last executing test programs:

8m8.175412594s ago: executing program 1 (id=219):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)

8m7.084776741s ago: executing program 1 (id=224):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0)

8m6.680821658s ago: executing program 1 (id=228):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
r2 = fanotify_init(0x200, 0x101000)
fanotify_mark(r2, 0x1, 0x48001008, r1, 0x0)
r3 = dup(r1)
write$binfmt_elf32(r3, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x6c, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02fda16d3040d75ff1ade9eb0791cfba6ee74ae33d9777c01c6838c14"}, 0x79)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

8m6.306985812s ago: executing program 1 (id=232):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x200080, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0)
sendfile(r0, r0, 0x0, 0x3d)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0x1fffffffffe, &(0x7f0000000280))
fchmod(r0, 0x20049549e2a2d659)

8m5.855635232s ago: executing program 1 (id=235):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)

8m5.131106928s ago: executing program 1 (id=237):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

8m4.271320665s ago: executing program 32 (id=237):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

8m0.518162633s ago: executing program 3 (id=251):
syz_mount_image$ufs(&(0x7f0000000000), &(0x7f0000009e40)='./file0\x00', 0x2000480, &(0x7f0000000280)=ANY=[@ANYBLOB="6f6e6572726f723d756d6f756e742c00199a0911d44fbf6c64e63b954f0ed3a0ff8b8cec12f5dab74fde8d5ba26b8272cd079ffe4a041f12f8935aa9ed9e9979ad9edb2174ea5b2de2d69f3c8fe17c4a2cfbe2488439e23e08450e75288dd74bafe75041aa3a004a0e381cd561e83cddc354b7b2d10c0dc20e8842d9fd716a7f4f6e09936a8b633d2366781bc64cca9d21748d45061be803e06374bae7845b08e5cf9e8ac07d065988cdc686d6297e527d1f5a7cec3bc34a42107c1b7d45da0aa2ce714caa9eae55325beffc2a6e5e8f06c1aab1b04475b5dbb1a71dc7f1468b436e29fc5afefd6de8"], 0x0, 0x9e24, &(0x7f0000009e80)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

7m57.662804261s ago: executing program 3 (id=256):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0)

7m57.202543322s ago: executing program 3 (id=260):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000200)=<r2=>0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="7fc52b78670c65201bf95a6a3db85fb8ed", 0x11}], 0x1, 0x0, 0x0, 0x4}, 0x20004040)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x1}])

7m56.78202083s ago: executing program 3 (id=263):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x38000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x80000}])

7m55.56979716s ago: executing program 3 (id=268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000009ffffffffffffbbbbbbbbbbbb0806000108000604"], 0x7b)

7m54.739418324s ago: executing program 3 (id=271):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280))
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x5, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m54.195844893s ago: executing program 33 (id=271):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280))
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x5, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m23.809328652s ago: executing program 2 (id=408):
r0 = socket(0x10, 0x2, 0x0)
close(0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

7m23.295828879s ago: executing program 2 (id=412):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000002000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000010c0)=ANY=[@ANYBLOB="c1522a5a18f728c00bafd3f70800457e001c0067000008029078e000f18167f101a2"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m21.979417827s ago: executing program 2 (id=417):
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0)

7m21.700189042s ago: executing program 2 (id=421):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000300)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x4, [{0xa, 0x3, 0x8}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x28)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1])

7m21.315424087s ago: executing program 2 (id=424):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
write$binfmt_script(r1, &(0x7f0000001d80)={'#! ', './file0'}, 0xb)

7m20.780030226s ago: executing program 2 (id=426):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
close_range(r0, 0xffffffffffffffff, 0x0)

7m20.213569797s ago: executing program 34 (id=426):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
close_range(r0, 0xffffffffffffffff, 0x0)

5m20.899316181s ago: executing program 6 (id=1194):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xfff8, 0x9a8}, 0x8)

5m20.818562728s ago: executing program 6 (id=1196):
open(0x0, 0x416102, 0x164)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

5m20.519149755s ago: executing program 6 (id=1199):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x154, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@broadcast, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0x2a2, 0x80020}, 0x0, 0x0, 0xa, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e21, @in6=@mcast2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x34}}, 0x0)

5m19.731344566s ago: executing program 6 (id=1202):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@noload}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x40e, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xd)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r0, 0x6, 0x5, 0x0, 0x1b})

5m19.247227679s ago: executing program 6 (id=1206):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x8000000, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r1, 0x0, 0x20)

5m17.343009941s ago: executing program 6 (id=1210):
openat$vcsa(0xffffffffffffff9c, 0x0, 0x38002, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=")
sched_setaffinity(0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1000, 0x0, 0x4, 0x0, 0x0)
inotify_init1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0)
lseek(r0, 0xd488, 0x1)
getdents64(r0, 0x0, 0x22)

5m16.649581094s ago: executing program 35 (id=1210):
openat$vcsa(0xffffffffffffff9c, 0x0, 0x38002, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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")
sched_setaffinity(0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1000, 0x0, 0x4, 0x0, 0x0)
inotify_init1(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0)
lseek(r0, 0xd488, 0x1)
getdents64(r0, 0x0, 0x22)

4m40.534944359s ago: executing program 0 (id=1425):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = inotify_init()
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

4m40.210097178s ago: executing program 0 (id=1427):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xba98000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4)
read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020)

