last executing test programs:

13m52.513361957s ago: executing program 32 (id=79):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="11", 0x1}], 0x1}}], 0x1, 0xc000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

11m49.02379408s ago: executing program 33 (id=1272):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

11m7.908836699s ago: executing program 34 (id=1606):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x3}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20)

10m17.971038594s ago: executing program 35 (id=2046):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r2 = accept4$unix(r1, 0x0, 0x0, 0x800)
recvfrom$unix(r2, &(0x7f0000000140)=""/253, 0xfd, 0x40000000, 0x0, 0x0)

9m46.240007703s ago: executing program 7 (id=2322):
r0 = epoll_create1(0x80000)
ioctl$FICLONERANGE(r0, 0x4020940d, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}})

9m46.01064974s ago: executing program 7 (id=2324):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x8, r2, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14)

9m45.767601696s ago: executing program 7 (id=2327):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r1, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

9m45.64780166s ago: executing program 7 (id=2328):
mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x8)

9m45.407201717s ago: executing program 7 (id=2331):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r2, &(0x7f0000000480)=""/154, 0x9a, 0xe4)

9m44.879879661s ago: executing program 7 (id=2334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

9m44.395206734s ago: executing program 36 (id=2334):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

9m22.098172703s ago: executing program 8 (id=2464):
epoll_create1(0x80000)
r0 = socket$unix(0x1, 0x5, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
r1 = io_uring_setup(0x5ffd, &(0x7f0000000340)={0x0, 0xeec1, 0x800, 0x2, 0x116})
close_range(r1, r1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)

9m21.015858403s ago: executing program 8 (id=2469):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r3=>r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40)

9m20.874185906s ago: executing program 8 (id=2470):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x4e21, 0x1002, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffffe}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x2, 0x30}, &(0x7f00000000c0)=0xc)

9m20.673525712s ago: executing program 8 (id=2472):
fsopen(0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@discard}, {@nolazytime}, {@quota}, {@stripe={'stripe', 0x3d, 0x10}}, {@abort}, {@lazytime}, {@errors_remount}, {@init_itable}, {@bh}, {@dioread_lock}]}, 0xfc, 0x57b, &(0x7f0000000700)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

9m20.082637118s ago: executing program 8 (id=2477):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9938)

9m18.430161364s ago: executing program 8 (id=2485):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0xc}, 0x2e)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

9m18.081075094s ago: executing program 37 (id=2485):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0xc}, 0x2e)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

7m51.47272719s ago: executing program 4 (id=3139):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

7m51.068612719s ago: executing program 4 (id=3142):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000d00)={0x11, 0x10, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x5, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

7m50.443574894s ago: executing program 4 (id=3147):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

7m50.090517042s ago: executing program 4 (id=3149):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x808080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x252, &(0x7f0000000880)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

7m49.708254261s ago: executing program 4 (id=3154):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000041300000200000000fbdbdf257f000001000000000000000000000000000000000000000000000000000000000000000400000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

7m49.185636753s ago: executing program 4 (id=3158):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

7m48.636365116s ago: executing program 38 (id=3158):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

7m4.132229563s ago: executing program 0 (id=3499):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000000})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/43, 0x0, 0x3000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)

7m3.802086091s ago: executing program 0 (id=3503):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r4, 0x25, 0x2, @void}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

7m3.424864089s ago: executing program 0 (id=3504):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}])
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

7m2.738068195s ago: executing program 0 (id=3507):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000f80)='./file2\x00', 0x0, &(0x7f0000000440)={[{@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x1, 0x7a1, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x0)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)
write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa)
syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[], 0x0, 0x229, &(0x7f0000000b00)="$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")
sendfile(r1, r0, 0x0, 0x40001)
creat(&(0x7f0000000200)='./file1\x00', 0x12e)

7m1.156137422s ago: executing program 0 (id=3512):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'lo\x00'})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)

7m0.190204915s ago: executing program 0 (id=3520):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0xa1}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x3}, &(0x7f00000000c0)=0x8)

6m59.489374861s ago: executing program 39 (id=3520):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0xa1}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x3}, &(0x7f00000000c0)=0x8)

2m54.216406523s ago: executing program 9 (id=4661):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2m50.322306933s ago: executing program 9 (id=4664):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
userfaultfd(0x80801)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

2m48.224255783s ago: executing program 9 (id=4672):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
ptrace(0x10, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
r1 = syz_io_uring_setup(0x595, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r3, 0x0, 0x0, 0xa, 0x0)
mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

2m47.181427647s ago: executing program 9 (id=4676):
syz_open_dev$vbi(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$watch_queue(0x0, 0x80)

2m46.034214714s ago: executing program 9 (id=4683):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0)

2m43.980674821s ago: executing program 9 (id=4687):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "0000000000000006", "268cd5ccc409264d442e4cb1d065b027", "e3f903da", "fa72334a18e32413"}, 0x28)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r3, 0x0, 0x20000000002)

2m27.597979433s ago: executing program 40 (id=4687):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "0000000000000006", "268cd5ccc409264d442e4cb1d065b027", "e3f903da", "fa72334a18e32413"}, 0x28)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r3, 0x0, 0x20000000002)

15.237861745s ago: executing program 6 (id=5101):
r0 = socket(0x2b, 0x1, 0x1)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
listen(0xffffffffffffffff, 0x5)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100), 0x0)
socket(0x10, 0x3, 0x0)
r1 = dup(0xffffffffffffffff)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d09f91b0b380987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f37096c060890e0878f0e1ac6e7049b094a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004c0400000000000000ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885e94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffd6f}}, 0x1006)
setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

15.152491457s ago: executing program 6 (id=5102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r1, 0x1, 0x7fffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000054)

12.200495256s ago: executing program 2 (id=5107):
syz_mount_image$fuse(0x0, 0x0, 0x2008808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0xe, "3d52e3ff00"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x6)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f0000000040)={0x0, 0x831d})
truncate(&(0x7f0000000080)='./file2\x00', 0x100)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

12.102195947s ago: executing program 3 (id=5108):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050300000000000000000700000008000300"], 0x1c}}, 0x20000000)

10.71269816s ago: executing program 3 (id=5111):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810)

10.412875667s ago: executing program 3 (id=5112):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

10.233941651s ago: executing program 1 (id=5113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)

9.385109041s ago: executing program 1 (id=5115):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$eJzs3EtsG0UYAOB/HefVBw2lPFpaCJRHBTRp0gc9cAGBxAEkJDgUcQppWpWmDWqCRKsICodyRJW4I45I3JE4wQUBB4TEFe6oUoVyaeG0aO1d10ls5+XGLf4+yc7M7joz/85OdjJjO4CuNZw9JRHbIuKPiNhRzS4+YLj64+bC/OQ/C/OTSaTpm38nleNuLMxPFocWr9tazaRpRH+W7G9Q7pV3Iiamp6cu5PnRuXPvj85evHTwzLmJ01Onp86PHz9+5PC+vmPjRyv70yb1710hvlL+M4vrxp6PZvbufvXtq69Pnrj67s/fZPXdlu+vj2Nd0uU1HK6e3aUezZ6e3FBhd5Rfs6ftdRuScvODRzahQqxeT0SUa/0oiZ4YrO3bEa982sGqAbdZmqZpo/tz1N23U+B/KtG/oUsV9/rs/9/isTkjjzvD9Rcj4mCeWZifvFmLv1ybO+hd8v9tOw1HxInL/36ZPaId8xAAACv4Phv/PNdo/FeKB+qOuydfQxmKiHsjYmdE3BcRuyLi/ojKsQ9GnHtojeUvXSFZPv4pXVtXYKuUjf9eyNe2bi4a/xWjvxjqyXPbK/H3JqfOTE8dys/Jgejtz/JjLcr44eXfPy/SA0v21Y//skdWfjEWzOtxrbxkgu7kxNxEJZGm6ccbCz+ufxKxp9wo/iSKZZwkInZHxJ51lnHmma/3Ntu3cvwttFhnWq30q4inq+1/efH4/1ZTJfXrk4MRUVufHHv+2PjR0YGYnjo0WlwVy/3y25U3mpW/ofjbIGv/LQ2v/9oq8FAyEDF78dLZynrt7NrLuPLnZ3V9etHqchZ/6duINV//fclblXRfvu3Dibm5C2MRfclry7eP33ptkS+Oz+I/sL9x/99ZV+OHIyK7iPdFxCP5Im7Wdo9FxOMRsb9F/D+99MR7zfY1b/9ms/LtdT0/US3bP+rbf+2JnrM/ftes/OF8DTLy89C4/Y9UUgfyLbW/fy2stoLrOmkAAABwlylV3gOflEZq6VJpZKT6Hv5dsaU0PTM79+ypmQ/On6y+V34oekvFTNeOuvnQsXxuuMiPL8kfzueNv+gZrORHJmemT3Y6eOhyW5v0/8xfPZ2uHXDbtWEdDbhL6f/QvfR/6F76P3Qv/R+6V6P+v9EPFgB3B/d/6F6V/v/U5U5XA+gA93/oXvo/dKWmn40vbegj/00TSbt/YcNE8d0Jm1HWyoniuyg2vfTBdb98YOVTF6XOntWuSZSXtUWU21pEf8NdHfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Eb/BQAA///i5tKw")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

9.336260662s ago: executing program 3 (id=5116):
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r1, 0x0, 0x100000000)

8.409917693s ago: executing program 5 (id=5117):
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
close(r1)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r3, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d", @ANYRESHEX=r2], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

7.999787903s ago: executing program 1 (id=5118):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(r3, 0x0, 0x200040d4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.883870886s ago: executing program 3 (id=5119):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xf0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb773}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054)

7.732052659s ago: executing program 5 (id=5120):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(0xffffffffffffffff, 0x5)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)

7.622059842s ago: executing program 3 (id=5121):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)

7.485959955s ago: executing program 6 (id=5122):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
fsmount(r0, 0x0, 0x20)

7.461038926s ago: executing program 2 (id=5123):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210)

6.295573403s ago: executing program 5 (id=5124):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004040)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

6.244992324s ago: executing program 2 (id=5125):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff})
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.00217856s ago: executing program 1 (id=5126):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

5.97983561s ago: executing program 5 (id=5127):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @fda={0x66646185, 0x5, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

5.937402681s ago: executing program 6 (id=5128):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1, 0x698})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

5.892269682s ago: executing program 2 (id=5129):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

2.433708243s ago: executing program 5 (id=5130):
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c)
syz_emit_ethernet(0x117, &(0x7f0000000480)=ANY=[], 0x0)

2.404871253s ago: executing program 1 (id=5131):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = userfaultfd(0x80801)
close(0x3)
r1 = userfaultfd(0x80801)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
readv(r0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})

2.289106866s ago: executing program 2 (id=5132):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2416, 0x9a41, 0x1, &(0x7f0000000240)="b6"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0})

2.081362151s ago: executing program 6 (id=5133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xf5ff, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050)

2.080704931s ago: executing program 5 (id=5134):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0x3, &(0x7f0000000180)={0xfffffffffffffff3, 0x4}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000100)=ANY=[], 0xc, 0x1537, &(0x7f0000001ec0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x1c0)

