last executing test programs:

6m27.740115759s ago: executing program 2 (id=422):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r4 = dup(r2)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m27.290475274s ago: executing program 2 (id=429):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
poll(&(0x7f00000001c0)=[{r3, 0xc004}], 0x1, 0x2)

6m26.935965936s ago: executing program 0 (id=430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x280a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40084)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000027cd400646d4e5fd000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, 0xffffffffffffffff, 0x12, 0x0, @void}, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0)

6m26.106417583s ago: executing program 2 (id=433):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

6m24.607353731s ago: executing program 0 (id=434):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
close(0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)

6m24.591016332s ago: executing program 2 (id=436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r1, 0x605, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./bus\x00', 0x1a10012, &(0x7f000000c680)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1da, &(0x7f0000004680)="$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")
r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0xc8)
getdents(r2, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0xc)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x40e, &(0x7f0000000500)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x40000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

6m20.694504968s ago: executing program 0 (id=443):
syz_usb_connect$uac1(0x2, 0x91, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x1, 0x0, 0x5c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7bf9, 0x22}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x3, 0x9, 0x5, 0x9, 0x4b}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x3, 0x1, 0x7, 0xff, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x1, 0x6, {0x7, 0x25, 0x1, 0x4, 0x2, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x6, 0x4, {0x7, 0x25, 0x1, 0xc, 0x10, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

6m20.672835308s ago: executing program 2 (id=445):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

6m17.608017208s ago: executing program 2 (id=454):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

6m17.485307121s ago: executing program 32 (id=454):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

6m17.440565093s ago: executing program 0 (id=458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r1, 0x605, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./bus\x00', 0x1a10012, &(0x7f000000c680)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0af3e9f7718732aaccc2158ad1dc498162eb5e87e3ec955164b6a97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e1b83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b2155b62fcbb938b0d78d5e36b5e6b7d1c01f8b6423066333a94bb51f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebb5b396e66db522ca6f2ae2ca64ab0d9d3f0eeb890d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd824744057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d423077136da0140277053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efb9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec713655cdd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f4058870827efcf4da44b43c62f3", @ANYBLOB="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", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1da, &(0x7f0000004680)="$eJzs20tu00Acx/GfHcduy/u1YYXEAjbEkEaC7ugBuAC7qjVVhQuIsmmFBN1wD47BjptwgVaCExjZtUldPH6FxAn5fqTW06l/M2Mpf2ccKQKwtK4nvy1Z6ietKIo+3ZP08oUkJ/t/IXdWawQwHZF1VvQmbnH3SnkKwGLo/Szu94wF/i1r2NwFgEV2utlL9gHfLenHr4/bJ+lPv+b+4XTTlnrpH+fyrrRStu34kz+2kuNdRzo5l/eUH8D6bBjo61n+gfL51brrT+dfu5BfqwrGj0yxYzs5PLyfz1+SdFnSFUlXJV1Ln7VuSLpZMP/Ohfnv1Fw/MIn41TfI9ZSVrSE/KDnBK8/H1fNqLwweN5p1rJ/mnxSMW4eb5oct58/y6y3zXpofbL8Nd4xnPW85OlDO/qv+m6msf6Pxx4eT1L9jqH8A1Q4Oj15vhWHwvnnDbpWisSyNbCMZ98S36erUl38xe/zk1/m1VzdW52MZ5kbHNyYAU+d/2H/nHxwePdrb39oNdoM3w9HGs9H6cPR0w0/25f4ku3MA82z8pl/vfGfaCwIAAAAAAAAAAAAAAI3dknS760UAAAAAmIlZfJ2o62sEAAAAAAAAAAAAAAAAAAAA/he/AwAA//8PSDtx")
r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0xc8)
getdents(r2, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0xc)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x40e, &(0x7f0000000500)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x40000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

6m16.890822051s ago: executing program 0 (id=462):
r0 = fsopen(0x0, 0x1)
fsmount(r0, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

6m15.572006174s ago: executing program 0 (id=466):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={<r2=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x2c, &(0x7f0000019200)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000019240)=0xffffffffffffff40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r3 = dup(0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x1, 0x48000047, r3, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

6m14.870906846s ago: executing program 33 (id=466):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={<r2=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x2c, &(0x7f0000019200)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000019240)=0xffffffffffffff40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r3 = dup(0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x1, 0x48000047, r3, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

1m30.84260208s ago: executing program 6 (id=1482):
syz_open_procfs$namespace(0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2b5f091, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m29.552374881s ago: executing program 6 (id=1489):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x25, {"4831ff48c7c6000004004881c60001000048893e"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x3d})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x6)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff)

1m29.380022917s ago: executing program 6 (id=1494):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4)

1m28.733542868s ago: executing program 6 (id=1496):
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14)

1m26.977886315s ago: executing program 6 (id=1500):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

1m26.003476056s ago: executing program 6 (id=1506):
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "5276c4bad19dda366343997c707ee77d1502b6ed1b678276", "31c58cee7b89fc95e148796dcfcef082d46a688d145b590f2d775dbd1a36a55b"}}}}}}, 0x0)
recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x3ffff90, 0x2, 0x0)

1m9.830334569s ago: executing program 34 (id=1506):
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @random="5c35fdcaedf2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xc7, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "5276c4bad19dda366343997c707ee77d1502b6ed1b678276", "31c58cee7b89fc95e148796dcfcef082d46a688d145b590f2d775dbd1a36a55b"}}}}}}, 0x0)
recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x3ffff90, 0x2, 0x0)

7.7120728s ago: executing program 4 (id=1757):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xc8742, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x6)
read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000006}, 0x0, 0x0)

6.928043876s ago: executing program 4 (id=1762):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0})

6.020007195s ago: executing program 1 (id=1765):
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
r1 = io_uring_setup(0x59a2, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x1, 0x1000168, 0x0, r0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)

6.019722785s ago: executing program 4 (id=1766):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

5.992197486s ago: executing program 3 (id=1768):
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.933057528s ago: executing program 7 (id=1769):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00)
r0 = inotify_init()
r1 = socket(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000280)={0x2000})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x200f})
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb)
writev(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)="f5", 0x1}, {&(0x7f0000000640)="2251a9c6ca470000000008809ad3506332bbff1002955925a4115b6899fd49e8191f800d2a77f7ab51d2a645fe46f99fa87a69f4912afdc49542883f226de78b543ccdd5a64724270b", 0x49}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
sendfile(r4, r2, &(0x7f0000000280)=0x49, 0x7fff)

5.86248956s ago: executing program 3 (id=1770):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

5.815814192s ago: executing program 7 (id=1772):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)
r3 = socket(0x10, 0x803, 0x0)
write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x38, 0x6, [0x0, 0x1000, 0x4, 0x1d, 0x11a6, 0xd]}})

5.694050465s ago: executing program 3 (id=1773):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
socket(0x10, 0x803, 0x4)

5.023935347s ago: executing program 1 (id=1775):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x100000000, 0x7, 0x6, 0x4, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000440)="800000800000210ee7decd7a000340", 0xf, 0x8f23ad612ab126ec, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd5, 0x6, @multicast}, 0x14)

4.788352065s ago: executing program 7 (id=1776):
kexec_load(0x1, 0x0, 0x0, 0x3e0000)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, 0x0, 0x0)
pipe(&(0x7f0000000040))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup2(r1, r2)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c)
sendto$inet6(r2, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x43}, 0x8)

4.687167658s ago: executing program 1 (id=1777):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

3.38403673s ago: executing program 4 (id=1778):
r0 = socket$inet(0x2, 0x1, 0x0)
listen(r0, 0x9)
bind$inet(r0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x22, &(0x7f00000004c0)=ANY=[], 0x0)

3.270621264s ago: executing program 4 (id=1779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)

3.061754041s ago: executing program 1 (id=1780):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
io_setup(0x7, 0x0)
io_submit(0x0, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x103002, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x42142, 0x80)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)
creat(&(0x7f0000000100)='./bus\x00', 0x44)

3.015391152s ago: executing program 5 (id=1781):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
syz_open_dev$ttys(0xc, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000054)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

2.889251706s ago: executing program 3 (id=1782):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, r4, 0x301, 0x0, 0x0, {0x34}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

2.844749908s ago: executing program 5 (id=1783):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xb)
splice(r4, 0x0, r2, 0x0, 0x1000, 0x0)
splice(r1, 0x0, r5, 0x0, 0x80, 0x0)

2.824565398s ago: executing program 7 (id=1784):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
msgget(0x2, 0x600)

2.082428212s ago: executing program 4 (id=1785):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0), 0x1, 0x4ef, &(0x7f00000003c0)="$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")
fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x3000000)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
fallocate(r1, 0x0, 0x9b1, 0x1001ed)
fallocate(r1, 0x3, 0xf00, 0x10000)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="ff", 0x1}], 0x1, 0x2000002, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x7a67fffc)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

1.591069298s ago: executing program 5 (id=1786):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
syz_genetlink_get_family_id$nl80211(0x0, r3)

1.590706618s ago: executing program 3 (id=1787):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@host})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
close_range(r0, 0xffffffffffffffff, 0x0)

1.299504028s ago: executing program 7 (id=1788):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0)
recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0)
r5 = dup2(r1, r2)
fcntl$setown(r5, 0x8, r0)
tkill(r0, 0x13)

1.298896038s ago: executing program 5 (id=1789):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0xb000, 0xffffffff, 0x8, 0x40, 0x8f, 0x3, 0x9, 0x80, 0x7, 0x80, 0x7f, 0x5}, {0x60000, 0x7000, 0xf, 0x7, 0x5, 0xae, 0x8, 0x80, 0x7, 0x9, 0x58, 0x6}, {0x41000, 0x0, 0x4, 0xd, 0x64, 0x6, 0xea, 0x40, 0x3, 0x9, 0x0, 0x81}, {0x58000, 0xb000, 0x0, 0x95, 0x5, 0x5, 0xb, 0xff, 0x28, 0x6, 0x7, 0x2}, {0xeeee0000, 0x200000, 0xe, 0x2, 0x5, 0x5, 0xff, 0x7, 0x40, 0x8, 0x6, 0x1}, {0xdddd1000, 0xfec00000, 0x9, 0x9, 0x1, 0x1, 0x4, 0x80, 0x1c, 0x2, 0x10, 0xf4}, {0x10000, 0xa000, 0xf, 0x87, 0xfd, 0x9, 0xd, 0xff, 0x58, 0x1, 0x9b, 0x4}, {0xa000, 0x2, 0xf, 0x8, 0xff, 0x8, 0x0, 0x7, 0x6, 0x9, 0x4, 0xf9}, {0x1}, {0x41000, 0x1}, 0x8, 0x0, 0xc000, 0x416084, 0x6, 0x6101, 0x0, [0x3, 0x3, 0x71, 0x2]})
syz_kvm_add_vcpu$x86(0x0, 0x0)
gettid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
ftruncate(r1, 0xc17a)
socket$inet_sctp(0x2, 0x1, 0x84)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r2, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c4", 0xb3c, 0x6, 0x0)
mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)

1.2443432s ago: executing program 5 (id=1790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380))
openat(0xffffffffffffff9c, 0x0, 0x42, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)

1.22811489s ago: executing program 1 (id=1791):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x1000000)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d5f6b37d0683f61d45463f6add85d2"], 0x0)

955.467889ms ago: executing program 3 (id=1792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @broadcast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

604.21588ms ago: executing program 7 (id=1793):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)='x', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @private1, 0x1}, 0x1c, 0x0}}], 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)

188.639483ms ago: executing program 1 (id=1794):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$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")
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
timer_create(0x7, &(0x7f0000000080)={0x0, 0x2c, 0x2}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