4m39.97166992s ago: executing program 0 (id=1430):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x4004480f, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x177, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0)

4m39.052878363s ago: executing program 0 (id=1436):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020)

4m38.715357863s ago: executing program 0 (id=1438):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc4, 0x6}}]}, 0x6c}}, 0x0)

4m37.131494826s ago: executing program 0 (id=1444):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x4d, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xf}}, 0xd, 0x7}, 0x90)

4m36.502733362s ago: executing program 36 (id=1444):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x4d, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xf}}, 0xd, 0x7}, 0x90)

4m5.728005976s ago: executing program 7 (id=1596):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x2)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)=ANY=[])

4m5.475746459s ago: executing program 7 (id=1598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000081}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

4m5.305042795s ago: executing program 7 (id=1600):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r5=>0x0})
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20)
close(r6)

4m4.867311164s ago: executing program 7 (id=1602):
setns(0xffffffffffffffff, 0x8020000)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x4208, r0)
ioprio_set$pid(0x2, r0, 0x4004)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)

4m4.167690377s ago: executing program 7 (id=1606):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020)
read(r0, &(0x7f0000000200)=""/64, 0x90)
write(r1, &(0x7f0000000340), 0x11000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getdents(r2, &(0x7f0000000640)=""/223, 0xdf)

4m2.36393887s ago: executing program 7 (id=1615):
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r0 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

4m1.752191555s ago: executing program 37 (id=1615):
syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r0 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

7.397902902s ago: executing program 8 (id=3035):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file6\x00', 0x104)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x2335}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4/file6\x00', 0x3cf923, 0x1e4)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)

7.087759669s ago: executing program 8 (id=3036):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
r1 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x20000000, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

6.573653876s ago: executing program 4 (id=3038):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x2)

6.326479307s ago: executing program 4 (id=3040):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x10000040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r0, r2, 0x0, 0x20000000000006)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000400)='}w', 0x2}], 0x1, 0x5)

6.218406407s ago: executing program 8 (id=3041):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010280)=@gettaction={0x14, 0x32, 0x300, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@delneigh={0x1c, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8, 0x14, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2010)

6.076320349s ago: executing program 4 (id=3042):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}, {0x0, 0x0, 0x2}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x4}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

5.755598838s ago: executing program 4 (id=3043):
socket(0x10, 0x803, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ioprio_set$pid(0x2, 0x0, 0x4007)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.284040259s ago: executing program 9 (id=3050):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x20)
splice(r2, 0x0, r1, 0x0, 0x80, 0x2)
write(r0, 0x0, 0x0)

3.984718566s ago: executing program 9 (id=3052):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffdfffe, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x74, r2, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast}, 0x1fffffffffffffe, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x74}}, 0x0)

3.282452058s ago: executing program 8 (id=3056):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
close_range(r0, 0xffffffffffffffff, 0x0)

3.15389356s ago: executing program 5 (id=3057):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x16}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2)

3.134021151s ago: executing program 9 (id=3065):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000006c0)={r4, 0x2}, 0x8)

3.132635681s ago: executing program 4 (id=3058):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0)

3.04262224s ago: executing program 9 (id=3059):
r0 = fanotify_init(0x1a, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r0, 0x249, 0x40000038, r2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3.040706269s ago: executing program 5 (id=3060):
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040031)
openat(0xffffffffffffff9c, 0x0, 0x20440, 0x40)
fanotify_mark(0xffffffffffffffff, 0x11, 0x1010, 0xffffffffffffff9c, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.893568653s ago: executing program 5 (id=3061):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x8000)
read$alg(r2, &(0x7f0000000000)=""/35, 0x23)

2.892785353s ago: executing program 9 (id=3062):
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.820446678s ago: executing program 8 (id=3063):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
getresuid(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
pipe2(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020)
write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb)
tee(r3, r2, 0x9, 0x8)

1.789195501s ago: executing program 9 (id=3064):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010280)=@gettaction={0x14, 0x32, 0x300, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@delneigh={0x1c, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8, 0x14, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2010)

1.616840196s ago: executing program 5 (id=3066):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0xf00, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
fanotify_mark(r2, 0x1, 0x10001043, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2)

1.401761486s ago: executing program 5 (id=3067):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1)

1.359963789s ago: executing program 8 (id=3068):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
recvmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'})
recvfrom$inet6(r1, 0x0, 0x0, 0x2042, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)

754.529893ms ago: executing program 4 (id=3069):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0022, r3})

0s ago: executing program 5 (id=3070):
open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