154.203826ms ago: executing program 6 (id=5135):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f00000000c0))

45.855788ms ago: executing program 2 (id=5136):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]})
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, 0x0, 0x0)

0s ago: executing program 1 (id=5137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

kernel console output (not intermixed with test programs):

 VLAN 0 to HW filter on device team0
[  458.245303][T14527] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  458.338272][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  458.360809][T14527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  458.559760][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  458.806127][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  459.853257][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  460.281446][ T7219] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  460.487299][ T7219] usb 1-1: Using ep0 maxpacket: 32
[  460.496484][ T7219] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.544772][ T7219] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.596947][ T7219] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  460.626129][ T7219] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  460.651705][ T7219] usb 1-1: Product: syz
[  460.662109][ T7219] usb 1-1: Manufacturer: syz
[  460.698113][ T7219] hub 1-1:4.0: USB hub found
[  460.906524][ T7219] hub 1-1:4.0: 2 ports detected
[  462.234469][ T7219] hub 1-1:4.0: activate --> -90
[  462.677582][ T9268] usb 1-1: USB disconnect, device number 8
[  462.713880][T14669] overlayfs: failed to clone upperpath
[  462.950054][T14676] netlink: 'syz.3.3268': attribute type 1 has an invalid length.
[  463.024991][T14676] device bond9 entered promiscuous mode
[  463.033405][T14676] 8021q: adding VLAN 0 to HW filter on device bond9
[  463.079404][T14680] bond9: (slave erspan1): making interface the new active one
[  463.122105][T14680] device erspan1 entered promiscuous mode
[  463.173725][T14680] bond9: (slave erspan1): Enslaving as an active interface with an up link
[  463.182561][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  463.206360][T14686] device veth0_vlan left promiscuous mode
[  463.238740][T14686] device veth0_vlan entered promiscuous mode
[  463.275067][T14685] bond0 speed is unknown, defaulting to 1000
[  463.312828][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  463.356860][T14688] netlink: 'syz.2.3272': attribute type 1 has an invalid length.
[  463.439903][T14688] 8021q: adding VLAN 0 to HW filter on device bond4
[  463.502240][T14692] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.511348][T14692] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.520154][T14692] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.528468][T14692] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.551672][T14692] bond4: (slave geneve2): making interface the new active one
[  463.581934][T14692] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  463.594654][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  464.598939][T14718] overlayfs: failed to clone upperpath
[  465.316229][T14733] bond0 speed is unknown, defaulting to 1000
[  465.440339][T14739] overlayfs: failed to clone upperpath
[  466.091041][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  466.334823][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  466.508690][   T26] audit: type=1326 audit(1777376597.102:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.1.3282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x0
[  466.776972][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  466.887718][T14768] netlink: 'syz.3.3292': attribute type 1 has an invalid length.
[  466.980962][T14768] 8021q: adding VLAN 0 to HW filter on device bond10
[  467.099054][T14773] bond10: (slave vlan2): Opening slave failed
[  467.216633][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  467.950284][T14807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  468.030285][T14807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  468.127987][T14807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  468.201715][T14807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  468.332597][T14807] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  468.349875][T14807] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  468.366773][T14807] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  468.384718][T14807] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  469.379892][T14843] netlink: 'syz.3.3312': attribute type 1 has an invalid length.
[  469.515725][T14843] 8021q: adding VLAN 0 to HW filter on device bond11
[  469.581262][T14847] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.632552][T14847] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.656995][T14847] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.666043][T14847] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.680593][T14847] bond11: (slave geneve3): making interface the new active one
[  469.713013][T14847] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  469.733186][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready
[  470.261344][T14880] overlayfs: failed to clone upperpath
[  470.787210][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  471.688563][T14911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  471.866298][T14911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  472.760281][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  473.098534][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  473.244823][T14987] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  473.322615][T14987] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  473.352312][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  473.840909][T15008] ip: renamed from gretap0
[  474.522684][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  474.801392][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  475.048132][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  475.376170][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  475.597308][T15057] block device autoloading is deprecated and will be removed.
[  475.774183][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  475.976727][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  476.039752][T15070] netlink: 'syz.9.3374': attribute type 1 has an invalid length.
[  476.051158][T15068] ceph: No mds server is up or the cluster is laggy
[  476.058289][ T4318] libceph: connect (1)[c::]:6789 error -101
[  476.081336][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  476.178868][T15079] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  476.208659][T15079] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  476.222127][T15079] bond1: (slave vxcan3): making interface the new active one
[  476.231807][T15079] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[  476.331393][T15070] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  476.412213][T15070] bond1: (slave vxcan5): Enslaving as a backup interface with an up link
[  476.530683][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  476.630961][T15096] sctp: [Deprecated]: syz.0.3379 (pid 15096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  476.630961][T15096] Use struct sctp_sack_info instead
[  476.786312][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  477.009990][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  477.185919][ T4318] libceph: connect (1)[c::]:6789 error -101
[  477.194940][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  477.218027][T15108] ceph: No mds server is up or the cluster is laggy
[  477.284407][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  477.331258][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'.
[  477.622851][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  478.027797][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  478.305818][T15157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.537394][T15169] netlink: 'syz.3.3401': attribute type 39 has an invalid length.
[  478.733305][T15178] netlink: 'syz.3.3405': attribute type 1 has an invalid length.
[  478.764076][T11632] libceph: connect (1)[c::]:6789 error -101
[  478.771712][T11632] libceph: mon0 (1)[c::]:6789 connect error
[  478.802421][T15175] ceph: No mds server is up or the cluster is laggy
[  478.828381][T15182] device macvlan3 entered promiscuous mode
[  478.873312][T15182] device bond12 entered promiscuous mode
[  478.887407][T15182] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  478.899284][T15182] device bond12 left promiscuous mode
[  479.133899][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  479.558108][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  479.892037][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  480.308328][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  480.795804][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3422'.
[  481.021972][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3423'.
[  481.381564][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3428'.
[  481.418825][T15266] 8021q: adding VLAN 0 to HW filter on device bond0
[  481.451008][T15266] team0: Port device bond0 added
[  481.475782][ T7214] bond0 speed is unknown, defaulting to 1000
[  481.508469][T15269] bridge0: port 1(team0) entered blocking state
[  481.539452][T15269] bridge0: port 1(team0) entered disabled state
[  481.559881][T15269] device team0 entered promiscuous mode
[  481.571723][T15269] device bond0 entered promiscuous mode
[  481.994087][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  482.031743][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'.
[  482.080698][T15279] netlink: 412 bytes leftover after parsing attributes in process `syz.3.3432'.
[  482.208427][ T7212] libceph: connect (1)[c::]:6789 error -101
[  482.227062][ T7212] libceph: mon0 (1)[c::]:6789 connect error
[  482.265725][T15285] ceph: No mds server is up or the cluster is laggy
[  482.392940][T15297] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3437'.
[  482.707597][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  482.856216][T15312] netlink: 'syz.0.3444': attribute type 12 has an invalid length.
[  483.416372][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  483.513860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  483.968796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  484.044618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  484.152955][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  484.601796][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  484.864388][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  484.987312][T15359] netlink: 'syz.0.3458': attribute type 1 has an invalid length.
[  485.131328][T15361] device macvlan2 entered promiscuous mode
[  485.213096][T15361] device bond1 entered promiscuous mode
[  485.219689][T15361] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  485.240725][T15361] device bond1 left promiscuous mode
[  485.639376][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  487.380110][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  487.817815][ T9268] libceph: connect (1)[c::]:6789 error -101
[  487.823918][ T9268] libceph: mon0 (1)[c::]:6789 connect error
[  487.841098][T15420] ceph: No mds server is up or the cluster is laggy
[  487.927963][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  488.641899][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  488.964568][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  489.325660][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  489.572458][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/140.tmp-b7:0' failed: Read-only file system
[  489.697243][T15469] loop0: detected capacity change from 0 to 128
[  489.734021][T15469] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  489.799545][T15469] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  489.856981][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/228.tmp-b7:0' failed: Read-only file system
[  490.120225][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/228.tmp-b7:0' failed: Read-only file system
[  490.210882][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/228.tmp-b7:0' failed: Read-only file system
[  490.451030][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/229.tmp-b7:0' failed: Read-only file system
[  490.675119][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/229.tmp-b7:0' failed: Read-only file system
[  491.581199][T15337] Set syz1 is full, maxelem 65536 reached
[  493.234696][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3502'.
[  493.302915][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3502'.
[  493.330508][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3502'.
[  493.385622][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3502'.
[  493.425465][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3502'.
[  493.478601][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/229.tmp-b7:0' failed: Read-only file system
[  493.772152][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  493.793418][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3506'.
[  494.187322][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/229.tmp-b7:0' failed: Read-only file system
[  494.617568][T15555] loop0: detected capacity change from 0 to 2048
[  494.891399][T15555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  494.918669][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/230.tmp-b7:0' failed: Read-only file system
[  495.025951][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  495.206978][T15570] overlayfs: failed to clone upperpath
[  495.239227][   T26] audit: type=1804 audit(1777376623.617:327): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3507" name="/newroot/53/file2/file1" dev="loop0" ino=15 res=1 errno=0
[  495.261005][T15572] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  495.313433][T15572] EXT4-fs error (device loop0): ext4_setattr:5634: inode #15: comm syz.0.3507: mark_inode_dirty error
[  495.356787][T15572] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem
[  495.726439][T14299] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[  495.743837][T14299] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  495.778528][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/230.tmp-b7:0' failed: Read-only file system
[  495.829828][T14299] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error
[  495.982711][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3513'.
[  496.055834][T14299] EXT4-fs (loop0): unmounting filesystem.
[  496.133982][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/230.tmp-b7:0' failed: Read-only file system
[  496.218706][T10871] udevd[10871]: symlink '../../loop0' '/dev/disk/by-diskseq/230.tmp-b7:0' failed: Read-only file system
[  496.969483][ T5598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.316642][ T5598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.729947][ T5598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.085576][ T5598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.289818][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  498.310582][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  498.319282][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  498.335670][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  498.349297][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  498.357567][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  498.524762][T15628] bond0 speed is unknown, defaulting to 1000