0s ago: executing program 5 (id=1795):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
poll(&(0x7f0000000040)=[{r0, 0x4}, {r0, 0x1403}], 0x2, 0x5)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x2000000)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001a00)={0x11cc, 0x12, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x11bb, 0x7b, 0x0, 0x1, [@typed={0x4}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="34e9f6600b112d1e5962f64a1621a95f19f157ccbf9618f225e3badb451a8f56a8b0ad633397d59f629faff31bd36d88cf930ceb6f52a0667208f0cde7c96a38d932b176a52cb66dfdc5a70ae40c4e6d2863517cea9b6f023c70b358a46c5da9cbab92eeb05974e0782f1d1c169460e6fafbd10f32ebe80ed58adab3e3250762a74e9adfd88dc836c108c9af1fce0946db84a18be7f4c72ad17fd9ddd9ae8da04839f9f40b6c8333fd89f5750473252a265cce6f052c55b3119c55", @nested={0x10da, 0xf9, 0x0, 0x1, [@typed={0x4, 0x149}, @generic="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", @generic="c3a1b314fd497bc736b2ccffa8d6bc083cc16d00f4aa9feb4c73a7eb05f89677491e4b3277357e153bfacb4698dd0deef743ec39757b016b0b2496dae7a73d8b38f0b66717fc83475f12acc9159eeaddce6ded51990857a11d0bbf70b368afff842c2d122d810b140d58174cb1e09cdea9e58871388ec482c6638dad1416190c585905319cacd536bb84eda18dd1d616545dde98c4a5dc0ea1d9c27a42410d8b88d37ec4c8a202b52106e8e37b25", @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x147}, @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x100000001}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r0}, @typed={0x4, 0xcb}]}, @nested={0x8, 0x105, 0x0, 0x1, [@nested={0x4, 0x152}]}]}]}, 0x11cc}], 0x1}, 0x41)

kernel console output (not intermixed with test programs):