ation on journal
[  295.457143][T10286] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  296.010396][T10318] loop7: detected capacity change from 0 to 8192
[  296.242794][ T6510] ocfs2: Unmounting device (7,4) on (node local)
[  296.345593][T10062] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  296.374934][T10062] FAT-fs (loop7): Filesystem has been set read-only
[  300.532933][ T5837] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  300.610036][T10390] loop0: detected capacity change from 0 to 32768
[  300.689035][T10390] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  300.762953][ T5837] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  300.782905][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.791215][ T5837] usb 8-1: Product: syz
[  300.831885][ T5837] usb 8-1: Manufacturer: syz
[  300.847046][T10390] XFS (loop0): Ending clean mount
[  300.864036][ T5837] usb 8-1: SerialNumber: syz
[  300.914673][T10390] XFS (loop0): Quotacheck needed: Please wait.
[  301.047760][T10390] XFS (loop0): Quotacheck: Done.
[  301.187206][ T5837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  301.224122][ T5837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  301.409640][T10389] netlink: 'syz.0.1284': attribute type 15 has an invalid length.
[  301.423083][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'.
[  301.486914][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  301.593941][ T5779] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  301.848057][ T5779] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  301.860074][ T5779] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  301.905299][ T5779] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  301.919238][ T5779] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  301.951494][ T5779] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  301.975067][ T5779] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  301.989594][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  302.013189][ T5779] usb 5-1: Product: syz
[  302.017500][ T5779] usb 5-1: Manufacturer: syz
[  302.058876][ T5779] cdc_wdm 5-1:1.0: skipping garbage
[  302.087901][ T5779] cdc_wdm 5-1:1.0: skipping garbage
[  302.112629][ T5779] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  302.121867][ T5779] cdc_wdm 5-1:1.0: Unknown control protocol
[  302.298980][ T5837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71
[  302.324355][ T5837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  302.359485][ T5837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  302.395189][ T5837] lan78xx: probe of 8-1:1.0 failed with error -71
[  302.402121][ T5779] usb 5-1: USB disconnect, device number 7
[  302.523734][ T5837] usb 8-1: USB disconnect, device number 2
[  303.268643][T10466] overlayfs: failed to resolve './cgroup': -2
[  303.416662][T10468] overlayfs: failed to clone upperpath
[  304.053568][T10493] binder: 10492:10493 ioctl 4018620d 0 returned -22
[  304.473900][T10512] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.1321'.
[  304.513996][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1321'.
[  304.544545][T10505] loop0: detected capacity change from 0 to 8192
[  305.156055][T10527] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  305.951373][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'.
[  307.263711][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1346'.
[  307.377280][T10576] mmap: syz.7.1347 (10576): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  307.872281][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1349'.
[  308.360996][T10570] netlink: 'syz.5.1345': attribute type 15 has an invalid length.
[  308.402935][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1345'.
[  309.233347][ T7601] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  309.408721][T10592] loop7: detected capacity change from 0 to 40427
[  309.453427][T10592] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  309.472585][ T7601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.484945][T10592] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  309.508263][ T7601] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  309.518771][T10592] F2FS-fs (loop7): build fault injection attr: rate: 17008, type: 0x7ffff
[  309.528662][ T7601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.537314][T10592] F2FS-fs (loop7): LFS is not compatible with checkpoint=disable
[  309.561779][ T7601] usb 5-1: config 0 descriptor??
[  309.831461][ T7601] usbhid 5-1:0.0: can't add hid device: -71
[  309.840794][ T7601] usbhid: probe of 5-1:0.0 failed with error -71
[  309.875850][ T7601] usb 5-1: USB disconnect, device number 8
[  310.245145][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1360'.
[  310.523221][ T7601] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  310.742980][ T7601] usb 5-1: Using ep0 maxpacket: 32
[  310.778807][ T7601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.819328][ T7601] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  310.859216][ T7601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.894050][ T7601] usb 5-1: config 0 descriptor??
[  310.924851][ T7601] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  310.957919][ T7601] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  311.027896][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1362'.
[  311.455675][ T5779] usb 5-1: USB disconnect, device number 9
[  311.473357][ T5779] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  313.269035][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1379'.
[  313.332360][T10710] loop7: detected capacity change from 0 to 2048
[  313.376576][T10710] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  313.405777][T10710] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  313.437600][T10710] UDF-fs: Scanning with blocksize 512 failed
[  313.506915][T10710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  314.297095][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1386'.
[  315.220550][T10761] overlayfs: failed to clone upperpath
[  315.628778][T10772] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1395'.
[  316.763364][ T5837] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  316.816934][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1404'.
[  316.976656][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.011116][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.030907][ T5837] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  317.054996][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.072965][ T5837] usb 8-1: config 0 descriptor??
[  317.279514][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0c24
[  317.502761][ T5837] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  317.550963][ T5837] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[  317.629169][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.635819][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  317.695505][ T5837] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE
[  317.859287][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'.
[  318.317376][T10798] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38
[  318.363729][ T5837] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71
[  318.407991][ T5837] usb 8-1: USB disconnect, device number 3
[  319.509402][T10882] loop7: detected capacity change from 0 to 512
[  319.529326][T10882] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  319.579366][T10882] EXT4-fs (loop7): 1 truncate cleaned up
[  319.591096][T10882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.869324][T10062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.298637][T10908] xt_hashlimit: max too large, truncated to 1048576
[  320.911080][T10930] loop0: detected capacity change from 0 to 16