[  498.578368][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'.
[  498.805702][T15645] netlink: 'syz.3.3530': attribute type 10 has an invalid length.
[  498.863648][T15645] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  498.901261][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3530'.
[  498.931597][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  499.602771][T15669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3535'.
[  499.635723][T15628] chnl_net:caif_netlink_parms(): no params data found
[  500.383877][T15628] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.418980][T15628] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.451601][T15628] device bridge_slave_0 entered promiscuous mode
[  500.625936][ T4269] Bluetooth: hci1: command 0x0409 tx timeout
[  500.637338][T15628] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.650862][T15628] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.699849][T15628] device bridge_slave_1 entered promiscuous mode
[  500.875868][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'.
[  500.915361][T15706] device hsr_slave_0 left promiscuous mode
[  500.947956][T15706] device hsr_slave_1 left promiscuous mode
[  501.338708][T15628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.420940][T15628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.733910][T15628] team0: Port device team_slave_0 added
[  501.786935][ T5598] device hsr_slave_0 left promiscuous mode
[  501.804681][ T5598] device hsr_slave_1 left promiscuous mode
[  501.823064][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.837149][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.865991][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.883751][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.913695][ T5598] device bridge_slave_1 left promiscuous mode
[  501.938297][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.977362][ T5598] device bridge_slave_0 left promiscuous mode
[  501.987532][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.127597][ T5598] device veth1_macvtap left promiscuous mode
[  502.135848][ T5598] device veth0_macvtap left promiscuous mode
[  502.142019][ T5598] device veth1_vlan left promiscuous mode
[  502.148311][ T5598] device veth0_vlan left promiscuous mode
[  502.449329][ T5598] bond1 (unregistering): Released all slaves
[  502.881754][ T4269] Bluetooth: hci1: command 0x041b tx timeout
[  504.279802][ T5598] team0 (unregistering): Port device team_slave_1 removed
[  504.445906][ T5598] team0 (unregistering): Port device team_slave_0 removed
[  504.572322][ T5598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  504.702052][ T5598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  505.588880][ T4269] Bluetooth: hci1: command 0x040f tx timeout
[  506.428030][ T5598] bond0 (unregistering): Released all slaves
[  506.636511][T15628] team0: Port device team_slave_1 added
[  506.647351][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'.
[  506.689370][T15742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3555'.
[  506.753075][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'.
[  506.820768][ T5587] bond0: (slave wlan1): interface is now down
[  506.853875][ T5587] bond0: now running without any active interface!
[  507.129506][T15628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.189336][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.228088][T15628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.245414][T15808] netlink: 'syz.2.3572': attribute type 1 has an invalid length.
[  507.275403][T15808] device bond5 entered promiscuous mode
[  507.281472][T15808] 8021q: adding VLAN 0 to HW filter on device bond5
[  507.301443][T15628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.308456][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.335420][T15628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.371378][T15815] bond5: (slave bridge1): making interface the new active one
[  507.387225][T15815] device bridge1 entered promiscuous mode
[  507.410103][T15815] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  507.453440][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  507.568259][T15628] device hsr_slave_0 entered promiscuous mode
[  507.614029][T15628] device hsr_slave_1 entered promiscuous mode
[  507.632311][T15628] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  507.657829][T15628] Cannot create hsr debugfs directory
[  507.821309][ T4269] Bluetooth: hci1: command 0x0419 tx timeout
[  508.901497][T15854] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3584'.
[  509.731649][T15628] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  509.776312][T15628] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  509.802643][T15628] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  509.843917][T15628] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  510.031747][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3595'.
[  510.113658][T15889] 8021q: adding VLAN 0 to HW filter on device bond2
[  510.236348][T15891] 8021q: adding VLAN 0 to HW filter on device bond2
[  510.243558][T15891] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address
[  510.329084][T15891] bond2: (slave vxcan7): Error -95 calling set_mac_address
[  510.453124][T15889] device macvlan2 entered promiscuous mode
[  510.486350][T15889] device bond2 entered promiscuous mode
[  510.503775][T15889] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  510.535107][T15889] device bond2 left promiscuous mode
[  510.819865][T15628] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.887793][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  510.896351][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  510.959864][T15628] 8021q: adding VLAN 0 to HW filter on device team0
[  511.040376][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  511.062170][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  511.101760][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.109169][ T5590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.190001][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  511.211319][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  511.241452][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  511.276350][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.283543][ T5590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.346422][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  511.369071][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  511.456731][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  511.503872][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  511.534673][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  511.567538][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  511.604307][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  511.623525][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  511.649788][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  511.680082][T15628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  511.712272][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  511.731453][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  511.989120][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3603'.
[  512.013624][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'.
[  512.278873][T15934] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  512.457406][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  512.468226][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  512.497745][T15628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.639474][T15949] netlink: 'syz.9.3609': attribute type 1 has an invalid length.
[  512.695232][T15949] device bond3 entered promiscuous mode
[  512.701245][T15949] 8021q: adding VLAN 0 to HW filter on device bond3
[  512.721325][T15949] device bridge2 entered promiscuous mode
[  512.728095][T15949] bond3: (slave bridge2): Enslaving as a backup interface with an up link
[  512.825678][   T11] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  512.838637][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  512.999379][ T5590] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  513.478679][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  513.492759][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  513.607580][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  513.629807][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  513.678702][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  513.722140][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  513.754674][T15628] device veth0_vlan entered promiscuous mode
[  513.765447][T15979] netlink: 'syz.2.3614': attribute type 1 has an invalid length.
[  513.926763][T15984] 8021q: adding VLAN 0 to HW filter on device bond7
[  513.970543][T15984] bond6: (slave bond7): Enslaving as a backup interface with a down link
[  514.035546][T15982] device bond6 entered promiscuous mode
[  514.088883][T15982] device bond7 entered promiscuous mode
[  514.114857][T15982] 8021q: adding VLAN 0 to HW filter on device bond6
[  514.200333][T15628] device veth1_vlan entered promiscuous mode
[  514.414405][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  514.512878][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  514.738636][T15628] device veth0_macvtap entered promiscuous mode
[  515.001061][T15628] device veth1_macvtap entered promiscuous mode
[  515.227653][T15628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.238613][T15628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.293828][T15628] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.326386][T15628] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.338672][T15628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.397776][T15628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.419757][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  515.428986][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  515.445147][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  515.485145][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  515.509722][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  515.546017][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  515.783767][ T5579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.800400][ T5579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.877503][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  515.962402][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  515.968876][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  516.013653][T16017] bond13: (slave ip6gretap0): making interface the new active one
[  516.071526][T16017] bond13: (slave ip6gretap0): Enslaving as an active interface with an up link
[  516.102494][ T5600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.123711][ T5600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.156275][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  516.244336][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  516.456865][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  516.610866][T16043] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3627'.
[  516.782317][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  516.945820][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  518.083213][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  518.272049][T16064] overlayfs: failed to clone upperpath
[  518.368067][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  518.874769][T16079] bond0 speed is unknown, defaulting to 1000
[  518.990669][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  520.115938][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  520.597198][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  520.717017][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3659'.
[  520.900568][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  521.721946][T16186] Cannot find add_set index 0 as target
[  522.755867][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  522.901072][T16202] netlink: 'syz.6.3672': attribute type 4 has an invalid length.
[  523.131835][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  523.423890][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  523.445564][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  523.456402][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  524.066953][T16218] ptrace attach of ""[16219] was attempted by "./syz-executor exec"[16218]
[  524.243818][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  524.485692][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  527.070344][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  527.118124][T16278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3696'.
[  527.172363][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'.
[  527.240361][T16278] device team0 left promiscuous mode
[  527.245736][T16278] device bond0 left promiscuous mode
[  527.308263][T16286] device team0 entered promiscuous mode
[  527.331223][T16286] device bond0 entered promiscuous mode
[  527.347896][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  527.737555][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  528.200086][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  528.504578][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  528.940718][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  529.590367][T16336] sch_tbf: burst 4 is lower than device lo mtu (18) !
[  530.102837][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  530.307107][T16356] atomic_op ffff88807a4fc198 conn xmit_atomic 0000000000000000
[  530.983409][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  531.329814][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  532.458201][T16377] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  532.520364][T16381] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  532.603324][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  533.134997][ T7212] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  534.336291][ T7212] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.359234][ T7212] usb 7-1: config 0 interface 0 has no altsetting 0
[  534.365955][ T7212] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  534.375570][ T7212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.398876][ T7212] usb 7-1: config 0 descriptor??
[  534.446477][ T7212] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  534.602971][T16436] 9pnet: p9_errstr2errno: server reported unknown error ./file0/..
[  535.038364][ T9267] usb 7-1: USB disconnect, device number 3
[  535.694830][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  535.990724][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  536.254804][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  536.382357][T16501] overlayfs: failed to clone lowerpath
[  536.441522][T16503] overlayfs: failed to clone upperpath
[  536.572270][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  538.371853][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  539.023379][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  539.403570][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  539.491138][T16550] binder: 16549:16550 ioctl c0306201 200000000080 returned -14
[  539.530252][T16550] binder: 16549:16550 ioctl c0306201 2000000003c0 returned -14
[  539.641225][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  539.717827][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  539.976451][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  540.453284][T16577] overlayfs: failed to clone upperpath