t [1, 0] type 2 family 0 port 6081 - 0
[  108.322637][ T4924] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.331666][ T4924] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.442219][ T4928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.198'.
[  108.479952][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'.
[  108.537328][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'.
[  108.794646][ T4959] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  108.818325][ T4177] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc
[  108.928443][ T4177] usb 3-1: USB disconnect, device number 3
[  109.377071][ T4177] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  109.747161][ T4177] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.777197][ T4177] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  109.803526][ T4177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.837858][ T4971] loop0: detected capacity change from 0 to 512
[  109.846304][ T4177] usb 3-1: config 0 descriptor??
[  109.877243][ T4971] EXT4-fs (loop0): Ignoring removed nobh option
[  109.909699][ T4177] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  110.043287][ T4971] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.211: corrupted in-inode xattr
[  110.084216][ T4971] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.211: couldn't read orphan inode 15 (err -117)
[  110.146289][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,nombcache,resuid=0x0000000000000000,usrjquota=,barrier,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  110.282109][ T4971] tipc: Started in network mode
[  110.308119][ T4971] tipc: Node identity ac14142f, cluster identity 4711
[  110.315722][ T4971] tipc: New replicast peer: 0.0.0.0
[  110.349522][ T4971] tipc: Enabled bearer <udp:syz2>, priority 10
[  110.380030][ T4971] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  110.488760][    C1] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  110.513932][ T4979] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.679834][ T4177] usb 3-1: USB disconnect, device number 4
[  111.544157][ T4286] tipc: Node number set to 2886997039
[  113.377888][ T5010] loop2: detected capacity change from 0 to 128
[  113.472806][ T5010] =======================================================
[  113.472806][ T5010] WARNING: The mand mount option has been deprecated and
[  113.472806][ T5010]          and is ignored by this kernel. Remove the mand
[  113.472806][ T5010]          option from the mount to silence this warning.
[  113.472806][ T5010] =======================================================
[  113.607889][ T5018] tipc: Can't bind to reserved service type 0
[  113.723410][   T26] audit: type=1804 audit(1779150926.628:5): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.223" name="/newroot/35/file0/bus" dev="loop2" ino=1048591 res=1 errno=0
[  113.745715][ T5020] IPVS: Error joining to the multicast group
[  113.779505][   T26] audit: type=1804 audit(1779150926.668:6): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.223" name="/newroot/35/file0/bus" dev="loop2" ino=1048591 res=1 errno=0
[  113.812500][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[  113.826534][   T26] audit: type=1804 audit(1779150926.678:7): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.223" name="/newroot/35/file0/bus" dev="loop2" ino=1048591 res=1 errno=0
[  113.847576][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[  114.324905][ T5043] loop0: detected capacity change from 0 to 128
[  114.425364][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[  114.445821][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[  114.455639][ T5040] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  114.758661][ T5055] loop2: detected capacity change from 0 to 128
[  114.932125][ T5055] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 50)
[  115.107143][ T5055] FAT-fs (loop2): Filesystem has been set read-only
[  115.187309][ T5055] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 50)
[  115.207171][ T5055] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 50)
[  115.579715][ T5055] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 50)
[  116.048985][ T5065] x_tables: duplicate entry at hook 1
[  116.255307][ T5070] loop2: detected capacity change from 0 to 512
[  116.931223][ T5070] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  117.429346][ T5070] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.904713][ T5098] overlayfs: failed to clone upperpath
[  118.197460][ T5110] fuse: Bad value for 'fd'
[  118.229080][ T5111] capability: warning: `syz.0.260' uses deprecated v2 capabilities in a way that may be insecure
[  118.285112][ T5111] loop0: detected capacity change from 0 to 256
[  122.195361][ T5152] netlink: 'syz.0.277': attribute type 4 has an invalid length.
[  122.235359][ T5139] syz.3.273 uses obsolete (PF_INET,SOCK_PACKET)
[  123.587671][ T5161] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  123.836755][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'.
[  125.676947][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  126.087306][ T5206] loop0: detected capacity change from 0 to 16
[  126.136302][   T26] audit: type=1326 audit(1779150939.038:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5173f9e59 code=0x0
[  126.148587][ T5206] erofs: (device loop0): mounted with root inode @ nid 36.
[  126.194466][   T26] audit: type=1326 audit(1779150939.098:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.221773][   T26] audit: type=1326 audit(1779150939.108:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.253439][   T26] audit: type=1326 audit(1779150939.108:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.301837][   T26] audit: type=1326 audit(1779150939.108:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.378414][   T26] audit: type=1326 audit(1779150939.108:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.407859][   T26] audit: type=1326 audit(1779150939.118:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.447571][   T26] audit: type=1326 audit(1779150939.118:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.473928][   T26] audit: type=1326 audit(1779150939.118:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.502812][   T26] audit: type=1326 audit(1779150939.118:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x7ffc0000
[  126.907220][ T5206] netlink: 3 bytes leftover after parsing attributes in process `syz.0.293'.
[  127.414757][ T5206] 0ªX¹¦À: renamed from caif0
[  127.479733][ T5206] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  127.936232][ T5253] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.304'.
[  127.976729][ T5257] loop0: detected capacity change from 0 to 16
[  128.074430][ T5257] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  128.468294][ T4948] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  128.600430][ T5274] 8021q: adding VLAN 0 to HW filter on device batadv1
[  129.577316][ T4948] usb 1-1: Using ep0 maxpacket: 8
[  129.717170][ T4948] usb 1-1: config 0 has no interfaces?
[  129.727131][ T4948] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  129.827433][ T4948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.558613][ T4948] usb 1-1: config 0 descriptor??
[  131.360488][ T5317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'.
[  133.199030][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  133.205952][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  133.236621][ T4177] ODEBUG: Out of memory. ODEBUG disabled
[  134.358839][ T5345] loop2: detected capacity change from 0 to 64
[  134.989022][ T5353] overlayfs: failed to clone upperpath
[  135.169184][ T5344] UBIFS error (pid: 5344): cannot open "c:::", error -22
[  135.270243][ T5361] netlink: 2 bytes leftover after parsing attributes in process `syz.3.330'.
[  135.289738][ T5361] kAFS: unable to lookup cell '.,'
[  135.338485][    T7] usb 1-1: USB disconnect, device number 3
[  135.398990][ T5364] netlink: 399 bytes leftover after parsing attributes in process `syz.4.328'.
[  136.337057][   T26] kauditd_printk_skb: 133 callbacks suppressed
[  136.337075][   T26] audit: type=1326 audit(1779150949.238:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.3.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc28dfffe59 code=0x0
[  139.036522][ T5391] netem: change failed
[  139.251735][ T5397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'.
[  140.637276][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'.
[  141.032381][ T5405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.039841][ T5405] IPv6: NLM_F_CREATE should be set when creating new route
[  141.557800][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'.
[  141.662239][ T5416] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼
[  144.850237][ T5466] netlink: 'syz.1.368': attribute type 16 has an invalid length.
[  144.874676][ T5466] netlink: 'syz.1.368': attribute type 17 has an invalid length.
[  144.930058][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  144.959243][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  144.987465][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.015001][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  145.061896][ T5466] 8021q: adding VLAN 0 to HW filter on device team0
[  145.081875][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  145.109354][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready
[  145.131417][ T5466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.150187][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'.
[  145.350316][ T5488] overlayfs: failed to clone upperpath
[  145.378277][ T5485] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.410475][ T5490] device macvlan2 entered promiscuous mode
[  145.470929][ T5490] device bond1 entered promiscuous mode
[  145.529622][ T5490] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  145.563404][ T5490] device bond1 left promiscuous mode
[  145.631692][ T5498] tipc: Enabled bearer <udp:s>, priority 10
[  147.803553][ T5521] netlink: 'syz.4.384': attribute type 29 has an invalid length.
[  147.928871][ T5521] netlink: 'syz.4.384': attribute type 29 has an invalid length.
[  149.335948][ T5521] netlink: 'syz.4.384': attribute type 29 has an invalid length.
[  149.365108][ T5534] netlink: 'syz.3.387': attribute type 1 has an invalid length.
[  149.631003][ T5537] bond2: (slave gretap1): making interface the new active one
[  149.681432][ T5537] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  149.739791][ T5538] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  149.904643][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'.
[  149.995250][ T5542] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  150.008800][ T5549] loop2: detected capacity change from 0 to 2048
[  150.053791][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'.
[  150.084983][ T5543] device bond2 entered promiscuous mode
[  150.091164][ T5543] device gretap1 entered promiscuous mode
[  150.099281][ T5543] 8021q: adding VLAN 0 to HW filter on device bond2
[  150.136736][ T5552] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.689789][ T5570] netlink: 180 bytes leftover after parsing attributes in process `syz.3.408'.
[  151.737957][ T5570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.408'.
[  152.416782][ T5583] sch_fq: defrate 53322 ignored.
[  152.535193][ T5572] device syzkaller1 entered promiscuous mode
[  152.561218][ T5587] netlink: 'syz.3.402': attribute type 29 has an invalid length.
[  152.587736][ T5587] netlink: 'syz.3.402': attribute type 29 has an invalid length.
[  152.637336][ T5587] netlink: 'syz.3.402': attribute type 29 has an invalid length.
[  153.694172][ T5605] netlink: 'syz.0.410': attribute type 13 has an invalid length.
[  153.902841][ T5614] loop2: detected capacity change from 0 to 1024
[  154.174365][ T5614] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.220501][ T5614] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.284108][ T5620] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.335403][ T5620] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.383184][ T5614] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.409677][ T5614] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.511663][ T5623] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.532316][ T5623] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.569741][ T5620] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.605869][ T5620] hfsplus: request for non-existent node 33423360 in B*Tree
[  154.694089][ T5614] hfsplus: request for non-existent node 33423360 in B*Tree
[  155.606583][ T5614] hfsplus: request for non-existent node 33423360 in B*Tree
[  155.682002][ T5620] hfsplus: request for non-existent node 33423360 in B*Tree
[  155.742788][ T5620] hfsplus: request for non-existent node 33423360 in B*Tree
[  155.781398][ T5623] hfsplus: request for non-existent node 33423360 in B*Tree
[  155.788763][ T5623] hfsplus: request for non-existent node 33423360 in B*Tree
[  156.108902][ T5643] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  157.180498][ T5660] IPVS: Unknown mcast interface: vcan0
[  159.098887][ T5674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.106224][ T5674] IPv6: NLM_F_CREATE should be set when creating new route
[  159.186015][ T5681] loop2: detected capacity change from 0 to 64
[  160.102751][ T5681] attempt to access beyond end of device
[  160.102751][ T5681] loop2: rw=2049, want=268435470, limit=64
[  160.126182][ T5681] Buffer I/O error on dev loop2, logical block 134217734, lost async page write
[  160.141713][ T5681] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only
[  160.166145][ T5681] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  161.267817][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.276001][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.420425][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.458715][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.795661][ T5674] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.805187][ T5674] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.815996][ T5674] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.825040][ T5674] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.934502][ T5687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.437'.
[  162.986598][ T5696] bridge_slave_0: default FDB implementation only supports local addresses
[  163.013791][ T5709] tipc: Started in network mode
[  163.025046][ T5709] tipc: Node identity 4, cluster identity 4711
[  163.039662][ T5709] tipc: Node number set to 4
[  163.084780][ T5717] IPVS: Error joining to the multicast group
[  163.252614][ T4286] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  164.985790][ T4286] usb 1-1: unable to get BOS descriptor or descriptor too short
[  165.044756][ T4286] usb 1-1: not running at top speed; connect to a high speed hub
[  165.155848][ T5736] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  165.173163][ T5738] device macvtap1 entered promiscuous mode
[  165.253550][ T5737] device macvtap2 entered promiscuous mode
[  165.272306][ T4286] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4
[  165.287196][ T4286] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  165.308151][ T4286] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  165.364754][ T5741] No such timeout policy "syz1"
[  166.120438][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.131657][ T4286] usb 1-1: string descriptor 0 read error: -71
[  166.138053][ T4286] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  166.148634][ T4286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.179043][ T4286] usb 1-1: can't set config #1, error -71
[  166.210120][ T4286] usb 1-1: USB disconnect, device number 4
[  166.236419][ T5752] loop0: detected capacity change from 0 to 64
[  166.302889][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.372517][ T5752] attempt to access beyond end of device
[  166.372517][ T5752] loop0: rw=2049, want=268435470, limit=64
[  166.411769][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.434443][ T5752] Buffer I/O error on dev loop0, logical block 134217734, lost async page write
[  166.497994][ T5752] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only
[  166.530806][ T5752] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  166.648604][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.840248][ T4177] Bluetooth: hci3: command 0x0409 tx timeout
[  168.986287][ T5762] chnl_net:caif_netlink_parms(): no params data found
[  169.044016][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'.
[  169.266193][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.290028][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.301539][ T5762] device bridge_slave_0 entered promiscuous mode
[  169.370922][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.378104][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.393210][ T5762] device bridge_slave_1 entered promiscuous mode
[  169.537140][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.567781][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.624043][ T5792] chnl_net:caif_netlink_parms(): no params data found
[  169.665225][ T5762] team0: Port device team_slave_0 added
[  169.720152][ T5762] team0: Port device team_slave_1 added
[  169.812618][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.860525][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.296427][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.609135][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.643413][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.670103][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.844278][ T4177] Bluetooth: hci3: command 0x041b tx timeout
[  171.005245][ T5762] device hsr_slave_0 entered promiscuous mode
[  171.061048][ T5762] device hsr_slave_1 entered promiscuous mode
[  171.077711][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.081869][ T4286] Bluetooth: hci1: command 0x0409 tx timeout
[  171.112908][ T5762] Cannot create hsr debugfs directory
[  171.118574][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.136356][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.161289][ T5792] device bridge_slave_0 entered promiscuous mode
[  171.254324][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.261929][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.271129][ T5792] device bridge_slave_1 entered promiscuous mode
[  171.385616][    T9] device hsr_slave_0 left promiscuous mode
[  171.405037][    T9] batman_adv: batadv0: Interface deactivated: dummy0
[  171.419966][    T9] batman_adv: batadv0: Removing interface: dummy0
[  171.436095][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.446404][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.467657][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.481449][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.489521][    T9] device bridge_slave_1 left promiscuous mode