[  320.936804][T10930] erofs: (device loop0): mounted with root inode @ nid 36.
[  321.570731][T10919] loop4: detected capacity change from 0 to 32768
[  321.632745][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  321.632764][   T28] audit: type=1326 audit(1771398255.181:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10933 comm="syz.5.1439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bd359c629 code=0x0
[  322.453162][  T787] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  322.473181][   T12] tipc: Left network mode
[  322.663506][  T787] usb 8-1: Using ep0 maxpacket: 32
[  322.683747][  T787] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  322.701891][  T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.729889][  T787] usb 8-1: config 0 descriptor??
[  322.770743][  T787] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  324.427083][   T12] hsr_slave_0: left promiscuous mode
[  324.427783][  T787] gspca_vc032x: reg_w err -71
[  324.455109][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.469780][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.490978][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.491056][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.506207][   T12] hsr_slave_1: left promiscuous mode
[  324.512235][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.521065][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.528263][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.533991][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.541125][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.548932][   T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  324.554560][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.561491][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.568351][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.590615][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.609799][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.618773][   T12] bridge_slave_1: left allmulticast mode
[  324.627496][   T12] bridge_slave_1: left promiscuous mode
[  324.633502][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.647829][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.651943][   T12] bridge_slave_0: left allmulticast mode
[  324.658935][   T12] bridge_slave_0: left promiscuous mode
[  324.665844][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.671220][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.697404][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.723871][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.767662][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.799526][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.809689][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.817269][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.823096][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.828616][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.837566][  T787] gspca_vc032x: I2c Bus Busy Wait 00
[  324.846010][  T787] gspca_vc032x: Unknown sensor...
[  324.851299][  T787] vc032x: probe of 8-1:0.0 failed with error -22
[  324.910201][  T787] usb 8-1: USB disconnect, device number 4
[  325.793473][ T5774] Bluetooth: hci3: command 0x0406 tx timeout
[  326.361346][   T12] team0 (unregistering): Port device team_slave_1 removed
[  326.457467][   T12] team0 (unregistering): Port device team_slave_0 removed
[  326.665549][ T5777] Bluetooth: hci0: command tx timeout
[  327.579925][T11008] netlink: 'syz.4.1456': attribute type 12 has an invalid length.
[  328.337998][   T12] IPVS: stop unused estimator thread 0...
[  328.614173][T10970] chnl_net:caif_netlink_parms(): no params data found
[  328.753336][ T2194] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  328.753976][ T5777] Bluetooth: hci0: command tx timeout
[  328.881043][T10970] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.899938][T10970] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.907892][T10970] bridge_slave_0: entered allmulticast mode
[  328.916967][T10970] bridge_slave_0: entered promiscuous mode
[  328.935112][T10970] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.955424][ T2194] usb 8-1: config 0 has an invalid interface number: 111 but max is 0
[  328.964498][T10970] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.971877][T10970] bridge_slave_1: entered allmulticast mode
[  328.982900][ T2194] usb 8-1: config 0 has no interface number 0
[  328.997653][ T2194] usb 8-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96
[  329.014631][T10970] bridge_slave_1: entered promiscuous mode
[  329.023266][ T2194] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.059727][ T2194] usb 8-1: config 0 descriptor??
[  329.088503][ T2194] gspca_main: ov534_9-2.14.0 probing 05a9:8065
[  329.134401][T10970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.152432][T10970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.207554][T10970] team0: Port device team_slave_0 added
[  329.219907][T10970] team0: Port device team_slave_1 added
[  329.261953][T10970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.269491][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.300486][T10970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.327921][T10970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.344917][T10970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.371406][T10970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.473388][T10970] hsr_slave_0: entered promiscuous mode
[  329.480286][T10970] hsr_slave_1: entered promiscuous mode
[  329.487213][T10970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.496476][T10970] Cannot create hsr debugfs directory
[  329.766718][T10970] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  329.784070][T10970] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  329.796761][T10970] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  329.817797][T10970] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  330.058611][T10970] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.125350][T10970] 8021q: adding VLAN 0 to HW filter on device team0
[  330.155608][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.162900][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.187253][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.194513][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.579023][T10970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.746318][ T2194] gspca_ov534_9: reg_r err -71
[  330.823122][ T5777] Bluetooth: hci0: command tx timeout
[  331.103004][ T2194] gspca_ov534_9: Unknown sensor 0000
[  331.103116][ T2194] ov534_9: probe of 8-1:0.111 failed with error -22
[  331.149187][ T2194] usb 8-1: USB disconnect, device number 5
[  331.158639][T10970] veth0_vlan: entered promiscuous mode
[  331.195617][T10970] veth1_vlan: entered promiscuous mode
[  331.262225][T10970] veth0_macvtap: entered promiscuous mode
[  331.270337][T11111] overlayfs: failed to clone lowerpath
[  331.279284][T10970] veth1_macvtap: entered promiscuous mode