[  540.891364][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/155.tmp-b7:6' failed: Read-only file system
[  541.069811][T16591] loop6: detected capacity change from 0 to 512
[  541.096015][T16591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  541.127576][T16591] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.3775: iget: bad i_size value: 38620345925642
[  541.143292][T16591] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3775: couldn't read orphan inode 15 (err -117)
[  541.164243][T16591] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  541.278970][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/232.tmp-b7:6' failed: Read-only file system
[  541.293632][T16591] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3775: bg 0: block 5: invalid block bitmap
[  541.328774][T16591] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 732 with error 28
[  541.343736][T16591] EXT4-fs (loop6): This should not happen!! Data will be lost
[  541.343736][T16591] 
[  541.366922][T16591] EXT4-fs (loop6): Total free blocks count 0
[  541.384802][T16591] EXT4-fs (loop6): Free/Dirty block details
[  541.399340][T16591] EXT4-fs (loop6): free_blocks=0
[  541.410615][T16591] EXT4-fs (loop6): dirty_blocks=736
[  541.417371][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  541.422386][T16591] EXT4-fs (loop6): Block reservation details
[  541.462390][T16591] EXT4-fs (loop6): i_reserved_data_blocks=736
[  541.542713][T16599] EXT4-fs (loop6): shut down requested (0)
[  541.872996][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/232.tmp-b7:6' failed: Read-only file system
[  541.941268][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/232.tmp-b7:6' failed: Read-only file system
[  542.025111][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  544.003433][ T5598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.215609][ T5598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.479325][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  544.639917][ T5598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.760051][T16672] device batadv1 entered promiscuous mode
[  544.789753][T16672] 8021q: adding VLAN 0 to HW filter on device batadv1
[  544.895802][ T5598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.076825][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  545.477519][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  545.721956][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  545.767566][T16701] overlayfs: failed to clone upperpath
[  546.071517][T16716] atomic_op ffff888054fb8198 conn xmit_atomic 0000000000000000
[  546.151405][T16709] 8021q: adding VLAN 0 to HW filter on device bond2
[  546.198874][T16709] bond1: (slave bond2): Enslaving as an active interface with a down link
[  546.325294][T16730] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3810'.
[  546.536337][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  547.063695][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3816'.
[  547.295362][T16756] device ip6gre1 entered promiscuous mode
[  547.896588][ T5598] device hsr_slave_0 left promiscuous mode
[  547.912023][ T5598] device hsr_slave_1 left promiscuous mode
[  547.991454][ T5598] device veth1_macvtap left promiscuous mode
[  548.004372][ T5598] device veth0_macvtap left promiscuous mode
[  548.025018][ T5598] device veth1_vlan left promiscuous mode
[  548.037831][ T5598] device veth0_vlan left promiscuous mode
[  549.687020][ T5598] bond0 (unregistering): Released all slaves
[  549.817647][T16781] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.3823'.
[  549.828282][T16781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3823'.
[  549.838390][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'.
[  549.942196][T16789] netlink: 'syz.9.3825': attribute type 4 has an invalid length.
[  549.970719][T16799] netlink: 'syz.3.3829': attribute type 8 has an invalid length.
[  550.198815][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  551.325090][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  551.580139][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  551.607370][T16829] netlink: 'syz.9.3840': attribute type 3 has an invalid length.
[  551.634280][T16829] netlink: 'syz.9.3840': attribute type 3 has an invalid length.
[  551.897032][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  552.060532][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  552.567310][T16860] netlink: 'syz.3.3851': attribute type 27 has an invalid length.
[  553.490543][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  553.836935][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3853'.
[  554.536911][T16860] device gretap1 left promiscuous mode
[  554.580058][T16860] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.588761][T16860] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.597333][T16860] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.605845][T16860] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.787896][T16860] device bond8 left promiscuous mode
[  554.824391][T16860] device bond9 left promiscuous mode
[  554.829757][T16860] device erspan1 left promiscuous mode
[  554.951221][T16860] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.959734][T16860] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.971567][T16860] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.981471][T16860] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.010496][T16860] device ip6gre1 left promiscuous mode
[  555.245241][ T5598] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.338013][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  555.415212][ T5598] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.575551][ T5598] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.792900][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/233.tmp-b7:6' failed: Read-only file system
[  555.814932][ T5598] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  556.848256][T16940] loop6: detected capacity change from 0 to 131072
[  557.017706][T16940] F2FS-fs (loop6): Found nat_bits in checkpoint
[  557.073112][T16940] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  557.166538][   T26] audit: type=1804 audit(1777376936.765:328): pid=16940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3867" name="/newroot/48/file1/bus" dev="loop6" ino=10 res=1 errno=0
[  557.359502][   T26] audit: type=1804 audit(1777376936.950:329): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3867" name="/newroot/48/file1/bus" dev="loop6" ino=10 res=1 errno=0
[  557.463344][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/234.tmp-b7:6' failed: Read-only file system
[  557.509490][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-uuid/7d96804d-fc78-4d7b-ba96-ee448261d02c.tmp-b7:6' failed: Read-only file system
[  557.702261][T16978] overlayfs: failed to clone upperpath
[  558.002896][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/234.tmp-b7:6' failed: Read-only file system
[  558.047092][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-uuid/7d96804d-fc78-4d7b-ba96-ee448261d02c.tmp-b7:6' failed: Read-only file system
[  558.784329][ T5598] IPVS: stopping backup sync thread 7572 ...
[  560.548568][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/234.tmp-b7:6' failed: Read-only file system
[  560.572964][ T5598] device hsr_slave_0 left promiscuous mode
[  560.588146][ T5598] device hsr_slave_1 left promiscuous mode
[  560.624531][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/234.tmp-b7:6' failed: Read-only file system
[  560.703782][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  560.720354][ T5598] bond3 (unregistering): (slave vxlan0): Releasing backup interface
[  560.775085][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  561.107538][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  561.218827][ T5598] bond3 (unregistering): Released all slaves
[  561.254926][ T5598] bond2 (unregistering): Released all slaves
[  561.417851][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  561.767647][ T5598] bond1 (unregistering): Released all slaves
[  563.161919][ T5598] bond0 (unregistering): Released all slaves
[  563.261194][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3904'.
[  563.302724][T17049] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.435146][T17049] device bridge_slave_0 left promiscuous mode
[  563.450696][T17049] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.472599][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3908'.
[  563.611887][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  564.408646][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  564.800191][T15975] udevd[15975]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  564.886446][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'.
[  566.051854][T17156] bond0 speed is unknown, defaulting to 1000
[  568.026064][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'.
[  568.363154][T15976] udevd[15976]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  582.588767][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  582.609000][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  582.683472][T17229] bond8: (slave ip6gretap1): no link monitoring support
[  582.741780][T17229] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  583.094242][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  584.292815][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  584.605200][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  584.782680][T17285] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  585.804030][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/235.tmp-b7:6' failed: Read-only file system
[  585.952029][T17303] loop6: detected capacity change from 0 to 512
[  585.974000][T17303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  586.080992][T17303] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  586.098804][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/236.tmp-b7:6' failed: Read-only file system
[  586.227920][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  586.243106][T17303] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  587.282120][T17303] EXT4-fs (loop6): unmounting filesystem.
[  587.307983][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/236.tmp-b7:6' failed: Read-only file system
[  587.393597][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  587.478880][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/236.tmp-b7:6' failed: Read-only file system
[  587.525972][T17246] udevd[17246]: symlink '../../loop6' '/dev/disk/by-diskseq/236.tmp-b7:6' failed: Read-only file system
[  587.805034][T17342] 8021q: adding VLAN 0 to HW filter on device bond14
[  587.898834][T17346] device macvlan3 entered promiscuous mode
[  587.906084][T17346] device bond14 entered promiscuous mode
[  587.912550][T17346] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  587.942165][T17346] device bond14 left promiscuous mode
[  588.010362][T17354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3983'.
[  588.273300][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'.
[  589.973657][T17393] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.990207][   T26] audit: type=1326 audit(1777376967.058:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  590.015320][T17393] team0: Port device bond0 added
[  590.035714][T17399] netlink: 'syz.6.3998': attribute type 16 has an invalid length.
[  590.057222][   T26] audit: type=1326 audit(1777376967.076:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  590.066002][T17399] netlink: 'syz.6.3998': attribute type 17 has an invalid length.
[  590.197225][T17399] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.258052][   T26] audit: type=1326 audit(1777376967.076:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  590.448213][   T26] audit: type=1326 audit(1777376967.094:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  590.671766][   T26] audit: type=1326 audit(1777376967.094:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  590.876879][   T26] audit: type=1326 audit(1777376967.094:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  591.080881][T17413] netlink: 'syz.9.4001': attribute type 4 has an invalid length.
[  591.122883][   T26] audit: type=1326 audit(1777376967.094:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  591.194966][T17414] netlink: 'syz.9.4001': attribute type 4 has an invalid length.
[  591.327692][   T26] audit: type=1326 audit(1777376967.094:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  591.430899][   T26] audit: type=1326 audit(1777376967.094:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  591.474240][   T26] audit: type=1326 audit(1777376967.150:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.1.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7ffc0000
[  594.051089][T17479] netlink: 'syz.2.4018': attribute type 4 has an invalid length.
[  594.071039][T17479] netlink: 'syz.2.4018': attribute type 4 has an invalid length.
[  594.102553][T17480] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4016'.
[  596.599378][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'.
[  597.253258][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4030'.
[  597.310023][T17527] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  597.318671][T17527] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  597.327191][T17527] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  597.335426][T17527] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  597.556113][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4030'.
[  598.541791][T17540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4035'.
[  601.205834][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4043'.
[  602.356893][T17607] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4052'.
[  603.753892][    C1] icmp: detected local route for 172.20.20.47 during ICMP sending, src 172.20.20.170
[  605.063197][T17647] netlink: 'syz.2.4059': attribute type 32 has an invalid length.
[  605.107447][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'.
[  605.151642][T17647] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  605.229311][T17650] netlink: 'syz.9.4060': attribute type 11 has an invalid length.
[  605.925982][T17676] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4067'.
[  606.991747][T17705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4072'.
[  607.374496][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'.
[  608.243230][T17734] virtio-fs: tag </dev/md0> not found
[  609.023882][T17743] netlink: 'syz.6.4085': attribute type 1 has an invalid length.
[  609.267247][T17743] 8021q: adding VLAN 0 to HW filter on device bond3
[  609.330371][T17744] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  609.506784][T17749] netlink: 'syz.9.4087': attribute type 1 has an invalid length.
[  609.619640][T17749] 8021q: adding VLAN 0 to HW filter on device bond4
[  609.647883][T17750] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  609.800777][T17754] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.932565][T17754] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.061017][T17754] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.200960][T17754] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.283371][T17754] bond4: (slave geneve2): making interface the new active one
[  610.391002][T17754] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  610.440506][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  610.513643][   T26] kauditd_printk_skb: 50 callbacks suppressed