[  171.497989][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.521284][    T9] device bridge_slave_0 left promiscuous mode
[  171.527809][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.547728][    T9] device veth1_macvtap left promiscuous mode
[  171.554356][    T9] device veth0_macvtap left promiscuous mode
[  171.562101][    T9] device veth1_vlan left promiscuous mode
[  171.568562][    T9] device veth0_vlan left promiscuous mode
[  172.609246][    T9] team0 (unregistering): Port device team_slave_1 removed
[  172.733039][    T9] team0 (unregistering): Port device team_slave_0 removed
[  172.806261][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.891645][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.904946][   T21] Bluetooth: hci3: command 0x040f tx timeout
[  172.989394][    T9] bond0 (unregistering): Released all slaves
[  173.071802][ T5861] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  173.102348][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.142897][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  173.145926][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.270099][ T5792] team0: Port device team_slave_0 added
[  173.331449][ T5792] team0: Port device team_slave_1 added
[  173.604020][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.681032][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.932376][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.276236][ T5880] netlink: 'syz.1.484': attribute type 9 has an invalid length.
[  174.284440][ T5880] netlink: 'syz.1.484': attribute type 7 has an invalid length.
[  174.292094][ T5880] netlink: 'syz.1.484': attribute type 8 has an invalid length.
[  174.371614][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.420152][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.445780][ T5882] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa
[  174.504369][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.712746][ T5792] device hsr_slave_0 entered promiscuous mode
[  174.742085][ T5792] device hsr_slave_1 entered promiscuous mode
[  174.786556][ T5894] netlink: 140 bytes leftover after parsing attributes in process `syz.4.488'.
[  174.827925][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.488'.
[  174.843209][ T5762] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.903736][ T5762] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  175.012937][ T4286] Bluetooth: hci3: command 0x0419 tx timeout
[  175.021910][ T5762] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  175.192321][ T5762] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  175.206245][   T23] Bluetooth: hci1: command 0x040f tx timeout
[  175.574508][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.624140][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  175.646559][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  175.687041][ T5762] 8021q: adding VLAN 0 to HW filter on device team0
[  175.710797][ T5792] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  175.755414][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  175.798021][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  175.825817][ T5925] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by ""[5925]
[  175.833593][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.843386][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.908478][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  175.948187][ T5792] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  175.981820][ T5792] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  176.036976][ T5792] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  176.065648][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.091006][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.128536][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.135892][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.246043][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.271099][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.284773][ T5937] netlink: 232 bytes leftover after parsing attributes in process `syz.3.496'.
[  176.335546][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  176.359462][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  176.393560][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.441585][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  176.504205][ T5762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.547133][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.585919][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  176.604951][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  176.635099][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  176.676260][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  176.718099][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.764628][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  176.862418][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.905981][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'.
[  176.952785][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.973332][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.058245][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[  177.272391][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[  177.930285][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.952004][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.009178][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.016498][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.068636][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.117171][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.155887][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.163001][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.212023][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.241051][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.270194][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.296633][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.368561][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.415421][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.423526][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.474287][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.515346][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.522936][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.559461][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.599462][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.633476][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.644897][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.692357][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.726600][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.159587][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.206068][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.217806][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.289664][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.317583][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.379048][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.400207][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.440942][ T5762] device veth0_vlan entered promiscuous mode
[  180.457951][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.486287][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.520871][ T5762] device veth1_vlan entered promiscuous mode
[  180.532771][ T4177] Bluetooth: hci0: command 0x0406 tx timeout
[  180.633232][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.654233][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.695797][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.720850][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.764319][ T5762] device veth0_macvtap entered promiscuous mode
[  180.796170][ T5762] device veth1_macvtap entered promiscuous mode
[  180.871810][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.902788][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.930351][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.969997][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.001775][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.024087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.041663][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.091230][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.132642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.149488][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.161319][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.188330][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.208108][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.234085][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.385503][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.412563][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.422539][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.432270][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.454905][ T5762] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.470530][ T5762] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.796693][ T5762] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.887018][ T5762] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.394459][ T5792] device veth0_vlan entered promiscuous mode
[  182.436952][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  182.459273][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  182.491556][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  182.501818][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.362706][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.416638][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.571732][ T5792] device veth1_vlan entered promiscuous mode
[  183.736084][ T5792] device veth0_macvtap entered promiscuous mode
[  183.773813][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.794038][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.806168][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.815092][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  183.839398][ T5792] device veth1_macvtap entered promiscuous mode
[  184.786533][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.836223][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.847056][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.868285][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.883090][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.896316][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.914578][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.938897][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  184.961182][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  184.994439][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.006630][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.031609][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.051394][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.061272][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.090486][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.112643][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.120684][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.144435][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.144489][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  185.171902][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  185.192606][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  185.216206][ T5792] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.241100][ T5792] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.269064][ T5792] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.298314][ T5792] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.581889][ T4877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.603386][ T4877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.700573][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.737516][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.757784][ T6078] netlink: 'syz.5.517': attribute type 4 has an invalid length.
[  185.769862][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.890384][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  185.910291][ T6083] netlink: 'syz.5.517': attribute type 4 has an invalid length.
[  186.008132][    T9] tipc: Disabling bearer <udp:syz2>
[  186.027300][    T9] tipc: Left network mode
[  186.979317][    T9] device hsr_slave_0 left promiscuous mode
[  187.005230][    T9] device hsr_slave_1 left promiscuous mode
[  187.026631][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.064233][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.087170][    T9] device bridge_slave_1 left promiscuous mode
[  187.109126][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.149431][    T9] device bridge_slave_0 left promiscuous mode
[  187.165734][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.299539][ T6136] capability: warning: `syz.3.533' uses 32-bit capabilities (legacy support in use)
[  187.443747][    T9] bond1 (unregistering): Released all slaves
[  187.445108][ T6142] loop5: detected capacity change from 0 to 64
[  188.177650][   T26] audit: type=1800 audit(1779151001.600:152): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.534" name="file1" dev="loop5" ino=21 res=0 errno=0
[  188.284469][ T6138] attempt to access beyond end of device
[  188.284469][ T6138] loop5: rw=0, want=108, limit=64
[  188.336473][ T6138] Buffer I/O error on dev loop5, logical block 107, async page read
[  188.381828][ T6138] attempt to access beyond end of device
[  188.381828][ T6138] loop5: rw=0, want=109, limit=64
[  188.413474][ T6138] Buffer I/O error on dev loop5, logical block 108, async page read
[  188.433743][ T6138] attempt to access beyond end of device
[  188.433743][ T6138] loop5: rw=0, want=110, limit=64
[  188.489310][ T6138] Buffer I/O error on dev loop5, logical block 109, async page read
[  188.508196][ T6138] attempt to access beyond end of device
[  188.508196][ T6138] loop5: rw=0, want=111, limit=64
[  188.520967][    T9] team0 (unregistering): Port device team_slave_1 removed
[  188.558035][ T6138] Buffer I/O error on dev loop5, logical block 110, async page read
[  188.571497][    T9] team0 (unregistering): Port device team_slave_0 removed
[  188.590766][ T6138] attempt to access beyond end of device
[  188.590766][ T6138] loop5: rw=0, want=112, limit=64
[  188.621342][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.638665][ T6138] Buffer I/O error on dev loop5, logical block 111, async page read
[  188.660820][ T6138] attempt to access beyond end of device
[  188.660820][ T6138] loop5: rw=0, want=113, limit=64
[  188.697517][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.715509][ T6138] Buffer I/O error on dev loop5, logical block 112, async page read
[  188.748399][ T6138] attempt to access beyond end of device
[  188.748399][ T6138] loop5: rw=0, want=114, limit=64
[  188.788884][ T6138] Buffer I/O error on dev loop5, logical block 113, async page read
[  188.949842][    T9] bond0 (unregistering): Released all slaves
[  189.285816][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'.
[  190.318559][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'.
[  190.414741][ T6166] loop5: detected capacity change from 0 to 128
[  191.671423][ T6186] loop6: detected capacity change from 0 to 128
[  191.989305][   T26] audit: type=1804 audit(1779151005.421:153): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.547" name="/newroot/6/file0/bus" dev="loop6" ino=1048598 res=1 errno=0
[  192.108143][   T26] audit: type=1804 audit(1779151005.421:154): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.547" name="/newroot/6/file0/bus" dev="loop6" ino=1048598 res=1 errno=0
[  192.257593][   T26] audit: type=1804 audit(1779151005.421:155): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.547" name="/newroot/6/file0/bus" dev="loop6" ino=1048598 res=1 errno=0
[  193.769714][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  193.776528][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  197.792853][ T6274] xt_TCPMSS: Only works on TCP SYN packets
[  199.221305][   T26] audit: type=1804 audit(1779151012.665:156): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.572" name="file0" dev="hugetlbfs" ino=38585 res=1 errno=0
[  199.393614][ T6285] loop6: detected capacity change from 0 to 1024
[  199.551815][ T6285] EXT4-fs (loop6): Ignoring removed orlov option
[  199.642075][   T26] audit: type=1804 audit(1779151013.086:157): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.572" name="file0" dev="hugetlbfs" ino=38585 res=1 errno=0
[  199.673403][ T6285] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  202.068034][ T6332] netlink: 'syz.1.580': attribute type 4 has an invalid length.
[  202.144740][ T6336] netlink: 'syz.1.580': attribute type 4 has an invalid length.
[  202.380907][ T6346] x_tables: unsorted underflow at hook 4
[  203.113644][ T6357] netlink: 'syz.3.584': attribute type 9 has an invalid length.
[  203.121618][ T6357] netlink: 'syz.3.584': attribute type 7 has an invalid length.
[  203.129408][ T6357] netlink: 'syz.3.584': attribute type 8 has an invalid length.
[  203.206379][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.585'.
[  203.760134][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.585'.
[  203.833871][ T6364] device bond0 entered promiscuous mode
[  203.894390][ T6364] device bond_slave_0 entered promiscuous mode
[  203.936324][ T6364] device bond_slave_1 entered promiscuous mode
[  203.986482][ T6364] device batadv0 entered promiscuous mode
[  204.031139][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'.
[  204.101351][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.248243][ T6369] netlink: 'syz.4.586': attribute type 10 has an invalid length.
[  204.266325][ T6369] device syz_tun entered promiscuous mode
[  204.360203][ T6369] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  207.354134][ T6410] loop6: detected capacity change from 0 to 512
[  207.632510][ T6410] EXT4-fs (loop6): external journal device major/minor numbers have changed
[  207.690375][ T6410] block device autoloading is deprecated and will be removed.
[  207.699307][ T6410] EXT4-fs (loop6): external journal has bad superblock
[  208.148814][ T6451] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  209.497986][ T6471] netlink: 'syz.3.616': attribute type 4 has an invalid length.
[  210.109573][ T6474] netlink: 'syz.3.616': attribute type 4 has an invalid length.
[  210.737271][ T6489] loop6: detected capacity change from 0 to 64
[  210.859848][   T26] audit: type=1800 audit(1779151024.318:158): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.621" name="file1" dev="loop6" ino=21 res=0 errno=0
[  210.908727][ T6489] attempt to access beyond end of device
[  210.908727][ T6489] loop6: rw=0, want=108, limit=64