[  331.336330][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.373250][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.396835][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.422919][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.445537][T10970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.491426][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.513771][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.530891][T10970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.541510][T10970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.560434][T10970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.585841][T10970] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.596174][T10970] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.611172][T10970] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.620555][T10970] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.774886][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.793603][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.842408][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.852433][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.000162][   T28] audit: type=1326 audit(1771398265.551:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  332.066714][   T28] audit: type=1326 audit(1771398265.581:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  332.107279][   T28] audit: type=1326 audit(1771398265.581:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  332.223707][   T28] audit: type=1326 audit(1771398265.581:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  332.260416][   T28] audit: type=1326 audit(1771398265.581:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  332.366365][   T28] audit: type=1326 audit(1771398265.591:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  332.397167][T11131] loop8: detected capacity change from 0 to 2048
[  332.445351][   T28] audit: type=1326 audit(1771398265.651:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  332.523084][T11139] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1479'.
[  332.535693][   T28] audit: type=1326 audit(1771398265.651:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feade19c392 code=0x7ffc0000
[  332.670738][   T28] audit: type=1326 audit(1771398265.651:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feade19c427 code=0x7ffc0000
[  332.777500][   T28] audit: type=1326 audit(1771398265.651:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.8.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feade159391 code=0x7ffc0000
[  332.903706][ T5777] Bluetooth: hci0: command tx timeout
[  332.998988][T11153] loop7: detected capacity change from 0 to 256
[  333.017286][T11153] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  334.525721][T11176] loop7: detected capacity change from 0 to 512
[  334.559833][T11176] EXT4-fs: Ignoring removed mblk_io_submit option
[  334.613066][T11176] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  334.836086][T11176] EXT4-fs error (device loop7): ext4_orphan_get:1424: comm syz.7.1489: bad orphan inode 16
[  334.873161][T11176] ext4_test_bit(bit=15, block=4) = 0
[  334.878549][T11176] EXT4-fs (loop7): 1 orphan inode deleted
[  334.904699][T11176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.004924][T11176] EXT4-fs error (device loop7): __ext4_new_inode:1075: comm syz.7.1489: reserved inode found cleared - inode=9
[  335.169125][T10062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.831072][T11201] loop8: detected capacity change from 0 to 128
[  335.922768][T11201] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  336.070237][T11201] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.121161][T11208] loop4: detected capacity change from 0 to 256
[  336.279653][T11208] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  336.341347][T11208] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  336.428492][T11208] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  336.659051][T10970] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  336.839622][T11208] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  336.905207][T11208] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  336.947633][T11208] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  336.960920][T11208] syz.4.1491 (11208) used greatest stack depth: 20464 bytes left
[  338.777414][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1500'.
[  340.303196][ T8265] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  340.548750][ T8265] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  340.599249][ T8265] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.671207][ T8265] usb 9-1: config 0 descriptor??
[  341.203995][T11321] tipc: Started in network mode
[  341.208956][T11321] tipc: Node identity 1a7233c823f2, cluster identity 4711
[  341.257408][T11321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.395156][T11321] syzkaller0: entered promiscuous mode
[  341.402429][T11321] syzkaller0: entered allmulticast mode
[  341.432513][T11321] tipc: Resetting bearer <eth:syzkaller0>
[  341.661582][T11320] tipc: Resetting bearer <eth:syzkaller0>
[  342.621724][   T28] kauditd_printk_skb: 65 callbacks suppressed
[  342.621773][   T28] audit: type=1326 audit(1771398276.171:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.5.1525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bd359c629 code=0x0
[  342.660802][ T8265] usb 9-1: Cannot set autoneg
[  342.669879][ T8265] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71
[  342.703691][ T8265] usb 9-1: USB disconnect, device number 2
[  343.597241][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'.
[  346.922044][T11320] tipc: Disabling bearer <eth:syzkaller0>
[  346.993161][ T5858] tipc: Node number set to 964703176
[  348.316586][T11404] batadv_slave_1: entered promiscuous mode
[  348.326332][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'.
[  348.432531][T11404] batadv_slave_1 (unregistering): left promiscuous mode
[  348.450210][T11404] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.937652][T11415] syz_tun: entered allmulticast mode
[  348.986255][T11414] syz_tun: left allmulticast mode
[  350.775769][T11473] overlayfs: failed to clone lowerpath
[  350.804972][T11473] overlayfs: failed to clone lowerpath
[  351.114930][T11481] loop7: detected capacity change from 0 to 2048
[  351.139838][T11481] UDF-fs: bad mount option "gid=Ѧ��C���e��e؄�X@06.��m�kshִ��H釉��$a�֖4#VP��Uh�P���hoa�G {W;�1E�e���𹾆�LN�y�3000000000000000000040x0000000000000003" or missing value
[  351.341371][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1575'.
[  351.981143][T11503] loop4: detected capacity change from 0 to 2048
[  352.033440][T11503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.076282][T11503] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.321296][T11503] fs-verity: sha512 using implementation "sha512-avx2"
[  352.630273][ T6510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.930352][   T23] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  354.132916][   T23] usb 9-1: Using ep0 maxpacket: 16
[  354.145191][   T23] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.166612][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  354.183311][   T23] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  354.194394][   T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.213553][   T23] usb 9-1: config 0 descriptor??
[  354.655753][   T23] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0
[  354.706569][   T23] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0
[  354.729498][   T23] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0
[  354.761337][   T23] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0
[  354.789399][   T23] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0
[  354.826184][   T23] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[  354.919143][    C1] usb 9-1: input irq status -75 received
[  355.178187][ T7690] usb 9-1: USB disconnect, device number 3
[  355.239815][T11571] loop7: detected capacity change from 0 to 128
[  355.346348][T11571] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.474163][T11571] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  355.737401][T10062] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  355.772260][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1604'.
[  355.832682][T10062] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  355.872678][T11587] bond3: entered promiscuous mode