[  610.513660][   T26] audit: type=1326 audit(1777376985.991:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.3.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7fc00000
[  610.555042][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4092'.
[  610.585269][   T26] audit: type=1326 audit(1777376985.991:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.3.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c92d9cdd9 code=0x7fc00000
[  611.165973][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057fb5c00: rx timeout, send abort
[  611.314812][   T26] audit: type=1326 audit(1777376986.730:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.3.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7fc00000
[  611.707954][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057fb6c00: rx timeout, send abort
[  611.716655][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057fb5c00: abort rx timeout. Force session deactivation
[  612.164323][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4100'.
[  612.258188][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057fb6c00: abort rx timeout. Force session deactivation
[  612.283950][T17810] device bond5 entered promiscuous mode
[  612.289849][T17810] 8021q: adding VLAN 0 to HW filter on device bond5
[  612.698341][T17810] 8021q: adding VLAN 0 to HW filter on device bond5
[  612.719260][T17810] bond5: (slave sit2): The slave device specified does not support setting the MAC address
[  612.736825][T17810] bond5: (slave sit2): Error -95 calling set_mac_address
[  613.763849][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4105'.
[  614.388836][T17857] tmpfs: Bad value for 'nr_inodes'
[  618.025923][T17886] netlink: 'syz.3.4115': attribute type 1 has an invalid length.
[  618.275409][T17886] 8021q: adding VLAN 0 to HW filter on device bond15
[  618.442351][T17892] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.471637][T17894] overlayfs: failed to clone upperpath
[  618.505743][T17892] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.540774][T17892] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.579672][T17892] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.624288][T17892] bond15: (slave geneve4): making interface the new active one
[  618.646426][T17892] bond15: (slave geneve4): Enslaving as an active interface with an up link
[  618.684368][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready
[  620.288704][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4135'.
[  621.851122][T17976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4142'.
[  627.993403][T18088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4173'.
[  628.668328][T18111] netlink: 'syz.9.4177': attribute type 1 has an invalid length.
[  628.826736][T18111] 8021q: adding VLAN 0 to HW filter on device bond6
[  628.873990][T18113] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  628.990969][T18116] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  630.223526][T18166] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4194'.
[  630.235790][ T7214] libceph: connect (1)[c::]:6789 error -101
[  630.244718][ T7214] libceph: mon0 (1)[c::]:6789 connect error
[  630.465723][T18164] ceph: No mds server is up or the cluster is laggy
[  630.552545][ T7214] libceph: connect (1)[c::]:6789 error -101
[  630.602805][ T7214] libceph: mon0 (1)[c::]:6789 connect error
[  631.068915][T18182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4196'.
[  634.187328][T18232] overlayfs: failed to clone lowerpath
[  634.749447][ T4274] Bluetooth: hci1: command 0x0406 tx timeout
[  635.880132][T18251] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  635.935546][T18251] lo: Caught tx_queue_len zero misconfig
[  636.201219][T18264] overlayfs: failed to clone upperpath
[  636.235998][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4219'.
[  636.406808][T18266] 8021q: adding VLAN 0 to HW filter on device bond10
[  636.893898][T18269] 8021q: adding VLAN 0 to HW filter on device bond10
[  636.907091][T18269] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  637.113556][T18269] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  637.970571][T18300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4228'.
[  638.045027][T18302] overlayfs: failed to clone upperpath
[  640.597979][   T26] audit: type=1326 audit(1777377013.746:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  640.666897][   T26] audit: type=1326 audit(1777377013.774:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  640.738211][   T26] audit: type=1326 audit(1777377013.774:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  640.782726][   T26] audit: type=1326 audit(1777377013.774:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  640.878315][   T26] audit: type=1326 audit(1777377013.774:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  640.941083][   T26] audit: type=1326 audit(1777377013.774:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  641.013196][   T26] audit: type=1326 audit(1777377013.774:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  641.849291][   T26] audit: type=1326 audit(1777377013.774:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  641.966965][   T26] audit: type=1326 audit(1777377013.783:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  642.015519][   T26] audit: type=1326 audit(1777377013.783:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c92d9cdd9 code=0x7ffc0000
[  642.257931][T18383] overlayfs: failed to clone upperpath
[  642.295899][T18383] overlayfs: failed to clone lowerpath
[  644.080219][T18409] device gretap2 entered promiscuous mode
[  644.175147][T18414] netlink: 'syz.9.4254': attribute type 8 has an invalid length.
[  644.650047][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4260'.
[  644.708098][T18427] device ip6gre2 entered promiscuous mode
[  644.854279][T18427] netlink: 'syz.1.4260': attribute type 6 has an invalid length.
[  644.907978][T18427] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4260'.
[  648.269982][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  648.269999][   T26] audit: type=1326 audit(1777377020.823:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.362288][   T26] audit: type=1326 audit(1777377020.888:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.423089][   T26] audit: type=1326 audit(1777377020.943:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.467055][   T26] audit: type=1326 audit(1777377021.008:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.530932][   T26] audit: type=1326 audit(1777377021.063:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.594920][   T26] audit: type=1326 audit(1777377021.128:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.660019][   T26] audit: type=1326 audit(1777377021.183:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.725014][   T26] audit: type=1326 audit(1777377021.248:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.790123][   T26] audit: type=1326 audit(1777377021.303:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  648.855091][   T26] audit: type=1326 audit(1777377021.368:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18482 comm="syz.9.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7fc00000
[  649.136646][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  649.143085][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  660.510712][T18550] netlink: 'syz.9.4291': attribute type 1 has an invalid length.
[  660.601597][T18550] 8021q: adding VLAN 0 to HW filter on device bond7
[  662.446147][T18586] xt_time: invalid argument - start or stop time greater than 23:59:59
[  663.840027][T18619] overlayfs: failed to clone upperpath
[  665.084920][T18667] netlink: 'syz.1.4323': attribute type 10 has an invalid length.
[  665.128130][T18667] device dummy0 entered promiscuous mode
[  665.164262][T18667] team0: Port device dummy0 added
[  665.181838][T18668] netlink: 'syz.1.4323': attribute type 10 has an invalid length.
[  665.204008][T18668] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  665.256634][T18668] device dummy0 left promiscuous mode
[  665.289901][T18668] team0: Failed to send options change via netlink (err -105)
[  665.310311][T18668] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  665.366558][T18668] team0: Port device dummy0 removed
[  665.414683][T18668] device dummy0 entered promiscuous mode
[  665.447648][T18668] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  665.478448][ T5562] team0: Failed to send port change of device bond0 via netlink (err -105)
[  665.488799][ T9269] bond0 speed is unknown, defaulting to 1000
[  665.499542][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  665.919118][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  665.919140][   T26] audit: type=1326 audit(1777377037.118:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  666.571803][   T26] audit: type=1326 audit(1777377037.718:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  666.822786][   T26] audit: type=1326 audit(1777377037.736:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  666.845739][   T26] audit: type=1326 audit(1777377037.736:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  666.884148][   T26] audit: type=1326 audit(1777377037.736:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  666.987125][   T26] audit: type=1326 audit(1777377037.736:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  667.057732][   T26] audit: type=1326 audit(1777377037.736:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  667.107290][   T26] audit: type=1326 audit(1777377037.736:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  667.209845][   T26] audit: type=1326 audit(1777377037.736:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  667.312549][   T26] audit: type=1326 audit(1777377037.736:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18676 comm="syz.1.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  668.490368][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4336'.
[  668.775143][T18732] 8021q: adding VLAN 0 to HW filter on device bond17
[  668.789145][T18732] bond16: (slave bond17): Enslaving as an active interface with an up link
[  668.943373][T18738] device gretap1 entered promiscuous mode
[  670.822757][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4364'.
[  670.879214][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'.
[  670.895643][T18794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4364'.
[  670.930096][T18794] bond11: (slave veth17): Enslaving as an active interface with an up link
[  670.975534][T18796] bond11 (unregistering): (slave veth17): Releasing backup interface
[  671.052399][T18796] bond11 (unregistering): Released all slaves
[  672.101000][T18811] overlayfs: failed to clone upperpath
[  672.104348][T18808] netlink: 'syz.9.4357': attribute type 10 has an invalid length.
[  672.125944][T18808] netlink: 'syz.9.4357': attribute type 10 has an invalid length.
[  672.228948][T18815] bond0 speed is unknown, defaulting to 1000
[  672.521633][T18820] bond0 speed is unknown, defaulting to 1000
[  673.989792][T18870] netlink: 'syz.3.4376': attribute type 1 has an invalid length.
[  674.033934][T18870] bond18: (slave bridge4): Enslaving as a backup interface with an up link
[  674.057094][T18870] bond18: (slave bridge5): Enslaving as a backup interface with a down link
[  677.307248][T18894] infiniband syz0: set down
[  677.332480][ T7212] Process accounting resumed
[  677.338229][T18894] infiniband syz0: added bond_slave_1
[  677.359622][T18894] rdma_rxe: unable to create cq
[  677.390699][T18894] infiniband syz0: Couldn't create ib_mad CQ
[  677.415069][T18894] infiniband syz0: Couldn't open port 1
[  677.535730][T18894] RDS/IB: syz0: added
[  677.552198][T18894] smc: adding ib device syz0 with port count 1
[  677.591626][T18894] smc:    ib device syz0 port 1 has pnetid 
[  677.628339][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4388'.
[  677.674522][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4388'.
[  679.327686][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4394'.
[  679.801989][   T26] kauditd_printk_skb: 25 callbacks suppressed
[  679.802007][   T26] audit: type=1804 audit(1777377049.907:464): pid=18968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4400" name="bus" dev="ramfs" ino=77158 res=1 errno=0
[  680.135287][   T26] audit: type=1804 audit(1777377049.953:465): pid=18968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4400" name="bus" dev="ramfs" ino=77158 res=1 errno=0
[  680.927400][   T26] audit: type=1107 audit(1777377050.959:466): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  680.934958][T18979] sctp: [Deprecated]: syz.1.4402 (pid 18979) Use of struct sctp_assoc_value in delayed_ack socket option.
[  680.934958][T18979] Use struct sctp_sack_info instead
[  682.289221][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4409'.
[  682.865146][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4413'.
[  682.959460][T19030] netlink: 'syz.3.4414': attribute type 4 has an invalid length.
[  683.002625][T19033] bond11: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  683.021660][T19033] bond11: (slave ip_vti0): Error -95 calling set_mac_address
[  683.072849][T19030] netlink: 'syz.3.4414': attribute type 4 has an invalid length.
[  686.961429][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'.
[  687.428497][T19138] device bond12 entered promiscuous mode
[  688.264548][   T26] audit: type=1326 audit(1777377057.731:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.1.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  688.609843][   T26] audit: type=1326 audit(1777377057.759:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19166 comm="syz.1.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e7759cdd9 code=0x7fc00000
[  689.805234][T19188] netlink: 'syz.2.4450': attribute type 27 has an invalid length.
[  690.427959][T19204] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4452'.
[  691.369688][T19221] xt_CT: You must specify a L4 protocol and not use inversions on it
[  692.742805][   T26] audit: type=1326 audit(1777377061.662:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19226 comm="syz.2.4462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x0
[  693.473094][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4468'.
[  694.521741][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4471'.
[  697.002083][   T26] audit: type=1326 audit(1777377065.786:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19291 comm="syz.1.4476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e7759cdd9 code=0x0
[  700.186757][T19342] xt_CT: You must specify a L4 protocol and not use inversions on it
[  701.035973][T19348] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  701.245412][   T26] audit: type=1804 audit(1777377069.708:471): pid=19353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4493" name="bus" dev="ramfs" ino=77614 res=1 errno=0
[  701.322891][   T26] audit: type=1804 audit(1777377069.736:472): pid=19353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4493" name="bus" dev="ramfs" ino=77614 res=1 errno=0
[  705.844078][T19406] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  706.192664][T19423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  709.451396][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4523'.
[  710.780883][T19484] tipc: New replicast peer: 255.255.255.255
[  710.817773][T19484] tipc: Enabled bearer <udp:syz2>, priority 10