[  210.928104][ T6489] Buffer I/O error on dev loop6, logical block 107, async page read
[  210.981753][ T6489] attempt to access beyond end of device
[  210.981753][ T6489] loop6: rw=0, want=109, limit=64
[  211.012251][ T6495] xt_hashlimit: size too large, truncated to 1048576
[  211.027048][ T6489] Buffer I/O error on dev loop6, logical block 108, async page read
[  211.040130][ T6495] xt_hashlimit: invalid rate
[  211.045303][ T6489] attempt to access beyond end of device
[  211.045303][ T6489] loop6: rw=0, want=110, limit=64
[  211.075946][ T6489] Buffer I/O error on dev loop6, logical block 109, async page read
[  211.131520][ T6489] attempt to access beyond end of device
[  211.131520][ T6489] loop6: rw=0, want=111, limit=64
[  211.151648][ T6489] Buffer I/O error on dev loop6, logical block 110, async page read
[  211.265314][ T6489] attempt to access beyond end of device
[  211.265314][ T6489] loop6: rw=0, want=112, limit=64
[  211.361257][ T6489] Buffer I/O error on dev loop6, logical block 111, async page read
[  211.369793][ T6489] attempt to access beyond end of device
[  211.369793][ T6489] loop6: rw=0, want=113, limit=64
[  211.381269][ T6489] Buffer I/O error on dev loop6, logical block 112, async page read
[  211.389461][ T6489] attempt to access beyond end of device
[  211.389461][ T6489] loop6: rw=0, want=114, limit=64
[  211.400404][ T6489] Buffer I/O error on dev loop6, logical block 113, async page read
[  215.090615][ T6550] loop6: detected capacity change from 0 to 512
[  215.127322][ T6547] loop5: detected capacity change from 0 to 4096
[  215.148994][ T6550] EXT4-fs (loop6): Ignoring removed bh option
[  215.155592][ T6550] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  215.234539][ T6547] EXT4-fs (loop5): Test dummy encryption mode enabled
[  215.276237][ T6550] EXT4-fs (loop6): Ignoring removed bh option
[  215.282659][ T6547] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5
[  215.282659][ T6547] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  215.282659][ T6547] 
[  215.338160][ T6550] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  215.398954][ T6547] EXT4-fs (loop5): Encoding requested by superblock is unknown
[  215.471831][ T6550] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,mblk_io_submit,grpquota,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  215.489451][ T6550] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.621527][ T6547] kvm: pic: non byte read
[  215.649990][ T6547] kvm: pic: non byte read
[  215.656335][ T6547] kvm: pic: level sensitive irq not supported
[  215.656472][ T6547] kvm: pic: non byte read
[  215.728969][ T6547] kvm: pic: non byte read
[  215.734880][ T6547] kvm: pic: non byte read
[  215.742095][ T6256] udevd[6256]: incorrect ext4 checksum on /dev/loop6
[  215.751024][ T6550] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0003 exceedsupported value
[  215.769536][ T6547] kvm: pic: non byte read
[  215.779569][ T6547] kvm: pic: non byte read
[  215.788738][ T6547] kvm: pic: level sensitive irq not supported
[  215.788814][ T6547] kvm: pic: non byte read
[  215.828441][ T6550] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.639: Corrupt directory, running e2fsck is recommended
[  215.880801][ T6550] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:106: comm syz.6.639: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18
[  217.221787][ T4947] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  217.477530][ T4947] usb 6-1: Using ep0 maxpacket: 32
[  217.645209][ T4947] usb 6-1: config 129 has an invalid interface number: 120 but max is 0
[  217.659107][ T4947] usb 6-1: config 129 has an invalid descriptor of length 123, skipping remainder of the config
[  217.685607][ T4947] usb 6-1: config 129 has no interface number 0
[  217.698126][ T4947] usb 6-1: config 129 interface 120 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  217.771367][ T4947] usb 6-1: config 129 interface 120 has no altsetting 0
[  217.993053][ T4947] usb 6-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab
[  218.022202][ T4947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.057215][ T4947] usb 6-1: Product: syz
[  218.079904][ T4947] usb 6-1: Manufacturer: syz
[  218.119014][ T6607] x_tables: duplicate underflow at hook 2
[  218.125186][ T4947] usb 6-1: SerialNumber: syz
[  220.356877][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'.
[  220.527120][ T4947] usb 6-1: USB disconnect, device number 2
[  220.544891][ T6256] udevd[6256]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory
[  220.767982][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'.
[  220.786749][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.120/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.907906][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'.
[  221.365207][ T6682] Set syz1 is full, maxelem 2 reached
[  221.429750][ T6682] batman_adv: batadv0: Adding interface: dummy0
[  221.468372][ T6682] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.083806][ T6686] orangefs_mount: mount request failed with -4
[  222.136245][ T6682] batman_adv: batadv0: Interface activated: dummy0
[  222.191087][ T6682] Set syz1 is full, maxelem 2 reached
[  222.331010][ T6689] loop6: detected capacity change from 0 to 4096
[  222.386406][ T6696] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'.
[  222.498729][ T6689] EXT4-fs (loop6): inline encryption not supported
[  222.519426][ T6689] EXT4-fs (loop6): Test dummy encryption mode enabled
[  222.559817][ T6689] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  222.741678][ T6689] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  223.739234][ T6689] System zones: 0-5
[  223.903012][ T6689] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  224.959958][ T6689] fscrypt (loop6): Error allocating 'cts(cbc(aes))' transform: -4
[  225.413380][ T6755] xt_NFQUEUE: number of total queues is 0
[  226.140497][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'.
[  226.519084][ T6785] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  226.546478][ T6785] CIFS mount error: No usable UNC path provided in device string!
[  226.546478][ T6785] 
[  226.557472][ T6785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  229.395046][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'.
[  229.436503][ T6818] loop5: detected capacity change from 0 to 256
[  231.799725][ T6848] device ipip0 entered promiscuous mode
[  231.847395][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.703'.
[  234.223696][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'.
[  234.245936][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'.
[  235.563879][ T6880] team0: Port device team_slave_0 removed
[  235.660756][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.713'.
[  240.623067][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.5.725'.
[  241.208253][ T6971] loop5: detected capacity change from 0 to 256
[  243.445601][ T6992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.733'.
[  245.419276][ T7017] netlink: 798 bytes leftover after parsing attributes in process `syz.3.740'.
[  246.520303][ T7029] loop5: detected capacity change from 0 to 128
[  246.637645][ T7029] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  246.687367][ T7029] FAT-fs (loop5): Filesystem has been set read-only
[  247.161980][ T7068] debugfs: Directory 'netdev:syzkaller0' with parent 'phy4' already present!
[  247.311825][ T7070] netlink: 10 bytes leftover after parsing attributes in process `syz.3.755'.
[  247.565138][ T7047] orangefs_mount: mount request failed with -4
[  248.110954][ T7077] loop5: detected capacity change from 0 to 131072
[  248.152191][ T7080] ªªªªª: renamed from virt_wifi0
[  248.203811][ T7077] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  248.211228][ T7077] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  248.232098][ T7077] F2FS-fs (loop5): invalid crc value
[  248.294867][ T7077] F2FS-fs (loop5): Found nat_bits in checkpoint
[  248.370050][ T7077] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  248.377721][ T7077] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  250.192758][ T7114] overlayfs: failed to clone upperpath
[  250.438793][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.6.766'.
[  250.821722][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.6.766'.
[  251.151582][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.6.766'.
[  251.234751][ T7120] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  251.887497][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'.
[  254.996209][ T7198] loop5: detected capacity change from 0 to 128
[  255.034812][ T7196] debugfs: Directory 'netdev:syzkaller0' with parent 'phy7' already present!
[  255.150123][ T7196] netlink: 10 bytes leftover after parsing attributes in process `syz.1.789'.
[  255.182798][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  255.189633][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  258.073046][ T7243] loop5: detected capacity change from 0 to 512
[  258.978010][ T7243] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  259.050624][ T7243] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  260.280395][ T7266] netlink: 'syz.3.807': attribute type 1 has an invalid length.
[  260.281548][ T7243] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #12: comm syz.5.801: iget: bad i_size value: -562949953417216
[  260.314473][ T7243] EXT4-fs (loop5): Remounting filesystem read-only
[  260.332135][ T7243] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.801: couldn't read orphan inode 12 (err -117)
[  260.360912][ T7266] netlink: 'syz.3.807': attribute type 4 has an invalid length.
[  260.389911][ T7266] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.807'.
[  260.435042][ T7243] EXT4-fs (loop5): Remounting filesystem read-only
[  260.476986][ T7243] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,mblk_io_submit,barrier=0x0000000000000009,errors=remount-ro,acl,journal_ioprio=0x0000000000000000,max_batch_time=0x0000000000000006,resgid=0x000000000000ee002. Quota mode: writeback.
[  260.641427][ T7243] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 12
[  260.666248][ T7243] EXT4-fs (loop5): Remounting filesystem read-only
[  260.706620][ T7243] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 12
[  260.756142][ T7243] EXT4-fs (loop5): Remounting filesystem read-only
[  260.796576][ T7243] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 12
[  260.969164][ T7243] EXT4-fs (loop5): Remounting filesystem read-only
[  261.056151][ T7296] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 12
[  261.082489][ T7296] EXT4-fs (loop5): Remounting filesystem read-only
[  261.445246][ T7298] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 12
[  261.545553][ T7298] EXT4-fs (loop5): Remounting filesystem read-only
[  261.765901][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.814'.
[  261.780536][ T7243] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 12
[  261.830886][ T7243] EXT4-fs (loop5): Remounting filesystem read-only
[  261.887755][ T7302] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 12
[  261.936405][ T7302] EXT4-fs (loop5): Remounting filesystem read-only
[  262.201494][ T7320] netlink: 'syz.3.818': attribute type 4 has an invalid length.
[  263.721154][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.729519][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.850359][ T4235] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  264.990298][ T4235] usb 6-1: Using ep0 maxpacket: 16
[  265.052265][ T7327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.170433][ T4235] usb 6-1: unable to get BOS descriptor or descriptor too short
[  265.240470][ T4235] usb 6-1: unable to read config index 0 descriptor/start: -71
[  265.248105][ T4235] usb 6-1: can't read configurations, error -71
[  266.481572][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.029415][ T7419] loop5: detected capacity change from 0 to 256
[  271.347486][ T7442] device syzkaller0 entered promiscuous mode
[  271.394814][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.687910][ T7450] loop6: detected capacity change from 0 to 512
[  272.893293][ T7450] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  272.969469][ T7450] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.148313][ T7475] IPVS: Error connecting to the multicast addr
[  274.219820][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.849'.
[  275.359136][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.852'.
[  276.626709][ T7532] netlink: 'syz.4.863': attribute type 8 has an invalid length.
[  277.830287][ T7479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  282.508536][ T7624] loop6: detected capacity change from 0 to 4096
[  282.554345][ T7622] loop5: detected capacity change from 0 to 1024
[  282.808135][ T7624] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  283.160155][ T7622] netlink: 148 bytes leftover after parsing attributes in process `syz.5.882'.
[  283.456983][ T7624] ntfs3: loop6: ino=1e, "file1" encrypted i/o not supported
[  283.990032][   T26] audit: type=1800 audit(1779151097.260:159): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.886" name="file1" dev="loop6" ino=30 res=0 errno=0
[  286.566231][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  288.183135][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.219136][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  289.459299][ T7697] team0 (unregistering): Port device team_slave_0 removed
[  289.578322][ T7697] team0 (unregistering): Port device team_slave_1 removed
[  291.646341][ T7731] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  291.860961][ T7747] overlayfs: failed to look up (tracing) for ino (-66)
[  291.968711][ T7752] netlink: 277 bytes leftover after parsing attributes in process `syz.3.914'.
[  294.026334][ T4286] Bluetooth: hci3: command 0x0406 tx timeout
[  294.032608][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  294.358348][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.922'.
[  294.379027][ T7782] team0 (unregistering): Port device team_slave_1 removed
[  295.357870][ T7795] overlayfs: failed to clone upperpath
[  295.405645][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'.
[  295.924365][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'.
[  297.964727][ T7856] overlayfs: failed to clone upperpath
[  297.992273][ T7856] overlayfs: failed to clone upperpath
[  298.071241][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.941'.
[  298.257063][ T7859] team0 (unregistering): Port device team_slave_0 removed
[  298.326651][ T7859] team0 (unregistering): Failed to send options change via netlink (err -105)
[  298.372377][ T7859] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  298.385283][ T7859] team0 (unregistering): Port device team_slave_1 removed
[  300.758282][ T7895] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼
[  306.134596][ T7934] netlink: 277 bytes leftover after parsing attributes in process `syz.5.960'.
[  309.119426][ T7968] netlink: 'syz.6.973': attribute type 1 has an invalid length.
[  309.378890][ T7977] 8021q: adding VLAN 0 to HW filter on device bond2
[  309.533486][ T7977] bond1: (slave bond2): making interface the new active one
[  309.545928][ T7977] bond1: (slave bond2): Enslaving as an active interface with an up link
[  309.625954][ T7986] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  309.667805][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.6.973'.
[  309.694608][ T7968] device bond1 entered promiscuous mode
[  309.737604][ T7968] device bond2 entered promiscuous mode
[  309.785024][ T7968] 8021q: adding VLAN 0 to HW filter on device bond1
[  309.873565][ T7973] xt_CT: No such helper "syz1"
[  310.273920][ T7993] 9pnet: Insufficient options for proto=fd
[  310.342299][ T7998] netlink: 277 bytes leftover after parsing attributes in process `syz.4.976'.
[  310.388076][   T26] audit: type=1804 audit(2000000011.900:160): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.979" name="bus" dev="ramfs" ino=43702 res=1 errno=0
[  310.419304][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  310.457865][   T26] audit: type=1804 audit(2000000011.930:161): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.979" name="bus" dev="ramfs" ino=43702 res=1 errno=0
[  311.911614][ T8027] overlayfs: failed to clone upperpath
[  312.345219][ T8051] netlink: 'syz.4.992': attribute type 1 has an invalid length.
[  312.474262][ T8051] 8021q: adding VLAN 0 to HW filter on device bond4
[  312.523632][ T8051] bond3: (slave bond4): making interface the new active one
[  312.582403][ T8051] bond3: (slave bond4): Enslaving as an active interface with an up link
[  312.658585][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.992'.
[  312.771205][ T8051] device bond3 entered promiscuous mode
[  312.810172][ T8051] device bond4 entered promiscuous mode
[  312.840393][ T8051] 8021q: adding VLAN 0 to HW filter on device bond3
[  312.896680][ T8070] loop5: detected capacity change from 0 to 512
[  313.065114][ T8070] EXT4-fs: Invalid sb specification: sb=0x000000000000000eJdebug,jqfmt=vfsold,nobh,barrier,usrjquota="block_validity,errors=remount-ro,,
[  313.340223][ T8070] EXT4-fs (loop5): Unrecognized mount option "sb=0x000000000000000eJdebug" or missing value
[  313.434787][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  314.002447][ T8078] device syzkaller0 entered promiscuous mode
[  314.043817][ T8070] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  314.742022][ T8089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'.
[  314.974857][ T8089] device veth0_to_bond entered promiscuous mode
[  316.061241][ T8125] loop6: detected capacity change from 0 to 512
[  316.192342][ T8125] EXT4-fs (loop6): Ignoring removed nobh option
[  316.198756][ T8125] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  316.338432][ T8125] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  316.629238][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  316.636153][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  316.709244][ T8125] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  316.735614][ T8145] xt_ecn: cannot match TCP bits for non-tcp packets
[  316.974529][ T8125] EXT4-fs (loop6): 1 truncate cleaned up
[  317.065624][ T8125] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  317.645638][ T8157] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  317.665872][ T8162] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1020'.
[  317.897432][ T8175] device syzkaller0 entered promiscuous mode
[  322.253113][ T8203] Illegal XDP return value 51, expect packet loss!
[  323.585880][ T8222] loop5: detected capacity change from 0 to 256
[  323.866753][ T8222] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  324.027311][ T8222] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  324.325317][ T8222] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  324.543020][ T8237] loop6: detected capacity change from 0 to 256