[  355.878378][T10062] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  355.894295][T11587] 8021q: adding VLAN 0 to HW filter on device bond3
[  355.909911][T10062] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  355.931500][T10062] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  355.957711][T10062] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  356.001326][T10062] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  356.043323][T10062] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  356.133142][T10062] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  356.151749][T10062] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  356.188118][T11587] IPv6: sit1: Disabled Multicast RS
[  356.230072][T11587] 8021q: adding VLAN 0 to HW filter on device bond3
[  356.249299][T11587] bond3: (slave sit1): The slave device specified does not support setting the MAC address
[  356.318311][T11587] bond3: (slave sit1): Error -95 calling set_mac_address
[  356.639649][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'.
[  357.099456][T11621] loop8: detected capacity change from 0 to 512
[  357.150859][T11621] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.8.1613: corrupted xattr block 95: invalid header
[  357.170982][T11621] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm syz.8.1613: bg 0: block 7: invalid block bitmap
[  357.193722][T11621] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6653: Corrupt filesystem
[  357.213973][T11621] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2969: inode #11: comm syz.8.1613: corrupted xattr block 95: invalid header
[  357.238567][T11621] EXT4-fs warning (device loop8): ext4_evict_inode:272: xattr delete (err -117)
[  357.249629][T11621] EXT4-fs (loop8): 1 orphan inode deleted
[  357.256475][T11621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.419016][T11584] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.590684][T10970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.955794][T11656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  359.154269][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.174305][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.186541][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.206203][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.217594][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  359.227080][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.958473][T11667] chnl_net:caif_netlink_parms(): no params data found
[  360.287189][T11667] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.303746][T11667] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.336460][T11667] bridge_slave_0: entered allmulticast mode
[  360.354237][T11667] bridge_slave_0: entered promiscuous mode
[  360.366209][T11667] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.393253][T11667] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.400634][T11667] bridge_slave_1: entered allmulticast mode
[  360.437544][T11667] bridge_slave_1: entered promiscuous mode
[  360.590621][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.646112][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.921671][T11667] team0: Port device team_slave_0 added
[  360.971278][T11667] team0: Port device team_slave_1 added
[  361.188201][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.220833][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.272873][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.305524][ T5774] Bluetooth: hci2: command tx timeout
[  361.316743][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.324262][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.351274][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.419103][T11667] hsr_slave_0: entered promiscuous mode
[  361.435733][T11667] hsr_slave_1: entered promiscuous mode
[  361.467705][T11667] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.503446][T11667] Cannot create hsr debugfs directory
[  361.726238][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1635'.
[  361.829550][T11725] vlan2: entered allmulticast mode
[  361.885790][T11725] bond1: entered allmulticast mode
[  362.658036][T11667] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  362.696687][T11667] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  362.763430][T11749] loop8: detected capacity change from 0 to 512
[  362.775906][T11667] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  362.853921][T11749] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  362.884053][T11667] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  362.910776][T11749] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  362.975349][T11749] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1640: Corrupt directory, running e2fsck is recommended
[  363.064693][T11749] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  363.123193][T11749] EXT4-fs error (device loop8): ext4_iget_extra_inode:4732: inode #15: comm syz.8.1640: corrupted in-inode xattr: e_name out of bounds
[  363.182124][T11749] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.1640: couldn't read orphan inode 15 (err -117)
[  363.209721][T11749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.286516][T11749] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  363.299134][T11667] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.333567][T11749] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  363.369825][T11749] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1640: Corrupt directory, running e2fsck is recommended
[  363.383155][ T5774] Bluetooth: hci2: command tx timeout
[  363.397931][T11667] 8021q: adding VLAN 0 to HW filter on device team0
[  363.406441][T11771] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  363.456409][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.463657][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.473216][T11771] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  363.525620][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.532933][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.540704][T11771] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1640: Corrupt directory, running e2fsck is recommended
[  363.573012][T11749] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  363.639988][T11749] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it
[  363.653794][T11749] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1640: Corrupt directory, running e2fsck is recommended
[  363.695380][T11772] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  363.915559][T10970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.941255][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1643'.
[  364.246519][T11787] loop8: detected capacity change from 0 to 1024
[  364.285062][T11787] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  364.329545][T11667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.390357][T11787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.543878][T11787] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1644: missing EA_INODE flag
[  364.605894][T11787] EXT4-fs (loop8): Remounting filesystem read-only
[  364.740390][T10970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.021064][T11811] loop4: detected capacity change from 0 to 512
[  365.084837][T11811] FAT-fs (loop4): Unrecognized mount option "umask=00000000000000000000stale_rw" or missing value
[  365.214993][T11811] overlayfs: failed to clone upperpath
[  365.463404][ T5774] Bluetooth: hci2: command tx timeout
[  365.472096][T11667] veth0_vlan: entered promiscuous mode
[  365.499583][T11667] veth1_vlan: entered promiscuous mode
[  365.624694][T11667] veth0_macvtap: entered promiscuous mode
[  365.652710][T11667] veth1_macvtap: entered promiscuous mode
[  365.661862][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1651'.