[  710.859857][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4529'.
[  710.912291][T19484] tipc: Disabling bearer <udp:syz2>
[  712.586262][T19538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4545'.
[  712.595391][T19538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4545'.
[  712.852318][T19545] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  713.126733][T19545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  713.873695][   T26] audit: type=1804 audit(1777377081.362:473): pid=19555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4548" name="bus" dev="ramfs" ino=78865 res=1 errno=0
[  713.942784][   T26] audit: type=1804 audit(1777377081.362:474): pid=19555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4548" name="bus" dev="ramfs" ino=78865 res=1 errno=0
[  715.729853][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  715.738100][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  716.250948][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4564'.
[  716.329621][T19611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  716.357978][T19613] device bond13 entered promiscuous mode
[  718.456969][T19642] netlink: 'syz.3.4572': attribute type 39 has an invalid length.
[  723.228381][T19707] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709
[  723.346625][T19712] bond0: (slave dummy0): Releasing backup interface
[  723.369495][T19712] device dummy0 left promiscuous mode
[  723.406692][T19712] batman_adv: batadv0: Adding interface: dummy0
[  723.422379][T19712] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  723.524815][T19712] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  723.654800][T10090] bond0 speed is unknown, defaulting to 1000
[  724.872777][T19743] SET target dimension over the limit!
[  727.920708][ T9269] libceph: connect (1)[c::]:6789 error -101
[  727.930885][ T9269] libceph: mon0 (1)[c::]:6789 connect error
[  727.943560][T19756] ceph: No mds server is up or the cluster is laggy
[  728.133504][T19770] overlayfs: failed to clone lowerpath
[  731.885362][T19816] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4616'.
[  731.914763][T19816] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4616'.
[  731.987424][T19816] device bridge0 entered promiscuous mode
[  732.014751][T19816] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4616'.
[  732.258886][T19826] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  733.925151][T19854] ptrace attach of "./syz-executor exec"[19858] was attempted by "./syz-executor exec"[19854]
[  735.569467][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4636'.
[  738.649557][T19919] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4645'.
[  738.670970][T19919] device ip6gre2 entered promiscuous mode
[  739.626058][T19924] netlink: 'syz.9.4645': attribute type 6 has an invalid length.
[  739.648154][T19924] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4645'.
[  746.781750][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4662'.
[  746.892661][T19990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4662'.
[  746.973130][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4662'.
[  747.072127][T19990] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4662'.
[  747.099693][T19990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4662'.
[  747.132207][T19994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4662'.
[  748.892776][   T26] audit: type=1326 audit(1777377113.656:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  749.543086][   T26] audit: type=1326 audit(1777377113.656:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  749.583197][   T26] audit: type=1326 audit(1777377113.656:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  749.689482][   T26] audit: type=1326 audit(1777377113.656:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  749.778000][   T26] audit: type=1326 audit(1777377113.656:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  750.541046][   T26] audit: type=1326 audit(1777377113.656:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  750.606193][   T26] audit: type=1326 audit(1777377113.656:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  750.652493][   T26] audit: type=1326 audit(1777377113.665:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  750.842795][   T26] audit: type=1326 audit(1777377113.665:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  751.064014][   T26] audit: type=1326 audit(1777377113.665:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20020 comm="syz.9.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264c79cdd9 code=0x7ffc0000
[  751.974959][T20067] ptrace attach of "./syz-executor exec"[20069] was attempted by "./syz-executor exec"[20067]
[  758.358526][T20138] x_tables: duplicate underflow at hook 2
[  762.349711][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4714'.
[  763.565565][T20233] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4718'.
[  769.117745][T20303] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  769.521628][T20315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4742'.
[  769.596216][T20315] device ip6gre1 entered promiscuous mode
[  769.744236][T20321] netlink: 'syz.6.4742': attribute type 6 has an invalid length.
[  769.810004][T20321] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4742'.
[  769.996305][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  770.007664][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  770.016232][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  770.024123][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  770.059793][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  770.067152][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  770.185798][T20327] bond0 speed is unknown, defaulting to 1000
[  772.289165][T20353] netlink: 'syz.6.4749': attribute type 1 has an invalid length.
[  772.345571][ T4274] Bluetooth: hci5: command 0x0409 tx timeout
[  772.398269][T20353] 8021q: adding VLAN 0 to HW filter on device bond5
[  773.229245][T20357] bond5: (slave geneve2): making interface the new active one
[  773.338859][T20357] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  773.441216][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  773.979483][T20327] chnl_net:caif_netlink_parms(): no params data found
[  774.400346][T20327] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.439647][T20327] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.469148][T20327] device bridge_slave_0 entered promiscuous mode
[  774.658543][ T4274] Bluetooth: hci5: command 0x041b tx timeout
[  774.702703][T20327] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.546677][T20327] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.132444][T20327] device bridge_slave_1 entered promiscuous mode
[  776.162391][T20327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  776.530163][T20327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  776.638164][T20327] team0: Port device team_slave_0 added
[  776.661614][T20327] team0: Port device team_slave_1 added
[  776.762983][T20419] netlink: 'syz.6.4761': attribute type 4 has an invalid length.
[  776.778439][T20419] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4761'.
[  776.818776][T20327] batman_adv: batadv0: Adding interface: batadv_slave_0
[  776.843216][ T4269] Bluetooth: hci5: command 0x040f tx timeout
[  776.869484][T20327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  777.218442][T20327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  778.016244][T20327] batman_adv: batadv0: Adding interface: batadv_slave_1
[  778.046436][T20327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  778.223177][T20327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  778.372193][T20327] device hsr_slave_0 entered promiscuous mode
[  778.381494][T20327] device hsr_slave_1 entered promiscuous mode
[  778.408916][T20327] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  778.424746][T20327] Cannot create hsr debugfs directory
[  779.099153][ T4269] Bluetooth: hci5: command 0x0419 tx timeout
[  783.096348][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  783.127836][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  783.668645][T20487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  783.741232][T20488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  785.711506][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4783'.
[  786.111962][T20523] xt_hashlimit: max too large, truncated to 1048576
[  786.119519][T20523] xt_limit: Overflow, try lower: 0/0
[  787.147237][T20327] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  787.157479][T20327] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  787.178824][T20327] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  787.195379][T20327] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  787.305309][T20327] 8021q: adding VLAN 0 to HW filter on device bond0
[  787.325495][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  787.341145][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  787.352914][T20327] 8021q: adding VLAN 0 to HW filter on device team0
[  787.364689][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  787.374335][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  787.385519][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.392696][ T5572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  787.411937][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  787.420369][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  787.432628][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  787.441167][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.448316][ T5572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  787.459302][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  787.469026][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  787.489579][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  787.505564][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  787.531254][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  787.551393][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  787.567349][T20327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  787.579148][T20327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  787.597185][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  787.605962][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  787.615715][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  787.626125][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  787.641299][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  787.653019][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  787.958368][T20327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  787.966861][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  787.974668][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  788.438051][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  788.455039][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  788.490219][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  788.509682][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  788.519246][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  788.531767][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  788.541702][T20327] device veth0_vlan entered promiscuous mode
[  788.557455][T20327] device veth1_vlan entered promiscuous mode
[  788.596722][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  788.607777][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  788.626780][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  788.637824][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  788.651447][T20327] device veth0_macvtap entered promiscuous mode
[  788.665669][T20327] device veth1_macvtap entered promiscuous mode
[  788.685160][T20327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.697277][T20327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.709002][T20327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  788.717276][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  788.730557][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  788.741071][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  788.756586][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  788.771690][T20327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  788.783536][T20327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.802985][T20327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  788.814224][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  788.824148][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  788.836610][T20327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  788.847014][T20327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  788.860698][T20327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  788.874128][T20327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  788.967403][ T5568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  788.992488][ T5568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  789.019484][ T5568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  789.037707][ T5587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  789.045583][ T5587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  789.055636][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  789.170607][T20497] udevd[20497]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  789.282586][T20576] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4796'.
[  789.338860][T20576] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  789.545127][T20575] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  789.753058][T20575] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  789.765469][T20575] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  789.774959][T20575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.786292][T20575] usb 6-1: config 0 descriptor??
[  790.649200][T20575] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  790.674999][T20575] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0007/input/input8
[  790.843782][T20575] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  791.074962][T20575] usb 6-1: USB disconnect, device number 13
[  791.098386][T20618] fido_id[20618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  791.689899][T20622] udevd[20622]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  791.777818][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4800'.
[  791.862071][T20647] device team1 entered promiscuous mode
[  791.890690][T20647] 8021q: adding VLAN 0 to HW filter on device team1
[  791.899300][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4800'.
[  791.909001][T20649] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  791.930453][T20649] device team2 entered promiscuous mode
[  791.936313][T20649] 8021q: adding VLAN 0 to HW filter on device team2
[  796.056465][T20663] udevd[20663]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  797.507196][T20663] udevd[20663]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  798.751147][   T26] kauditd_printk_skb: 42 callbacks suppressed
[  798.751163][   T26] audit: type=1326 audit(1777377159.680:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  798.781745][T20704] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4806'.
