260165][T17123] wlan1: mtu greater than device maximum
[ 1381.928023][T17250] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1383.533917][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'.
[ 1383.547468][T17281] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[ 1385.758580][T17396] loop5: detected capacity change from 0 to 256
[ 1385.817565][T17396] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1387.459815][T17425] loop5: detected capacity change from 0 to 128
[ 1387.485036][T17425] FAT-fs (loop5): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value
[ 1387.624470][ T7565] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1388.045652][T17487] 
@0Ů: renamed from dummy0 (while UP)
[ 1390.319571][T17538] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 1390.331473][T17538] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 1390.339905][T17538] CPU: 0 PID: 17538 Comm: syz.6.2481 Not tainted syzkaller #0
[ 1390.347381][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1390.357450][T17538] RIP: 0010:dummy_set_selfpowered+0xbb/0x150
[ 1390.363506][T17538] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf ac 25 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a6 ac 25 fb 41 be 78 12 00 00 4d
[ 1390.380018][T17495] Bluetooth: hci2: command 0x0406 tx timeout
[ 1390.383107][T17538] RSP: 0018:ffffc9000426f7e0 EFLAGS: 00010246
[ 1390.383128][T17538] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[ 1390.403143][T17538] RDX: ffff88802fa53c00 RSI: 0000000000000003 RDI: 0000000000000005
[ 1390.411125][T17538] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b
[ 1390.419128][T17538] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000
[ 1390.427093][T17538] R13: ffff888024870530 R14: ffff8881437e1280 R15: 0000000000000000
[ 1390.435058][T17538] FS:  00007fa1b0e3c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1390.443981][T17538] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1390.450553][T17538] CR2: 0000000000000000 CR3: 000000005ed4f000 CR4: 00000000003506f0
[ 1390.458516][T17538] Call Trace:
[ 1390.461787][T17538]  <TASK>
[ 1390.464711][T17538]  ? dummy_wakeup+0x270/0x270
[ 1390.469411][T17538]  usb_gadget_set_selfpowered+0x6e/0x230
[ 1390.475053][T17538]  composite_dev_prepare+0x2fa/0x320
[ 1390.480345][T17538]  configfs_composite_bind+0xa1/0x13f0
[ 1390.485813][T17538]  ? kernfs_put+0x309/0x360
[ 1390.490371][T17538]  ? webusb_landingPage_store+0x1c0/0x1c0
[ 1390.496108][T17538]  gadget_bind_driver+0x2b3/0x770
[ 1390.501149][T17538]  ? gadget_match_driver+0x130/0x130
[ 1390.506435][T17538]  really_probe+0x247/0xae0
[ 1390.510974][T17538]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1390.516171][T17538]  __driver_probe_device+0x1f5/0x390
[ 1390.521454][T17538]  driver_probe_device+0x4f/0x420
[ 1390.526477][T17538]  __driver_attach+0x444/0x6d0
[ 1390.531268][T17538]  bus_for_each_dev+0x235/0x2b0
[ 1390.536114][T17538]  ? driver_attach+0x50/0x50
[ 1390.540700][T17538]  ? bus_remove_file+0x140/0x140
[ 1390.545630][T17538]  ? do_raw_spin_unlock+0x121/0x230
[ 1390.550827][T17538]  bus_add_driver+0x340/0x630
[ 1390.555501][T17538]  driver_register+0x23a/0x310
[ 1390.560258][T17538]  usb_gadget_register_driver_owner+0xf9/0x270
[ 1390.566406][T17538]  gadget_dev_desc_UDC_store+0x1c7/0x2e0
[ 1390.572033][T17538]  configfs_write_iter+0x312/0x400
[ 1390.577157][T17538]  ? gadget_dev_desc_UDC_show+0x80/0x80
[ 1390.582730][T17538]  vfs_write+0x474/0x9a0
[ 1390.586978][T17538]  ? file_end_write+0x250/0x250
[ 1390.591827][T17538]  ? __fget_files+0x3fc/0x460
[ 1390.596539][T17538]  ? __fdget_pos+0x2a3/0x330
[ 1390.601128][T17538]  ? ksys_write+0x74/0x260
[ 1390.605544][T17538]  ksys_write+0x151/0x260
[ 1390.609873][T17538]  ? __ia32_sys_read+0x90/0x90
[ 1390.614639][T17538]  ? lockdep_hardirqs_on+0x98/0x150
[ 1390.619840][T17538]  do_syscall_64+0x55/0xb0
[ 1390.624261][T17538]  ? clear_bhb_loop+0x40/0x90
[ 1390.628930][T17538]  ? clear_bhb_loop+0x40/0x90
[ 1390.633625][T17538]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1390.639526][T17538] RIP: 0033:0x7fa1aff9e019
[ 1390.643964][T17538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1390.663573][T17538] RSP: 002b:00007fa1b0e3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1390.671979][T17538] RAX: ffffffffffffffda RBX: 00007fa1b0225fa0 RCX: 00007fa1aff9e019
[ 1390.679938][T17538] RDX: 000000000000000b RSI: 0000200000000540 RDI: 0000000000000004
[ 1390.687896][T17538] RBP: 00007fa1b003500c R08: 0000000000000000 R09: 0000000000000000
[ 1390.695857][T17538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1390.703816][T17538] R13: 00007fa1b0226038 R14: 00007fa1b0225fa0 R15: 00007ffec1f929c8
[ 1390.711809][T17538]  </TASK>
[ 1390.714826][T17538] Modules linked in:
[ 1390.724657][T17538] ---[ end trace 0000000000000000 ]---
[ 1390.731107][T17538] RIP: 0010:dummy_set_selfpowered+0xbb/0x150
[ 1390.738852][T17538] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf ac 25 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 a6 ac 25 fb 41 be 78 12 00 00 4d
[ 1390.762619][T17538] RSP: 0018:ffffc9000426f7e0 EFLAGS: 00010246
[ 1390.768872][T17538] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002
[ 1390.769329][T17541] ..
@˙: renamed from bond_slave_0 (while UP)
[ 1390.777058][T17538] RDX: ffff88802fa53c00 RSI: 0000000000000003 RDI: 0000000000000005
[ 1390.791361][T17538] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b
[ 1390.799709][T17538] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000
[ 1390.807892][T17538] R13: ffff888024870530 R14: ffff8881437e1280 R15: 0000000000000000
[ 1390.816204][T17538] FS:  00007fa1b0e3c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1390.825437][T17538] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1390.832794][T17538] CR2: 00007fa1b0e1aff8 CR3: 000000005ed4f000 CR4: 00000000003506e0
[ 1390.841260][T17538] Kernel panic - not syncing: Fatal exception
[ 1390.847572][T17538] Kernel Offset: disabled
[ 1390.851897][T17538] Rebooting in 86400 seconds..