[  324.630737][ T8237] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  327.836723][ T8305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.669261][ T8315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.104438][ T8334] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000
[  331.076541][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1062'.
[  331.151277][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1066'.
[  333.239716][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'.
[  333.880794][ T8357] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1070'.
[  333.900072][ T8357] device geneve2 entered promiscuous mode
[  334.901103][ T8388] netlink: 'syz.4.1078': attribute type 10 has an invalid length.
[  335.878506][ T8396] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  335.878506][ T8396] The task syz.1.1081 (8396) triggered the difference, watch for misbehavior.
[  336.048859][ T8403] loop5: detected capacity change from 0 to 256
[  336.121686][ T8403] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  336.199664][    T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  336.490130][    T7] usb 7-1: Using ep0 maxpacket: 8
[  336.631654][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.832147][    T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  336.908401][    T7] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  336.988968][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.051020][    T7] usb 7-1: config 0 descriptor??
[  338.260108][    T7] usbhid 7-1:0.0: can't add hid device: -71
[  338.268260][    T7] usbhid: probe of 7-1:0.0 failed with error -71
[  338.292192][   T26] audit: type=1326 audit(2000000039.810:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.4.1094" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9770bee59 code=0x7fc00000
[  338.362035][    T7] usb 7-1: USB disconnect, device number 2
[  338.449366][   T26] audit: type=1326 audit(2000000039.830:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.4.1094" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd9770bee59 code=0x7fc00000
[  338.805610][ T8455] tipc: Resetting bearer <eth:syzkaller0>
[  338.848591][ T8455] device syzkaller0 entered promiscuous mode
[  338.919802][ T8459] loop5: detected capacity change from 0 to 512
[  339.276732][ T8459] EXT4-fs (loop5): Ignoring removed nobh option
[  339.834903][ T8459] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  340.084850][ T8459] EXT4-fs (loop5): 1 truncate cleaned up
[  340.183003][ T8459] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  342.321555][ T8492] device syzkaller0 entered promiscuous mode
[  344.203455][ T8516] loop5: detected capacity change from 0 to 2048
[  344.902105][ T8516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.417416][ T8540] device syzkaller0 entered promiscuous mode
[  345.438550][ T8540] 0: reclassify loop, rule prio 0, protocol 800
[  346.323387][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1126'.
[  346.408363][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1126'.
[  351.578544][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1144'.
[  351.689241][ T8620] netlink: 'syz.3.1143': attribute type 2 has an invalid length.
[  351.730259][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'.
[  351.847631][ T8617] device syzkaller0 entered promiscuous mode
[  351.924607][ T8630] device syzkaller0 entered promiscuous mode
[  352.028669][ T8630] 0: reclassify loop, rule prio 0, protocol 800
[  355.039712][   T26] audit: type=1800 audit(2000000056.550:164): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1155" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  355.264759][ T8660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  355.472793][ T8666] loop6: detected capacity change from 0 to 256
[  355.486983][ T8660] tipc: Enabled bearer <eth:batadv0>, priority 27
[  355.555958][ T8667] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  356.277834][ T8661] tipc: Enabling of bearer <ib:veth0_to_team> rejected, max 3 bearers permitted
[  356.346623][ T8666] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  357.136881][ T4947] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  360.033832][ T4947] usb 6-1: unable to read config index 0 descriptor/all
[  360.043294][ T4947] usb 6-1: can't read configurations, error -71
[  360.307094][ T8720] loop6: detected capacity change from 0 to 2048
[  360.637974][ T8720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  368.306835][   T26] audit: type=1800 audit(2000000069.820:165): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1202" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  368.433473][ T8802] device syzkaller0 entered promiscuous mode
[  369.385418][ T8826] loop5: detected capacity change from 0 to 128
[  369.451028][ T8826] qnx4: no qnx4 filesystem (no root dir).
[  372.912120][ T8849] loop5: detected capacity change from 0 to 4096
[  372.993285][ T8849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b04ec018, mo2=0102]
[  373.016549][ T8849] System zones: 0-5
[  373.056950][ T8849] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,errors=continue,data_err=abort,nodelalloc,stripe=0x0000000000000003,abort,auto_da_alloc=0x0000000000000008,quota,,errors=continue. Quota mode: writeback.
[  374.164161][ T8865] netlink: 'syz.3.1227': attribute type 10 has an invalid length.
[  374.174518][ T8865] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  375.963803][ T8887] loop5: detected capacity change from 0 to 256
[  376.055882][ T8887] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  376.357563][ T8891] block device autoloading is deprecated and will be removed.
[  377.543472][ T8905] bridge0: port 3(erspan0) entered blocking state
[  377.556055][ T8905] bridge0: port 3(erspan0) entered disabled state
[  377.577785][ T8905] device erspan0 entered promiscuous mode
[  377.585069][ T8905] bridge0: port 3(erspan0) entered blocking state
[  377.592152][ T8905] bridge0: port 3(erspan0) entered forwarding state
[  377.731654][ T8910] device erspan0 left promiscuous mode
[  377.739628][ T8910] bridge0: port 3(erspan0) entered disabled state
[  378.062468][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  378.068938][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  378.828545][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'.
[  378.854177][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1245'.
[  383.018073][ T8962] device syzkaller0 entered promiscuous mode
[  384.317394][ T8983] device syzkaller0 entered promiscuous mode
[  393.202012][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'.
[  393.506635][ T9076] bridge3: port 1(erspan0) entered blocking state
[  393.522305][ T9076] bridge3: port 1(erspan0) entered disabled state
[  393.750541][ T9076] device erspan0 entered promiscuous mode
[  393.993343][ T9076] bridge3: port 1(erspan0) entered blocking state
[  394.000022][ T9076] bridge3: port 1(erspan0) entered forwarding state
[  397.497831][ T4236] kernel write not supported for file [eventfd] (pid: 4236 comm: kworker/0:6)
[  398.960553][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.470502][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.067522][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.464698][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  402.683540][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.736807][ T4235] usb 6-1: Using ep0 maxpacket: 16
[  402.865256][ T4235] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.895232][ T4235] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.922741][ T4235] usb 6-1: config 0 interface 0 has no altsetting 0
[  402.938306][ T4235] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  403.128874][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.139764][ T4235] usb 6-1: config 0 descriptor??
[  403.994519][ T4506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.068767][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.111998][ T4235] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0
[  404.147924][ T4235] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0
[  404.618410][ T4235] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0
[  404.658674][ T4235] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0
[  405.394941][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.493625][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'.
[  405.532416][ T4235] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  405.575241][ T4235] usb 6-1: USB disconnect, device number 7
[  405.598988][ T9177] bridge1: port 1(erspan0) entered blocking state
[  405.623809][ T9177] bridge1: port 1(erspan0) entered disabled state
[  405.631626][ T9177] device erspan0 entered promiscuous mode
[  405.652764][ T9182] syz.4.1324[9182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  405.652987][ T9182] syz.4.1324[9182] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  408.966569][ T9185] fido_id[9185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  409.075091][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.430307][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'.
[  410.278565][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.407455][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.445773][ T9231] batman_adv: batadv0: Adding interface: dummy0
[  412.465947][ T9231] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.935595][ T9231] batman_adv: batadv0: Interface activated: dummy0
[  413.191537][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.260836][   T26] audit: type=1800 audit(2000000113.115:166): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1336" name="bus" dev="ramfs" ino=46512 res=0 errno=0
[  413.318909][ T9231] batadv0: mtu less than device minimum
[  413.519904][ T9231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  413.532819][ T9231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  413.545678][ T9231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  413.558487][ T9231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  413.571821][ T9231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  413.585108][ T9231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  413.598452][ T9231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  414.887019][ T9251] device syzkaller0 entered promiscuous mode
[  416.166159][ T9271] loop6: detected capacity change from 0 to 512
[  416.284429][ T9271] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1348: inode has both inline data and extents flags
[  416.621786][ T9271] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1348: couldn't read orphan inode 15 (err -117)
[  416.690739][ T9271] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  417.076665][ T4234] net_ratelimit: 15 callbacks suppressed
[  417.076685][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.881504][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.902437][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.771888][ T9318] device syzkaller0 entered promiscuous mode
[  420.871910][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.032236][   T26] audit: type=1326 audit(2000000120.412:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  421.113610][   T26] audit: type=1326 audit(2000000120.412:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc28dfc068e code=0x7fc00000
[  421.142374][   T26] audit: type=1326 audit(2000000120.449:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc28e001157 code=0x7fc00000
[  421.178340][   T26] audit: type=1326 audit(2000000120.449:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  421.247443][   T26] audit: type=1326 audit(2000000120.449:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  421.274227][   T26] audit: type=1326 audit(2000000120.449:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  421.299736][   T26] audit: type=1326 audit(2000000120.449:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  421.325530][   T26] audit: type=1326 audit(2000000120.449:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  421.353022][   T26] audit: type=1326 audit(2000000120.449:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  421.432915][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'.
[  421.444990][   T26] audit: type=1326 audit(2000000120.449:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.3.1368" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28dfffe59 code=0x7fc00000
[  422.271246][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.460235][ T9353] bridge2: port 1(veth3) entered blocking state
[  422.600136][ T9353] bridge2: port 1(veth3) entered disabled state
[  422.607987][ T9353] device veth3 entered promiscuous mode
[  423.352624][ T9362] loop5: detected capacity change from 0 to 512
[  423.402331][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.502466][ T9362] FAT-fs (loop5): bogus number of FAT sectors
[  423.556637][ T9362] FAT-fs (loop5): Can't find a valid FAT filesystem
[  423.719117][ T9370] syz.3.1380 (9370) used greatest stack depth: 17232 bytes left
[  423.924347][ T9378] device syzkaller0 entered promiscuous mode
[  424.503870][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.967194][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.875887][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.355261][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.368546][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.556876][ T9418] xt_CT: You must specify a L4 protocol and not use inversions on it
[  429.781421][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.960925][ T9432] overlayfs: failed to clone lowerpath
[  431.292195][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.523778][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.644625][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.337948][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.104718][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.137255][ T9482] overlayfs: failed to clone lowerpath
[  435.571179][ T9484] device syzkaller0 entered promiscuous mode
[  435.909696][ T4947] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  436.228161][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.251924][ T4947] usb 6-1: Using ep0 maxpacket: 32
[  436.413113][ T4947] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  436.458522][ T4947] usb 6-1: config 0 has no interface number 0
[  436.668655][ T4947] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  437.577999][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.262357][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.324163][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1420'.
[  439.107090][ T4947] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  439.117275][ T4947] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  439.127523][ T4947] usb 6-1: config 0 interface 196 has no altsetting 0
[  439.138439][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.277327][ T4947] usb 6-1: string descriptor 0 read error: -71
[  439.284860][ T4947] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  439.294358][ T4947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.306378][ T4947] usb 6-1: config 0 descriptor??
[  439.353508][ T4947] usb 6-1: can't set config #0, error -71
[  439.403630][ T4947] usb 6-1: USB disconnect, device number 8
[  441.354460][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.112677][ T4506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.875690][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.880138][ T9552] loop5: detected capacity change from 0 to 512
[  443.142299][ T9559] 8021q: VLANs not supported on ip6tnl0
[  443.265912][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  443.289703][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  443.344683][ T9552] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  443.352436][ T9552] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  443.944926][ T9552] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1430: corrupted in-inode xattr
[  444.003330][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.023384][ T9552] EXT4-fs (loop5): Remounting filesystem read-only
[  444.043706][ T9552] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1430: couldn't read orphan inode 15 (err -117)
[  444.118910][ T9552] EXT4-fs (loop5): Remounting filesystem read-only
[  444.146756][ T9552] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,dioread_lock,mblk_io_submit,errors=remount-ro,nombcache,. Quota mode: none.
[  444.250416][ T9577] SET target dimension over the limit!
[  445.141329][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.481639][ T9588] overlayfs: failed to clone upperpath
[  445.661916][ T9594] tipc: Started in network mode
[  445.717639][ T9594] tipc: Node identity 9247819428d5, cluster identity 4711
[  445.830699][ T9594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.867714][ T9595] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  445.960825][ T9604] tipc: Resetting bearer <eth:syzkaller0>
[  445.970653][ T9598] device syzkaller0 entered promiscuous mode
[  446.017623][ T9598] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  446.108238][ T9592] tipc: Resetting bearer <eth:syzkaller0>
[  446.386840][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.744880][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.805506][ T9592] tipc: Disabling bearer <eth:syzkaller0>
[  447.844610][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.050470][    T7] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  448.102802][ T9631] netlink: 'syz.4.1462': attribute type 1 has an invalid length.
[  448.181834][ T9631] device bond5 entered promiscuous mode
[  448.204072][ T9631] 8021q: adding VLAN 0 to HW filter on device bond5
[  448.247538][ T9637] 8021q: adding VLAN 0 to HW filter on device bond5
[  448.254942][ T9637] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  448.265875][ T9637] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  448.279070][ T9637] bond5: (slave ip6gre3): making interface the new active one
[  448.286575][ T9637] device ip6gre3 entered promiscuous mode
[  448.294601][ T9637] bond5: (slave ip6gre3): Enslaving as an active interface with an up link
[  448.304124][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  448.348047][ T9631] bond5 (unregistering): (slave ip6gre3): Releasing backup interface
[  448.373028][ T9631] device ip6gre3 left promiscuous mode
[  448.423720][ T9631] bond5 (unregistering): Released all slaves
[  448.471479][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  448.490579][ T9641] device syzkaller0 entered promiscuous mode
[  448.503206][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.520802][    T7] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  448.541593][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.591104][    T7] usb 7-1: config 0 descriptor??
[  448.710779][   T26] kauditd_printk_skb: 59 callbacks suppressed