[  798.847662][   T26] audit: type=1326 audit(1777377159.680:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  798.950908][   T26] audit: type=1326 audit(1777377159.717:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  799.039149][   T26] audit: type=1326 audit(1777377159.717:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  799.070804][   T26] audit: type=1326 audit(1777377159.717:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  799.092802][T20712] overlayfs: failed to clone upperpath
[  799.099625][   T26] audit: type=1326 audit(1777377159.717:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  799.204745][T20663] udevd[20663]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  799.223381][   T26] audit: type=1326 audit(1777377159.717:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  799.299310][   T26] audit: type=1326 audit(1777377159.717:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  799.383771][   T26] audit: type=1326 audit(1777377159.717:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  799.683541][   T26] audit: type=1326 audit(1777377159.717:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  800.337873][T20663] udevd[20663]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  801.446760][T20663] udevd[20663]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  801.893381][T10090] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  802.903758][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4824'.
[  803.397497][T10090] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  803.426687][T10090] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  803.436064][T10090] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  803.457619][T10090] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  803.493251][T10090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.519637][T10090] usb 6-1: Product: syz
[  803.526803][T10090] usb 6-1: Manufacturer: syz
[  803.531438][T10090] usb 6-1: SerialNumber: syz
[  803.578887][T10090] cdc_mbim 6-1:1.0: skipping garbage
[  803.598210][T10090] usb 6-1: selecting invalid altsetting 1
[  804.459078][T10090] cdc_mbim 6-1:1.0: bind() failure
[  804.478031][T10090] usb 6-1: USB disconnect, device number 14
[  804.631194][T20790] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4827'.
[  805.578281][T20784] udevd[20784]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  806.786235][T20784] udevd[20784]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  808.360757][T20784] udevd[20784]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  809.920269][T20784] udevd[20784]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  811.794484][T20784] udevd[20784]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  812.305678][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4844'.
[  813.185978][T20887] netlink: 'syz.2.4849': attribute type 1 has an invalid length.
[  813.200340][T20784] udevd[20784]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  813.262722][T20887] 8021q: adding VLAN 0 to HW filter on device bond15
[  814.404275][T20887] bond15: (slave veth19): Enslaving as an active interface with a down link
[  815.519509][T20887] bond15: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  815.546160][T20784] udevd[20784]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  816.743035][T20909] device syzkaller0 entered promiscuous mode
[  822.053031][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4864'.
[  822.543373][T20981] udevd[20981]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  823.861026][T20981] udevd[20981]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  824.756649][T21020] ufs: You didn't specify the type of your ufs filesystem
[  824.756649][T21020] 
[  824.756649][T21020] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  824.756649][T21020] 
[  824.756649][T21020] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  824.789360][T21020] ufs: ufstype=old is supported read-only
[  826.101696][T21020] ufs: ufs_fill_super(): bad magic number
[  826.269358][T20981] udevd[20981]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  828.148076][   T26] kauditd_printk_skb: 25 callbacks suppressed
[  828.148107][   T26] audit: type=1800 audit(2000000012.927:562): pid=21008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4882" name="bus" dev="ramfs" ino=81903 res=0 errno=0
[  831.071997][T21075] udevd[21075]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  831.325887][T21083] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  831.490028][ T9271] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  831.703939][ T9271] usb 6-1: Using ep0 maxpacket: 32
[  831.713151][ T9271] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  831.792771][ T9271] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  831.950624][ T9271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.281731][ T9271] usb 6-1: config 0 descriptor??
[  832.527691][ T9271] hub 6-1:0.0: bad descriptor, ignoring hub
[  832.533652][ T9271] hub: probe of 6-1:0.0 failed with error -5
[  832.643874][T21101] bond0: (slave wlan1): Error: Slave device does not support XDP
[  835.317914][T20575] usb 6-1: USB disconnect, device number 15
[  835.516754][T21080] udevd[21080]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  839.546134][T21080] udevd[21080]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  841.666522][   T26] audit: type=1800 audit(2000000025.392:563): pid=21200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4923" name="bus" dev="ramfs" ino=83127 res=0 errno=0
[  843.025778][ T4274] Bluetooth: min 6 > max 0
[  843.235242][ T9268] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  843.448296][ T9268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  843.708025][T21248] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4934'.
[  844.711160][ T9268] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.721129][ T9268] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  844.730216][ T9268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.775173][ T9268] usb 6-1: config 0 descriptor??
[  844.817849][ T9268] usb 6-1: can't set config #0, error -71
[  844.857438][ T9268] usb 6-1: USB disconnect, device number 16
[  844.994082][T21260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4937'.
[  845.055184][T21261] xt_TPROXY: Can be used only with -p tcp or -p udp
[  845.252838][ T4274] Bluetooth: hci1: command 0x2021 tx timeout
[  845.758624][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  848.323206][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  848.516803][T21312] netem: change failed
[  848.959330][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  848.965745][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  849.095186][T21312] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.520877][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  850.389023][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079375000: rx timeout, send abort
[  850.399485][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055160000: rx timeout, send abort
[  850.665808][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  850.939364][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079375000: abort rx timeout. Force session deactivation
[  850.951279][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055160000: abort rx timeout. Force session deactivation
[  854.347159][T21374] overlayfs: failed to clone upperpath
[  854.474126][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  854.625026][T21379] tipc: Failed to remove unknown binding: 66,0,0/4:4080843099/4080843101
[  854.634646][T21379] tipc: Failed to remove unknown binding: 66,0,0/4:4080843099/4080843100
[  854.720536][T21379] tipc: Failed to remove unknown binding: 66,0,0/4:4080843099/4080843101
[  854.729337][T21379] tipc: Failed to remove unknown binding: 66,0,0/4:4080843099/4080843100
[  857.479425][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  857.604579][T21411] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4966'.
[  858.334712][T21398] netlink: 'syz.3.4964': attribute type 2 has an invalid length.
[  858.354002][T21398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4964'.
[  859.760233][T21428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4972'.
[  861.247129][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  861.395321][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  862.497303][T21458] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4980'.
[  862.922713][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  863.971657][T21475] netlink: 'syz.2.4985': attribute type 2 has an invalid length.
[  864.120481][T21475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4985'.
[  865.902216][T21494] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4991'.
[  866.284181][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  868.758429][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  868.801972][T21520] overlayfs: failed to clone upperpath
[  868.951651][T21526] device syzkaller0 entered promiscuous mode
[  870.638401][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/171.tmp-b7:5' failed: Read-only file system
[  870.671899][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5002'.
[  870.705376][   T26] audit: type=1326 audit(2000000052.193:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  870.720172][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5002'.
[  870.758493][T21551] loop5: detected capacity change from 0 to 512
[  870.792401][   T26] audit: type=1326 audit(2000000052.193:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  870.823363][   T26] audit: type=1326 audit(2000000052.230:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  870.859073][   T26] audit: type=1326 audit(2000000052.230:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  870.891543][T21551] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  870.920469][   T26] audit: type=1326 audit(2000000052.230:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  870.988636][   T26] audit: type=1326 audit(2000000052.230:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  871.011808][T21539] netlink: 'syz.6.5001': attribute type 2 has an invalid length.
[  871.038722][T21539] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5001'.
[  871.110024][   T26] audit: type=1326 audit(2000000052.230:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  871.142027][   T26] audit: type=1326 audit(2000000052.230:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  871.297972][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/238.tmp-b7:5' failed: Read-only file system
[  871.330880][   T26] audit: type=1326 audit(2000000052.230:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  872.365267][   T26] audit: type=1326 audit(2000000052.230:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21548 comm="syz.2.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cff9cdd9 code=0x7ffc0000
[  873.464060][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'.
[  873.475866][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'.
[  874.071420][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/238.tmp-b7:5' failed: Read-only file system
[  874.183481][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/238.tmp-b7:5' failed: Read-only file system
[  875.092734][T21584] device syzkaller0 entered promiscuous mode
[  875.393118][T21232] udevd[21232]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  875.453559][T21597] netlink: 'syz.1.5017': attribute type 3 has an invalid length.
[  875.511740][ T4274] Bluetooth: hci2: unknown advertising packet type: 0x82
[  875.511797][ T4274] Bluetooth: hci2: Malformed LE Event: 0x02
[  877.980545][T21620] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.989053][T21620] 8021q: adding VLAN 0 to HW filter on device team0
[  878.348309][T21620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  880.257616][T21636] udevd[21636]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  880.452417][T21644] netlink: 277 bytes leftover after parsing attributes in process `syz.6.5025'.
[  881.274453][T21660] ptrace attach of "./syz-executor exec"[4278] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  883.368135][T21694] netlink: 'syz.3.5037': attribute type 2 has an invalid length.
[  884.109245][T21649] udevd[21649]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  885.477602][T21649] udevd[21649]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  886.354223][T21733] 8021q: adding VLAN 0 to HW filter on device bond1
[  886.398761][T21723] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5042'.
[  886.430231][T21738] netlink: 'syz.3.5046': attribute type 10 has an invalid length.
[  886.614858][T21736] bond1: (slave geneve2): Enslaving as a backup interface with an up link
[  886.635064][ T5568] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  886.847037][ T5568] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  887.417356][T21733] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  887.507947][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  887.735132][T21649] udevd[21649]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  891.159162][T21772] udevd[21772]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  891.188045][T21776] sctp: [Deprecated]: syz.6.5054 (pid 21776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  891.188045][T21776] Use struct sctp_sack_info instead
[  892.011865][T21795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5059'.
[  892.308732][T21799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5058'.
[  893.024484][T21772] udevd[21772]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  893.091994][T21804] netlink: 'syz.5.5060': attribute type 10 has an invalid length.
[  893.174411][T21804] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  893.192536][T21804] team0: Failed to send options change via netlink (err -105)
[  893.219734][T21804] team0: Port device netdevsim0 added
[  893.231872][T21798] device macvlan2 entered promiscuous mode
[  893.245418][T21798] device bond6 entered promiscuous mode
[  893.256327][T21798] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  893.271794][T21798] device bond6 left promiscuous mode
[  893.331992][T21772] udevd[21772]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  893.382209][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5063'.
[  893.502025][T21814] bridge5: port 1(erspan0) entered blocking state
[  893.508655][T21814] bridge5: port 1(erspan0) entered disabled state
[  893.599678][T21814] device erspan0 entered promiscuous mode
[  893.607117][T21814] bridge5: port 1(erspan0) entered blocking state
[  893.613693][T21814] bridge5: port 1(erspan0) entered forwarding state
[  894.120817][T21828] overlayfs: failed to clone upperpath
[  894.612084][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5069'.
[  894.752338][T21841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5073'.
[  894.846704][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5074'.
[  894.872361][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5074'.
[  895.044589][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5074'.
[  897.095619][T21861] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  897.247180][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/239.tmp-b7:5' failed: Read-only file system
[  897.298021][T21868] loop5: detected capacity change from 0 to 512
[  897.445998][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.456131][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.467423][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.477196][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.486975][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.496722][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.506534][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.516415][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.526274][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.536065][    C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.170