[  365.701118][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.753356][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.784264][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.835559][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.853167][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.874728][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.897457][T11667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.952726][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.002909][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.042894][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.061041][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.090119][T11667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.125174][T11667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.171122][T11667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.207253][T11667] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.253015][T11667] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.261881][T11667] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.282901][T11667] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.299368][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1654'.
[  366.377214][T11835] 8021q: adding VLAN 0 to HW filter on device bond3
[  366.518613][T11836] macvlan2: entered promiscuous mode
[  366.549421][T11836] macvlan2: entered allmulticast mode
[  366.573449][T11836] bond3: entered promiscuous mode
[  366.579389][T11836] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  366.592349][T11836] bond3: left promiscuous mode
[  366.850193][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.869530][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.955014][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.964334][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.037220][T11847] netlink: 'syz.4.1657': attribute type 1 has an invalid length.
[  367.124337][T11847] bond4: entered promiscuous mode
[  367.129462][T11847] bond4: entered allmulticast mode
[  367.135500][T11847] 8021q: adding VLAN 0 to HW filter on device bond4
[  367.271893][T11847] erspan2: entered allmulticast mode
[  367.289981][T11847] bond4: (slave erspan2): making interface the new active one
[  367.341673][T11847] erspan2: entered promiscuous mode
[  367.366163][T11847] bond4: (slave erspan2): Enslaving as an active interface with an up link
[  367.414017][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'.
[  367.543487][ T5774] Bluetooth: hci2: command tx timeout
[  367.551324][T11857] bond4: left promiscuous mode
[  367.551771][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1659'.
[  367.582336][T11857] erspan2: left promiscuous mode
[  367.588282][T11857] bond4: left allmulticast mode
[  367.621815][T11847] syz.4.1657 (11847) used greatest stack depth: 18536 bytes left
[  367.957188][T11873] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  369.328932][T11900] netlink: 'syz.9.1671': attribute type 12 has an invalid length.
[  370.550274][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1676'.
[  371.136339][T11923] overlayfs: upper fs does not support file handles, falling back to index=off.
[  371.477632][T11935] netlink: 'syz.9.1681': attribute type 15 has an invalid length.
[  371.948748][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'.
[  373.270579][T11959] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1691'.
[  373.421787][T11959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.481442][T11959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.534248][T11959] bond0 (unregistering): Released all slaves
[  373.591408][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1692'.
[  373.610580][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1692'.
[  373.936575][T11983] bridge1: entered allmulticast mode
[  373.959391][T11983] team0: Failed to send options change via netlink (err -105)
[  373.967158][T11983] team0: Port device bridge1 added
[  378.952447][T12040] kvm: pic: non byte write
[  379.068706][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  379.079817][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.334789][T12043] loop8: detected capacity change from 0 to 1024
[  379.360196][T12043] EXT4-fs: Ignoring removed bh option
[  379.383061][T12043] EXT4-fs: Ignoring removed nobh option
[  379.430955][T12043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  379.478365][T12043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.001169][T12043] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4047: comm syz.8.1720: Allocating blocks 497-513 which overlap fs metadata
[  380.024029][T12043] EXT4-fs (loop8): pa ffff88805c6893a0: logic 256, phys. 385, len 8
[  380.033074][T12043] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1
[  380.199662][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1725'.
[  380.248131][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1725'.
[  380.629347][T10970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.680393][T12089] loop2: detected capacity change from 0 to 7
[  381.699283][T12089]  loop2:
[  381.702644][T12089] loop2: partition table partially beyond EOD, truncated
[  381.812738][T12078] cgroup: fork rejected by pids controller in /syz9
[  382.172314][ T7601] IPVS: starting estimator thread 0...
[  382.283129][T12135] IPVS: using max 17 ests per chain, 40800 per kthread
[  382.526955][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1749'.
[  383.311924][   T28] audit: type=1800 audit(1771398316.861:143): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1753" name="file2" dev="overlay" ino=172 res=0 errno=0
[  384.808082][T12180] netlink: 'syz.9.1760': attribute type 10 has an invalid length.
[  384.818304][T12180] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.825796][T12180] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.881771][T12180] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.889128][T12180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.896752][T12180] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.904254][T12180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.930533][T12180] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  385.086948][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1761'.
[  385.498605][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1764'.
[  385.598042][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1764'.
[  386.310233][T12211] bridge0: port 3(syz_tun) entered blocking state
[  386.319188][T12211] bridge0: port 3(syz_tun) entered disabled state
[  386.331720][T12211] syz_tun: entered allmulticast mode
[  386.348450][T12211] syz_tun: entered promiscuous mode
[  386.584026][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'.
[  386.622663][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'.
[  386.636619][ T5774] Bluetooth: hci0: hcon ffff888057a48000 sent 1 < count 32780
[  386.648814][T12225] Bluetooth: MGMT ver 1.22
[  386.672002][T12225] Bluetooth: hci0: unsupported parameter 32780
[  386.689004][T12225] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  387.479174][T12243] loop9: detected capacity change from 0 to 128
[  387.531084][T12243] EXT4-fs: Ignoring removed nobh option
[  387.533071][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1784'.
[  387.604322][T12243] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  387.650119][T12243] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  387.941580][T11667] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  388.148906][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'.
[  388.220599][T12264] loop9: detected capacity change from 0 to 512
[  388.260457][T12264] EXT4-fs (loop9): 1 truncate cleaned up