[  448.710794][   T26] audit: type=1326 audit(2000000146.303:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9770bee59 code=0x7ffc0000
[  448.738725][ T9648] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  448.813241][   T26] audit: type=1326 audit(2000000146.303:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd9770bee59 code=0x7ffc0000
[  448.880006][   T26] audit: type=1326 audit(2000000146.303:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9770bee59 code=0x7ffc0000
[  448.952525][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.123351][   T26] audit: type=1326 audit(2000000146.313:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9770bee59 code=0x7ffc0000
[  449.530089][    T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  449.537272][    T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  449.544572][    T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  449.551772][    T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  449.558576][    T7] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  449.566197][    T7] elan 0003:04F3:0755.0002: failed to start in urb: -90
[  449.583309][    T7] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0
[  449.603841][   T26] audit: type=1326 audit(2000000146.341:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9650 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd97707f68e code=0x7ffc0000
[  449.726295][    T7] usb 7-1: USB disconnect, device number 3
[  449.798964][ T9665] cgroup2: Unexpected value for 'memory_localevents'
[  449.807478][   T26] audit: type=1326 audit(2000000146.388:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9770bee59 code=0x7ffc0000
[  449.925440][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.945603][ T9668] fido_id[9668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  449.946429][   T26] audit: type=1326 audit(2000000146.388:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9770bee59 code=0x7ffc0000
[  450.103596][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.138888][   T26] audit: type=1326 audit(2000000146.481:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9650 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd9770bee59 code=0x7ffc0000
[  452.007084][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.031649][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.338346][ T9684] loop6: detected capacity change from 0 to 256
[  452.439489][ T9684] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  452.501545][ T9684] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  452.561189][ T9684] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  453.218635][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.337403][ T9711] raw_sendmsg: syz.3.1485 forgot to set AF_INET. Fix it!
[  454.340813][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.972652][ T9739] PKCS7: Unknown OID: [4] 0.0
[  454.977915][ T9739] PKCS7: Only support pkcs7_signedData type
[  455.607955][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.970277][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1499'.
[  456.564033][ T9750] 8021q: adding VLAN 0 to HW filter on device bond1
[  456.672780][ T9756] device vlan2 entered promiscuous mode
[  456.678393][ T9756] device bond1 entered promiscuous mode
[  456.748547][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.848114][ T9772] overlayfs: failed to clone upperpath
[  457.946461][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.243039][ T9780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  459.055278][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.509675][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.432249][ T9796] orangefs_mount: mount request failed with -4
[  461.692993][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.424791][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.483795][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.739959][   T26] audit: type=1326 audit(2000000160.363:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  463.817983][   T26] audit: type=1326 audit(2000000160.400:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.500573][   T26] audit: type=1326 audit(2000000160.400:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.571440][   T26] audit: type=1326 audit(2000000160.400:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.620421][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.686113][   T26] audit: type=1326 audit(2000000160.400:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.738198][   T26] audit: type=1326 audit(2000000160.400:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.765675][   T26] audit: type=1326 audit(2000000160.400:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.791638][   T26] audit: type=1326 audit(2000000160.400:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.817974][   T26] audit: type=1326 audit(2000000160.400:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.879465][   T26] audit: type=1326 audit(2000000160.400:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1521" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9770601d9 code=0x7ffc0000
[  464.957056][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.973194][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.983105][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.992587][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.161808][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.315380][ T9857] device syzkaller0 left promiscuous mode
[  466.387348][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'.
[  467.130565][ T9863] bond0: VLAN not yet supported
[  467.257700][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.692965][ T9888] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1543'.
[  467.747570][ T9888] netlink: 'syz.4.1543': attribute type 12 has an invalid length.
[  469.052564][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.131775][ T9909] overlayfs: failed to clone lowerpath
[  470.166820][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.644112][ T4877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.686555][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.709471][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.718482][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.727051][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.840167][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.476370][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.899938][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.121705][ T9977] netlink: 'syz.4.1571': attribute type 2 has an invalid length.
[  477.153832][ T9977] netlink: 'syz.4.1571': attribute type 8 has an invalid length.
[  477.186122][ T9977] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1571'.
[  477.249800][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1570'.
[  477.288442][ T9979] batman_adv: batadv0: Interface deactivated: dummy0
[  477.302269][ T9979] batman_adv: batadv0: Removing interface: dummy0
[  477.332166][ T9979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.375601][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.406913][ T9979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.440282][ T9979] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.601217][ T9971] chnl_net:caif_netlink_parms(): no params data found
[  478.704509][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.110118][ T9971] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.147472][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.150971][ T4234] Bluetooth: hci1: command 0x0409 tx timeout
[  479.194711][ T9971] device bridge_slave_0 entered promiscuous mode
[  479.224573][ T9971] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.248966][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.293590][ T9971] device bridge_slave_1 entered promiscuous mode
[  480.055298][ T9971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.098561][T10024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.151760][ T9971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.181784][T10024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.216413][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.770927][T10024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.919197][ T9971] team0: Port device team_slave_0 added
[  480.936695][T10024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.035125][T10024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.060112][ T9971] team0: Port device team_slave_1 added
[  481.142850][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.163736][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.265401][ T9971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.278748][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.286112][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.327466][ T9971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.367075][ T4948] Bluetooth: hci1: command 0x041b tx timeout
[  481.376081][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.662822][ T9971] device hsr_slave_0 entered promiscuous mode
[  481.698332][ T9971] device hsr_slave_1 entered promiscuous mode
[  481.729126][ T9971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  481.764729][ T9971] Cannot create hsr debugfs directory
[  482.358294][T10052] netlink: 'syz.5.1587': attribute type 1 has an invalid length.
[  482.430276][T10052] device bond2 entered promiscuous mode
[  482.436837][T10052] 8021q: adding VLAN 0 to HW filter on device bond2
[  482.446430][ T9971] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  482.467143][T10057] overlayfs: failed to clone upperpath
[  482.476446][T10057] overlayfs: failed to clone upperpath
[  482.596700][T10054] 8021q: adding VLAN 0 to HW filter on device bond2
[  482.619999][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.647614][T10054] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  482.659857][T10054] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  482.691204][T10054] bond2: (slave ip6gre2): making interface the new active one
[  482.707090][T10054] device ip6gre2 entered promiscuous mode
[  482.745779][T10054] bond2: (slave ip6gre2): Enslaving as an active interface with an up link
[  482.761442][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  482.794701][ T9971] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  482.835363][ T9971] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  483.442774][T10052] bond2 (unregistering): (slave ip6gre2): Releasing backup interface
[  483.484241][T10052] device ip6gre2 left promiscuous mode
[  483.511934][ T4508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.530609][ T4508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.543591][T10052] bond2 (unregistering): Released all slaves
[  483.573536][ T9971] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  483.589780][ T4948] Bluetooth: hci1: command 0x040f tx timeout
[  483.596703][T10075] 9pnet: Insufficient options for proto=fd
[  483.629722][T10073] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1591'.
[  484.588259][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.661797][T10083] futex_wake_op: syz.4.1595 tries to shift op by 144; fix this program
[  484.702192][ T9971] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.758270][ T9971] 8021q: adding VLAN 0 to HW filter on device team0
[  484.823873][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  484.844946][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  484.866609][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  484.892742][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  484.918367][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.925505][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.938154][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  484.962232][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  485.382610][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.390232][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.728222][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.779394][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  485.808965][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  485.816911][ T4234] Bluetooth: hci1: command 0x0419 tx timeout
[  486.765023][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'.
[  486.857055][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  486.877139][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.898206][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  486.936916][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  486.980864][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  487.126628][ T9971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  487.169719][ T9971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  487.953685][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.994188][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  488.004416][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  488.069802][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  488.120634][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  488.149838][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  488.214079][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.386145][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  488.422717][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  489.555452][T10120] netlink: 'syz.1.1604': attribute type 1 has an invalid length.
[  489.680766][T10145] device bond0 entered promiscuous mode
[  489.694402][T10145] device bond_slave_0 entered promiscuous mode
[  489.713645][T10145] device bond_slave_1 entered promiscuous mode
[  489.785685][T10141] netlink: 'syz.5.1596': attribute type 2 has an invalid length.
[  490.431890][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.437308][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  491.450007][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  491.989394][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.012231][ T9971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.433470][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.728066][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.537501][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.614532][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  494.773265][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  494.794201][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  494.805694][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  494.837750][ T9971] device veth0_vlan entered promiscuous mode
[  494.853030][ T9971] device veth1_vlan entered promiscuous mode
[  494.866540][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  494.884531][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  494.934608][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  494.999047][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  495.681281][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  495.707624][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  495.729691][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.909251][ T9971] device veth0_macvtap entered promiscuous mode
[  496.043205][ T9971] device veth1_macvtap entered promiscuous mode
[  496.902243][  T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  496.945754][ T9971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.220164][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.280215][ T9971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.311279][ T9971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.326466][ T9971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.336865][ T9971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.353078][ T9971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.477576][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.496516][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  497.507342][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  497.532865][ T9971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.319113][ T9971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.351002][ T9971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.372435][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.418135][ T9971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.428043][ T9971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.610059][ T9971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.654954][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.071516][ T9971] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.102129][ T9971] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.207645][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.238003][ T9971] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.845897][ T9971] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.202994][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  501.228476][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  501.239192][T10236] netlink: 'syz.4.1630': attribute type 1 has an invalid length.
[  501.423012][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.443179][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1630'.
[  501.624429][T10258] bond1: option mode: unable to set because the bond device has slaves
[  501.657333][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.665208][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.739656][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  501.767681][ T4537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.774627][T10258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1634'.
[  501.784069][ T4537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.942550][T10258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  501.981480][T10258] device bond_slave_0 left promiscuous mode
[  502.011413][T10258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.031928][T10258] device bond_slave_1 left promiscuous mode
[  502.050174][T10258] bond0 (unregistering): Released all slaves
[  502.161962][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  502.580858][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.554353][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.945657][ T4508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.387615][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.563074][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.939972][T10334] netlink: 'syz.1.1658': attribute type 1 has an invalid length.
[  506.752193][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.816318][T10337] bond1: (slave gretap1): making interface the new active one
[  506.836151][T10337] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  506.936264][T10334] device macvlan2 entered promiscuous mode
[  506.963684][T10346] __sock_release: fasync list not empty!
[  507.034650][T10334] device bond1 entered promiscuous mode