[  897.655430][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/240.tmp-b7:5' failed: Read-only file system
[  897.737493][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system
[  897.764014][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:5' failed: Read-only file system
[  897.863052][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/240.tmp-b7:5' failed: Read-only file system
[  897.894896][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/240.tmp-b7:5' failed: Read-only file system
[  897.957363][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/240.tmp-b7:5' failed: Read-only file system
[  898.939752][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/241.tmp-b7:5' failed: Read-only file system
[  899.098578][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/241.tmp-b7:5' failed: Read-only file system
[  899.147306][T21891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  899.227399][T21891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  899.270239][T21891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  899.397264][T21895] netlink: 'syz.6.5090': attribute type 10 has an invalid length.
[  899.514786][T21895] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  900.438973][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/241.tmp-b7:5' failed: Read-only file system
[  901.537382][T21919] loop5: detected capacity change from 0 to 512
[  901.607064][T21919] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  901.617587][T21919] EXT4-fs (loop5): invalid journal inode
[  901.650969][T21919] EXT4-fs (loop5): can't get journal size
[  901.669281][T21919] EXT4-fs (loop5): 1 truncate cleaned up
[  901.678689][T21919] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  901.929456][T21925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5100'.
[  902.662862][T20327] EXT4-fs (loop5): unmounting filesystem.
[  902.771028][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/242.tmp-b7:5' failed: Read-only file system
[  902.840671][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/242.tmp-b7:5' failed: Read-only file system
[  902.958642][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  903.329451][T21937] loop2: detected capacity change from 0 to 7
[  903.383788][T21937]  loop2:
[  903.401463][T21937] loop2: partition table partially beyond EOD, truncated
[  903.474508][T21862] udevd[21862]: symlink '../../loop2' '/dev/disk/by-diskseq/244.tmp-b7:2' failed: Read-only file system
[  903.606254][T21862] udevd[21862]: symlink '../../loop2' '/dev/disk/by-diskseq/244.tmp-b7:2' failed: Read-only file system
[  904.737261][T21862] udevd[21862]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  904.855499][T21950] udevd[21950]: symlink '../../loop2' '/dev/disk/by-diskseq/244.tmp-b7:2' failed: Read-only file system
[  905.124923][T21950] udevd[21950]: symlink '../../loop2' '/dev/disk/by-diskseq/244.tmp-b7:2' failed: Read-only file system
[  905.144965][T21950] udevd[21950]: symlink '../../loop2' '/dev/disk/by-diskseq/245.tmp-b7:2' failed: Read-only file system
[  906.158786][T21950] udevd[21950]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  906.907242][ T4274] Bluetooth: hci5: command 0x0406 tx timeout
[  908.885445][T21950] udevd[21950]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  908.988843][T21986] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  909.151624][T21950] udevd[21950]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  909.162964][    C1] net_ratelimit: 93 callbacks suppressed
[  909.162980][    C1] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  910.595796][T21950] udevd[21950]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  910.886414][T21950] udevd[21950]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  914.676939][T22029] udevd[22029]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  914.801781][T22029] udevd[22029]: symlink '../../loop5' '/dev/disk/by-diskseq/243.tmp-b7:5' failed: Read-only file system
[  915.482882][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  915.489962][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  915.668491][T22048] loop5: detected capacity change from 0 to 256
[  915.967011][T22048] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  916.860441][T22029] udevd[22029]: symlink '../../loop5' '/dev/disk/by-diskseq/246.tmp-b7:5' failed: Read-only file system
[  916.878090][   T28] INFO: task syz.9.4687:20084 blocked for more than 144 seconds.
[  916.886185][   T28]       Not tainted syzkaller #0
[  917.128507][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  917.392914][   T28] task:syz.9.4687      state:D stack:24240 pid:20084 ppid:11375  flags:0x00004004
[  917.902528][T22029] udevd[22029]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system
[  917.949436][   T28] Call Trace:
[  917.963463][   T28]  <TASK>
[  917.978490][   T28]  __schedule+0x11d1/0x40e0
[  917.996711][   T28]  ? verify_lock_unused+0x140/0x140
[  918.080837][   T28]  ? __sched_text_start+0x8/0x8
[  918.096837][   T28]  schedule+0xb9/0x180
[  918.100969][   T28]  schedule_timeout+0xbd/0x2d0
[  918.332866][   T28]  ? console_conditional_schedule+0x40/0x40
[  918.359298][   T28]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  918.373268][   T28]  ? lock_chain_count+0x20/0x20
[  918.378495][   T28]  ? _raw_spin_lock_irq+0xb7/0xf0
[  918.559154][   T28]  ? _raw_spin_lock_irqsave+0x100/0x100
[  918.644796][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  918.730573][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  918.752687][   T28]  ? wait_for_completion+0x276/0x5a0
[  918.774448][   T28]  wait_for_completion+0x2c7/0x5a0
[  918.970166][   T28]  ? io_schedule+0xd0/0xd0
[  918.974760][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  918.980029][   T28]  ? __flush_work+0x10d/0xae0
[  918.984795][   T28]  __flush_work+0x952/0xae0
[  918.989360][   T28]  ? __flush_work+0x10d/0xae0
[  918.994207][   T28]  ? flush_work+0x20/0x20
[  918.998594][   T28]  ? move_linked_works+0x250/0x250
[  919.004949][   T28]  ? lock_chain_count+0x20/0x20
[  919.010001][   T28]  ? locks_remove_file+0x377/0xec0
[  919.022788][   T28]  ? __cancel_work_timer+0x36a/0x560
[  919.037798][   T28]  __cancel_work_timer+0x3f4/0x560
[  919.043194][   T28]  ? cancel_work_sync+0x20/0x20
[  919.052253][   T28]  tls_sk_proto_close+0xc4/0x8f0
[  919.057742][   T28]  inet_release+0x139/0x180
[  919.062413][   T28]  sock_close+0xd5/0x240
[  919.066793][   T28]  ? sock_mmap+0x90/0x90
[  919.071753][   T28]  __fput+0x22c/0x920
[  919.075892][   T28]  task_work_run+0x1d0/0x260
[  919.116260][   T28]  ? task_work_cancel+0x220/0x220
[  919.142113][   T28]  ? exit_to_user_mode_loop+0x3b/0x110
[  919.171143][   T28]  exit_to_user_mode_loop+0xe6/0x110
[  919.248313][   T28]  exit_to_user_mode_prepare+0xee/0x180
[  919.345539][   T28]  syscall_exit_to_user_mode+0x16/0x40
[  919.431185][   T28]  do_syscall_64+0x58/0xa0
[  919.497677][   T28]  ? clear_bhb_loop+0x60/0xb0
[  919.570236][   T28]  ? clear_bhb_loop+0x60/0xb0
[  919.634620][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  919.663011][   T28] RIP: 0033:0x7f264c79cdd9
[  919.671696][   T28] RSP: 002b:00007fff96b3c9e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  919.680306][   T28] RAX: 0000000000000000 RBX: 00007f264ca17da0 RCX: 00007f264c79cdd9
[  919.689511][   T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  919.706411][   T28] RBP: 00007f264ca17da0 R08: 0000000000000006 R09: 0000000000000000
[  919.715026][   T28] R10: 00007f264ca17cb0 R11: 0000000000000246 R12: 00000000000b0663
[  919.728074][   T28] R13: 00007f264ca1609c R14: 00000000000b0223 R15: 00007f264ca16090
[  919.736195][   T28]  </TASK>
[  919.750107][   T28] 
[  919.750107][   T28] Showing all locks held in the system:
[  919.862995][T22067] udevd[22067]: symlink '../../loop5' '/dev/disk/by-diskseq/246.tmp-b7:5' failed: Read-only file system
[  919.877865][   T28] 1 lock held by rcu_tasks_kthre/12:
[  919.901193][   T28]  #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  919.932998][T22067] udevd[22067]: symlink '../../loop5' '/dev/disk/by-diskseq/246.tmp-b7:5' failed: Read-only file system
[  919.947212][   T28] 1 lock held by rcu_tasks_trace/13:
[  919.952553][   T28]  #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  919.963811][   T28] 3 locks held by kworker/1:0/22:
[  919.968960][   T28]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  919.979520][   T28]  #1: ffffc900001c7d00 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  919.992689][   T28]  #2: ffff888076768cd8 (&ctx->tx_lock){+.+.}-{3:3}, at: tx_work_handler+0xfd/0x1f0
[  920.002302][   T28] 1 lock held by khungtaskd/28:
[  920.007189][   T28]  #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  920.017169][   T28] 2 locks held by getty/4028:
[  920.022087][   T28]  #0: ffff88814cfa5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  920.031956][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390
[  920.042134][   T28] 5 locks held by kworker/u4:17/5577:
[  920.048124][   T28] 3 locks held by kworker/u4:23/5592:
[  920.053621][   T28] 2 locks held by kworker/1:14/7218:
[  920.058946][   T28]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  920.069468][   T28]  #1: ffffc9000501fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  920.081133][   T28] 2 locks held by kworker/u4:5/19014:
[  920.096519][   T28] 1 lock held by syz.9.4687/20084:
[  920.101677][   T28]  #0: ffff88804d5e5610 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  920.112128][   T28] 1 lock held by syz.3.5121/21997:
[  920.117416][   T28] 2 locks held by syz.6.5122/22007:
[  920.129178][   T28] 1 lock held by syz.6.5135/22054:
[  920.134343][   T28] 2 locks held by dhcpcd/22057:
[  920.139269][   T28]  #0: ffff888070f38210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  920.172432][   T28]  #1: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890
[  920.194069][   T28] 2 locks held by dhcpcd/22058:
[  920.198991][   T28]  #0: ffff888070f3a010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  920.226668][   T28]  #1: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[  920.259384][   T28] 
[  920.261950][   T28] =============================================
[  920.261950][   T28] 
[  920.279007][   T28] NMI backtrace for cpu 1
[  920.283385][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  920.290624][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  920.300706][   T28] Call Trace:
[  920.304014][   T28]  <TASK>
[  920.306977][   T28]  dump_stack_lvl+0x188/0x24e
[  920.311697][   T28]  ? irq_work_queue+0xb8/0x140
[  920.316500][   T28]  ? show_regs_print_info+0x12/0x12
[  920.321754][   T28]  ? load_image+0x400/0x400
[  920.326348][   T28]  ? vprintk_emit+0x59f/0x6a0
[  920.331076][   T28]  ? printk_sprint+0x460/0x460
[  920.335880][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[  920.340848][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  920.347030][   T28]  ? _printk+0xda/0x130
[  920.351212][   T28]  ? load_image+0x400/0x400
[  920.355743][   T28]  ? load_image+0x400/0x400
[  920.360272][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  920.366367][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  920.372450][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  920.378471][   T28]  watchdog+0xeee/0xf30
[  920.382674][   T28]  ? watchdog+0x1ed/0xf30
[  920.387025][   T28]  kthread+0x29d/0x330
[  920.391107][   T28]  ? hungtask_pm_notify+0x40/0x40
[  920.396149][   T28]  ? kthread_blkcg+0xd0/0xd0
[  920.400763][   T28]  ret_from_fork+0x1f/0x30
[  920.405239][   T28]  </TASK>
[  920.409272][   T28] Sending NMI from CPU 1 to CPUs 0:
[  920.414935][    C0] NMI backtrace for cpu 0
[  920.414945][    C0] CPU: 0 PID: 5592 Comm: kworker/u4:23 Not tainted syzkaller #0
[  920.414964][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  920.414974][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  920.415004][    C0] RIP: 0010:lockdep_hardirqs_on+0xb4/0x140
[  920.415026][    C0] Code: c7 20 11 8c 8a e8 0c 15 00 00 65 c7 05 e1 7f d4 75 01 00 00 00 4c 89 b3 80 0a 00 00 8b 83 78 0a 00 00 ff c0 89 83 78 0a 00 00 <89> 83 90 0a 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 75 6e
[  920.415041][    C0] RSP: 0018:ffffc9000e4d7a98 EFLAGS: 00000002
[  920.415055][    C0] RAX: 000000000084435d RBX: ffff888053553b80 RCX: 223b5deaa4001b00
[  920.415069][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0
[  920.415082][    C0] RBP: ffffc9000e4d7b40 R08: ffffffff90af932f R09: 1ffffffff215f265
[  920.415101][    C0] R10: dffffc0000000000 R11: fffffbfff215f266 R12: ffffffff86139163
[  920.415115][    C0] R13: ffff888053c9d500 R14: ffffffff814f6686 R15: 1ffff92001c9af58
[  920.415128][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  920.415144][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  920.415156][    C0] CR2: 00007fb2d01e9c38 CR3: 000000007bee7000 CR4: 00000000003506f0
[  920.415172][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  920.415182][    C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  920.415193][    C0] Call Trace:
[  920.415198][    C0]  <TASK>
[  920.415205][    C0]  __local_bh_enable_ip+0x136/0x1c0
[  920.415224][    C0]  ? _local_bh_enable+0xa0/0xa0
[  920.415245][    C0]  ? do_raw_spin_unlock+0x11d/0x230
[  920.415263][    C0]  ? nsim_dev_trap_report_work+0x763/0xaf0
[  920.415307][    C0]  nsim_dev_trap_report_work+0x763/0xaf0
[  920.415343][    C0]  ? process_one_work+0x7b0/0x1160
[  920.415364][    C0]  process_one_work+0x8a2/0x1160
[  920.415393][    C0]  ? worker_detach_from_pool+0x240/0x240
[  920.415417][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  920.415437][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  920.415457][    C0]  ? kthread_data+0x4b/0xc0
[  920.415487][    C0]  worker_thread+0xaa2/0x1270
[  920.415522][    C0]  kthread+0x29d/0x330
[  920.415537][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  920.415558][    C0]  ? kthread_blkcg+0xd0/0xd0
[  920.415575][    C0]  ret_from_fork+0x1f/0x30
[  920.415607][    C0]  </TASK>
[  920.708768][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  920.715776][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  920.723043][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  920.733156][   T28] Call Trace:
[  920.736481][   T28]  <TASK>
[  920.739446][   T28]  dump_stack_lvl+0x188/0x24e
[  920.744181][   T28]  ? memcpy+0x3c/0x60
[  920.748205][   T28]  ? show_regs_print_info+0x12/0x12
[  920.753453][   T28]  ? load_image+0x400/0x400
[  920.758013][   T28]  panic+0x2e5/0x730
[  920.761957][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  920.767657][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  920.772204][   T28]  ? __irq_work_queue_local+0x12c/0x190
[  920.777794][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  920.784041][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  920.790248][   T28]  watchdog+0xf2d/0xf30
[  920.794457][   T28]  ? watchdog+0x1ed/0xf30
[  920.798834][   T28]  kthread+0x29d/0x330
[  920.802935][   T28]  ? hungtask_pm_notify+0x40/0x40
[  920.808013][   T28]  ? kthread_blkcg+0xd0/0xd0
[  920.812632][   T28]  ret_from_fork+0x1f/0x30
[  920.817081][   T28]  </TASK>
[  920.820678][   T28] Kernel Offset: disabled
[  920.825030][   T28] Rebooting in 86400 seconds..