[  507.051496][T10334] device gretap1 entered promiscuous mode
[  507.073305][T10334] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  507.109593][T10334] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  507.133913][T10334] device bond1 left promiscuous mode
[  507.139322][T10334] device gretap1 left promiscuous mode
[  508.598546][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.700777][T10348] 8021q: adding VLAN 0 to HW filter on device bond1
[  508.737298][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  508.743696][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  508.769890][T10350] device veth1_to_batadv entered promiscuous mode
[  508.806518][T10350] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  508.843184][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  511.870476][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.701385][   T26] kauditd_printk_skb: 223 callbacks suppressed
[  512.701406][   T26] audit: type=1326 audit(2000000206.659:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10394 comm="syz.4.1676" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9770bee59 code=0x7fc00000
[  513.049155][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.694105][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.702328][   T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.759983][T10435] device syzkaller0 entered promiscuous mode
[  515.833090][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.116162][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.435482][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1695'.
[  517.444873][T10453] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  518.658027][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.433503][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.518468][T10473] netlink: 'syz.5.1698': attribute type 10 has an invalid length.
[  519.578136][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1698'.
[  519.633809][T10473] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  521.059971][T10489] "syz.1.1697" (10489) uses obsolete ecb(arc4) skcipher
[  522.032625][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.270382][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1703'.
[  522.752099][T10497] loop7: detected capacity change from 0 to 8
[  522.826205][   T26] audit: type=1107 audit(2000000216.556:478): pid=10491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  523.629177][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.638366][  T384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.648172][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.659893][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.757193][T10497] SQUASHFS error: lzo decompression failed, data probably corrupt
[  523.765745][T10497] SQUASHFS error: Failed to read block 0x91: -5
[  523.772008][T10497] SQUASHFS error: Unable to read metadata cache entry [8f]
[  523.779306][T10497] SQUASHFS error: Unable to read inode 0x11f
[  523.808648][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'.
[  524.462298][T10534] hugetlbfs: syz.5.1713 (10534): Using mlock ulimits for SHM_HUGETLB is deprecated
[  525.279552][ T4508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.392290][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.394730][T10555] tipc: Failed to remove unknown binding: 66,0,0/4:2365091907/2365091908
[  526.532098][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.645849][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.519746][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.845579][  T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.861595][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.872550][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.698404][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.052874][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.893279][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.901462][ T4508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.957050][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'.
[  536.134549][   T26] audit: type=1326 audit(2000000229.071:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.7.1759" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bbc4bbe59 code=0x0
[  536.159427][ T4305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.190288][ T4947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.234053][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.242483][ T4948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.251938][T10674] device bridge_slave_1 left promiscuous mode
[  536.258725][T10674] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.282105][T10674] device bridge_slave_0 left promiscuous mode
[  536.318635][T10674] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.546192][   T26] audit: type=1326 audit(2000000229.792:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10689 comm="syz.1.1760" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5173f9e59 code=0x0
[  537.621979][T10707] sch_tbf: burst 32852 is lower than device lo mtu (65550) !
[  538.030241][T10725] netlink: 'syz.3.1773': attribute type 1 has an invalid length.
[  538.058396][T10725] device bond0 entered promiscuous mode
[  538.064284][T10725] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.102988][T10729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  538.119509][T10729] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  538.131893][T10729] device bridge_slave_0 left promiscuous mode
[  538.146791][T10729] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.184873][T10729] device bridge_slave_1 left promiscuous mode
[  538.192380][T10729] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.288295][T10729] bond0: (slave bond_slave_0): Releasing backup interface
[  538.308737][T10729] bond0: (slave bond_slave_1): Releasing backup interface
[  538.446931][T10729] team0: Port device team_slave_0 removed
[  538.500748][T10729] team0: Port device team_slave_1 removed
[  538.577526][T10729] bond0: (slave wlan1): Releasing backup interface
[  538.633792][T10725] bond0: (slave erspan1): making interface the new active one
[  538.642775][T10725] device erspan1 entered promiscuous mode
[  538.659942][T10725] bond0: (slave erspan1): Enslaving as an active interface with an up link
[  538.879834][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  543.600426][T10806] ==================================================================
[  543.609451][T10806] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240
[  543.618090][T10806] Read of size 2 at addr ffff8880612155fb by task syz.3.1792/10806
[  543.626010][T10806] 
[  543.628456][T10806] CPU: 1 PID: 10806 Comm: syz.3.1792 Not tainted syzkaller #0
[  543.636023][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  543.646275][T10806] Call Trace:
[  543.649588][T10806]  <TASK>
[  543.652543][T10806]  dump_stack_lvl+0x188/0x250
[  543.657252][T10806]  ? show_regs_print_info+0x20/0x20
[  543.662567][T10806]  ? load_image+0x400/0x400
[  543.667104][T10806]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  543.672600][T10806]  ? ieee80211_tx+0x460/0x460
[  543.677523][T10806]  print_address_description+0x60/0x2d0
[  543.683228][T10806]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  543.689510][T10806]  kasan_report+0xdf/0x130
[  543.694050][T10806]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  543.700332][T10806]  ieee80211_monitor_select_queue+0x23a/0x240
[  543.706555][T10806]  ? ieee80211_recalc_smps_work+0x20/0x20
[  543.712340][T10806]  netdev_core_pick_tx+0x118/0x2e0
[  543.717496][T10806]  __dev_queue_xmit+0x756/0x2f80
[  543.722478][T10806]  ? __might_fault+0xb7/0x110
[  543.727399][T10806]  ? dev_queue_xmit+0x20/0x20
[  543.732194][T10806]  ? virtio_net_hdr_to_skb+0xa6b/0x11f0
[  543.737898][T10806]  ? packet_cached_dev_get+0x270/0x270
[  543.743403][T10806]  ? skb_copy_datagram_from_iter+0x5e3/0x6a0
[  543.749530][T10806]  packet_sendmsg+0x3dba/0x5060
[  543.754456][T10806]  ? __might_sleep+0xf0/0xf0
[  543.759105][T10806]  ? aa_sk_perm+0x7dc/0x910
[  543.763636][T10806]  ? packet_getsockopt+0x9a0/0x9a0
[  543.768789][T10806]  ? aa_sock_msg_perm+0x94/0x150
[  543.773774][T10806]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  543.779095][T10806]  ? security_socket_sendmsg+0x7c/0xa0
[  543.784578][T10806]  ? packet_getsockopt+0x9a0/0x9a0
[  543.789718][T10806]  ____sys_sendmsg+0x5b7/0x8f0
[  543.794523][T10806]  ? __sys_sendmsg_sock+0x30/0x30
[  543.799701][T10806]  ? import_iovec+0x6f/0xa0
[  543.804243][T10806]  ___sys_sendmsg+0x236/0x2e0
[  543.808953][T10806]  ? __sys_sendmsg+0x2a0/0x2a0
[  543.813788][T10806]  __se_sys_sendmsg+0x1af/0x290
[  543.818678][T10806]  ? __x64_sys_sendmsg+0x80/0x80
[  543.823764][T10806]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  543.830054][T10806]  ? lockdep_hardirqs_on+0x94/0x140
[  543.835297][T10806]  do_syscall_64+0x4c/0xa0
[  543.839739][T10806]  ? clear_bhb_loop+0x30/0x80
[  543.844433][T10806]  ? clear_bhb_loop+0x30/0x80
[  543.849230][T10806]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  543.855150][T10806] RIP: 0033:0x7fc28dfffe59
[  543.859597][T10806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.879421][T10806] RSP: 002b:00007fc28c259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  543.887888][T10806] RAX: ffffffffffffffda RBX: 00007fc28e278fa0 RCX: 00007fc28dfffe59
[  543.895893][T10806] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  543.903897][T10806] RBP: 00007fc28e095d6f R08: 0000000000000000 R09: 0000000000000000
[  543.911907][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  543.921113][T10806] R13: 00007fc28e279038 R14: 00007fc28e278fa0 R15: 00007fffc7634ec8
[  543.929146][T10806]  </TASK>
[  543.932190][T10806] 
[  543.934530][T10806] Allocated by task 7351:
[  543.938874][T10806]  __kasan_kmalloc+0xb5/0xf0
[  543.943597][T10806]  memcg_alloc_page_obj_cgroups+0x81/0x120
[  543.949450][T10806]  new_slab+0x100/0x4b0
[  543.953840][T10806]  ___slab_alloc+0x80a/0xdd0
[  543.958459][T10806]  kmem_cache_alloc+0x195/0x290
[  543.963338][T10806]  anon_vma_fork+0x1f6/0x500
[  543.967953][T10806]  copy_mm+0xa06/0x13f0
[  543.972133][T10806]  copy_process+0x17eb/0x3e20
[  543.976858][T10806]  kernel_clone+0x23f/0x990
[  543.981386][T10806]  __x64_sys_clone+0x19a/0x210
[  543.986198][T10806]  do_syscall_64+0x4c/0xa0
[  543.990655][T10806]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  543.996573][T10806] 
[  543.998955][T10806] Freed by task 10259:
[  544.003123][T10806]  kasan_set_track+0x4b/0x70
[  544.007742][T10806]  kasan_set_free_info+0x1f/0x40
[  544.012711][T10806]  ____kasan_slab_free+0xd5/0x110
[  544.017760][T10806]  slab_free_freelist_hook+0xea/0x170
[  544.023161][T10806]  kfree+0xef/0x2a0
[  544.026994][T10806]  __free_slab+0x135/0x370
[  544.031436][T10806]  qlist_free_all+0x35/0x90
[  544.035970][T10806]  kasan_quarantine_reduce+0x150/0x160
[  544.041448][T10806]  __kasan_slab_alloc+0x2f/0xd0
[  544.046317][T10806]  slab_post_alloc_hook+0x4c/0x380
[  544.051447][T10806]  __kmalloc+0x127/0x330
[  544.055708][T10806]  tomoyo_realpath_from_path+0x118/0x610
[  544.061358][T10806]  tomoyo_path_perm+0x23f/0x5d0
[  544.066238][T10806]  security_inode_getattr+0xcf/0x120
[  544.071548][T10806]  vfs_getattr+0x26/0x3a0
[  544.075931][T10806]  vfs_statx+0x14e/0x500
[  544.080199][T10806]  __x64_sys_newfstatat+0x15f/0x200
[  544.085427][T10806]  do_syscall_64+0x4c/0xa0
[  544.089862][T10806]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  544.095810][T10806] 
[  544.098158][T10806] Last potentially related work creation:
[  544.103889][T10806]  kasan_save_stack+0x35/0x60
[  544.108586][T10806]  kasan_record_aux_stack+0xb8/0x100
[  544.113894][T10806]  kvfree_call_rcu+0x105/0x7d0
[  544.118685][T10806]  hash_ipportnet6_gc_do+0x823/0x950
[  544.124007][T10806]  hash_ipportnet6_gc+0x221/0x560
[  544.129057][T10806]  process_one_work+0x85f/0x1010
[  544.134031][T10806]  worker_thread+0xaa6/0x1290
[  544.138741][T10806]  kthread+0x436/0x520
[  544.142826][T10806]  ret_from_fork+0x1f/0x30
[  544.147260][T10806] 
[  544.149631][T10806] The buggy address belongs to the object at ffff888061215400
[  544.149631][T10806]  which belongs to the cache kmalloc-512 of size 512
[  544.163897][T10806] The buggy address is located 507 bytes inside of
[  544.163897][T10806]  512-byte region [ffff888061215400, ffff888061215600)
[  544.177186][T10806] The buggy address belongs to the page:
[  544.182824][T10806] page:ffffea0001848500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61214
[  544.193002][T10806] head:ffffea0001848500 order:2 compound_mapcount:0 compound_pincount:0
[  544.201479][T10806] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  544.209513][T10806] raw: 00fff00000010200 ffffea0000ad6900 0000000500000005 ffff888016c41c80
[  544.218136][T10806] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  544.226737][T10806] page dumped because: kasan: bad access detected
[  544.233167][T10806] page_owner tracks the page as allocated
[  544.238890][T10806] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 60349395934, free_ts 17473636571
[  544.258121][T10806]  get_page_from_freelist+0x1bbd/0x1ca0
[  544.263857][T10806]  __alloc_pages+0x1ee/0x480
[  544.268485][T10806]  new_slab+0xc0/0x4b0
[  544.272576][T10806]  ___slab_alloc+0x80a/0xdd0
[  544.277196][T10806]  __kmalloc+0x1cd/0x330
[  544.281458][T10806]  __register_sysctl_table+0xa1f/0x1230
[  544.287118][T10806]  mpls_dev_sysctl_register+0x1fe/0x2f0
[  544.292781][T10806]  mpls_dev_notify+0x2fa/0x780
[  544.297658][T10806]  raw_notifier_call_chain+0xcb/0x160
[  544.303058][T10806]  register_netdevice+0x12a6/0x1710
[  544.308286][T10806]  veth_newlink+0x8d7/0xe30
[  544.312813][T10806]  rtnl_newlink+0x1359/0x1a50
[  544.317508][T10806]  rtnetlink_rcv_msg+0x844/0xf30
[  544.322515][T10806]  netlink_rcv_skb+0x1f5/0x440
[  544.327405][T10806]  netlink_unicast+0x774/0x920
[  544.332186][T10806]  netlink_sendmsg+0x8ba/0xbe0
[  544.336974][T10806] page last free stack trace:
[  544.341680][T10806]  free_unref_page_prepare+0x637/0x6c0
[  544.347174][T10806]  free_unref_page+0x8f/0x2a0
[  544.351873][T10806]  free_contig_range+0x96/0xf0
[  544.356705][T10806]  destroy_args+0xf0/0xa00
[  544.361148][T10806]  debug_vm_pgtable+0x321/0x380
[  544.366027][T10806]  do_one_initcall+0x272/0x730
[  544.370816][T10806]  do_initcall_level+0x137/0x1f0
[  544.375772][T10806]  do_initcalls+0x4b/0x90
[  544.380128][T10806]  kernel_init_freeable+0x3e9/0x570
[  544.385353][T10806]  kernel_init+0x19/0x1b0
[  544.389703][T10806]  ret_from_fork+0x1f/0x30
[  544.394163][T10806] 
[  544.396510][T10806] Memory state around the buggy address:
[  544.402157][T10806]  ffff888061215480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  544.410240][T10806]  ffff888061215500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  544.418335][T10806] >ffff888061215580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  544.426413][T10806]                                                                 ^
[  544.434507][T10806]  ffff888061215600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  544.442601][T10806]  ffff888061215680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  544.450678][T10806] ==================================================================
[  544.458766][T10806] Disabling lock debugging due to kernel taint
[  544.465010][T10806] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  544.472220][T10806] CPU: 1 PID: 10806 Comm: syz.3.1792 Tainted: G    B             syzkaller #0
[  544.481089][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  544.491167][T10806] Call Trace:
[  544.494461][T10806]  <TASK>
[  544.497414][T10806]  dump_stack_lvl+0x188/0x250
[  544.502215][T10806]  ? show_regs_print_info+0x20/0x20
[  544.507522][T10806]  ? load_image+0x400/0x400
[  544.512047][T10806]  panic+0x2e5/0x810
[  544.515970][T10806]  ? bpf_jit_dump+0xd0/0xd0
[  544.520582][T10806]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  544.526494][T10806]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  544.532404][T10806]  ? _raw_spin_unlock+0x40/0x40
[  544.537274][T10806]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  544.543557][T10806]  check_panic_on_warn+0x80/0xa0
[  544.548520][T10806]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  544.554815][T10806]  end_report+0x6d/0xf0
[  544.559128][T10806]  kasan_report+0x102/0x130
[  544.563654][T10806]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  544.569917][T10806]  ieee80211_monitor_select_queue+0x23a/0x240
[  544.576008][T10806]  ? ieee80211_recalc_smps_work+0x20/0x20
[  544.581809][T10806]  netdev_core_pick_tx+0x118/0x2e0
[  544.586938][T10806]  __dev_queue_xmit+0x756/0x2f80
[  544.591894][T10806]  ? __might_fault+0xb7/0x110
[  544.596596][T10806]  ? dev_queue_xmit+0x20/0x20
[  544.601288][T10806]  ? virtio_net_hdr_to_skb+0xa6b/0x11f0
[  544.606856][T10806]  ? packet_cached_dev_get+0x270/0x270
[  544.612331][T10806]  ? skb_copy_datagram_from_iter+0x5e3/0x6a0
[  544.618332][T10806]  packet_sendmsg+0x3dba/0x5060
[  544.623210][T10806]  ? __might_sleep+0xf0/0xf0
[  544.627934][T10806]  ? aa_sk_perm+0x7dc/0x910
[  544.632460][T10806]  ? packet_getsockopt+0x9a0/0x9a0
[  544.637597][T10806]  ? aa_sock_msg_perm+0x94/0x150
[  544.642561][T10806]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  544.647865][T10806]  ? security_socket_sendmsg+0x7c/0xa0
[  544.653343][T10806]  ? packet_getsockopt+0x9a0/0x9a0
[  544.658471][T10806]  ____sys_sendmsg+0x5b7/0x8f0
[  544.663259][T10806]  ? __sys_sendmsg_sock+0x30/0x30
[  544.668312][T10806]  ? import_iovec+0x6f/0xa0
[  544.672838][T10806]  ___sys_sendmsg+0x236/0x2e0
[  544.677537][T10806]  ? __sys_sendmsg+0x2a0/0x2a0
[  544.682333][T10806]  __se_sys_sendmsg+0x1af/0x290
[  544.687209][T10806]  ? __x64_sys_sendmsg+0x80/0x80
[  544.692167][T10806]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  544.698176][T10806]  ? lockdep_hardirqs_on+0x94/0x140
[  544.703396][T10806]  do_syscall_64+0x4c/0xa0
[  544.707841][T10806]  ? clear_bhb_loop+0x30/0x80
[  544.712540][T10806]  ? clear_bhb_loop+0x30/0x80
[  544.717234][T10806]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  544.723142][T10806] RIP: 0033:0x7fc28dfffe59
[  544.727574][T10806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.747198][T10806] RSP: 002b:00007fc28c259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  544.755635][T10806] RAX: ffffffffffffffda RBX: 00007fc28e278fa0 RCX: 00007fc28dfffe59
[  544.763838][T10806] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  544.771822][T10806] RBP: 00007fc28e095d6f R08: 0000000000000000 R09: 0000000000000000
[  544.779894][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  544.787938][T10806] R13: 00007fc28e279038 R14: 00007fc28e278fa0 R15: 00007fffc7634ec8
[  544.796043][T10806]  </TASK>
[  544.799559][T10806] Kernel Offset: disabled
[  544.803920][T10806] Rebooting in 86400 seconds..