[  388.267777][T12264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.447161][   T28] audit: type=1800 audit(1771398322.001:144): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1791" name="file1" dev="loop9" ino=13 res=0 errno=0
[  388.449283][T12264] fs-verity (loop9, inode 13): Unsupported log_blocksize: 12
[  388.575300][T11667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.427154][T12292] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1802'.
[  390.452360][T12292] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1802'.
[  390.871972][T12286] loop4: detected capacity change from 0 to 40427
[  390.900305][T12286] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  390.927309][T12286] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  390.947632][T12286] F2FS-fs (loop4): Found nat_bits in checkpoint
[  391.015335][T12286] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  391.022688][T12286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  391.339567][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1804'.
[  391.380477][T12300] 8021q: adding VLAN 0 to HW filter on device bond2
[  391.444847][T12300] macsec1: entered promiscuous mode
[  391.450292][T12300] bond2: entered promiscuous mode
[  391.465276][T12300] bond2: left promiscuous mode
[  391.829093][T12307] overlayfs: failed to clone upperpath
[  392.552438][T12309] lo: entered promiscuous mode
[  392.563011][T12309] lo: entered allmulticast mode
[  394.622531][   T28] audit: type=1326 audit(1771398328.171:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12361 comm="syz.4.1827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4cf59c629 code=0x0
[  395.203196][T12374] io-wq is not configured for unbound workers
[  396.738925][   T28] audit: type=1326 audit(1771398330.281:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc79c629 code=0x7ffc0000
[  396.781813][   T28] audit: type=1326 audit(1771398330.281:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc79c629 code=0x7ffc0000
[  396.806062][   T28] audit: type=1326 audit(1771398330.281:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc79c629 code=0x7ffc0000
[  396.901917][   T28] audit: type=1326 audit(1771398330.281:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33cc79c629 code=0x7ffc0000
[  396.991585][   T28] audit: type=1326 audit(1771398330.281:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc79c629 code=0x7ffc0000
[  397.075460][   T28] audit: type=1326 audit(1771398330.281:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc79c629 code=0x7ffc0000
[  397.167330][   T28] audit: type=1326 audit(1771398330.281:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f33cc75cece code=0x7ffc0000
[  397.181268][T12400] loop9: detected capacity change from 0 to 256
[  397.244915][   T28] audit: type=1326 audit(1771398330.291:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f33cc75cece code=0x7ffc0000
[  397.310883][   T28] audit: type=1326 audit(1771398330.331:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12394 comm="syz.9.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f33cc75cece code=0x7ffc0000
[  397.400879][T12400] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  397.462708][T12391] cgroup: fork rejected by pids controller in /syz5
[  397.856012][T12434] netlink: 'syz.5.1844': attribute type 39 has an invalid length.
[  398.698553][T12450] netlink: 'syz.8.1849': attribute type 1 has an invalid length.
[  398.829809][T12450] 8021q: adding VLAN 0 to HW filter on device bond3
[  398.924523][T12453] bond3: (slave veth3): Enslaving as an active interface with a down link
[  399.013693][T12456] veth0_virt_wifi: entered promiscuous mode
[  399.104231][T12456] bond3: (slave veth0_virt_wifi): making interface the new active one
[  399.115743][T12456] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  399.646621][T12476] loop8: detected capacity change from 0 to 128
[  399.681484][T12476] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  399.979480][T12481] netlink: 'syz.4.1859': attribute type 1 has an invalid length.
[  400.039953][T12481] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.181428][T12488] bond0: (slave veth19): Enslaving as an active interface with a down link
[  400.217359][T12491] netlink: 'syz.4.1859': attribute type 10 has an invalid length.
[  400.231202][T12491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1859'.
[  400.242145][T12491] dummy0: entered promiscuous mode
[  400.254796][T12491] batman_adv: batadv0: Interface deactivated: dummy0
[  400.261655][T12491] batman_adv: batadv0: Removing interface: dummy0
[  400.281227][T12481] dummy0: left promiscuous mode
[  400.307973][T12481] bond0: (slave dummy0): making interface the new active one
[  400.330721][T12481] dummy0: entered promiscuous mode
[  400.337070][T12481] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  400.365858][T12492] gretap1: entered promiscuous mode
[  401.724728][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1875'.
[  401.756411][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1875'.
[  401.800373][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1875'.
[  401.825671][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1875'.
[  401.837664][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1875'.
[  405.616686][T12530] Set syz1 is full, maxelem 65536 reached
[  406.237280][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  406.237296][   T28] audit: type=1326 audit(1771398339.791:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12567 comm="syz.5.1893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bd359c629 code=0x0
[  407.136486][T12591] netlink: 'syz.5.1902': attribute type 9 has an invalid length.
[  407.147802][T12591] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1902'.
[  407.249502][T12591] netlink: 'syz.5.1902': attribute type 9 has an invalid length.
[  407.270928][T12591] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1902'.
[  408.614327][T12610] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.807127][T12610] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.015735][T12610] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.242489][T12610] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.431117][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1916'.
[  409.555051][T12628] 8021q: adding VLAN 0 to HW filter on device bond4
[  409.571724][T12626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1916'.
[  409.620432][T12626] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  409.710723][T12610] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.756731][T12610] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.821753][T12610] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.914855][T12610] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.764241][T12660] bond3: entered allmulticast mode
[  410.771465][T12659] bond3: left allmulticast mode
[  411.143011][ T7601] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  411.253922][   T23] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  411.326135][ T7601] usb 5-1: config 0 has no interfaces?
[  411.331732][ T7601] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  411.363394][ T7601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.385876][ T7601] usb 5-1: config 0 descriptor??
[  411.401340][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1935'.
[  411.449529][T12674] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1935'.
[  411.452926][   T23] usb 9-1: Using ep0 maxpacket: 16
[  411.486618][   T23] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.529911][   T23] usb 9-1: config 0 has no interfaces?
[  411.535809][   T23] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  411.567468][   T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.585500][   T23] usb 9-1: config 0 descriptor??
[  411.717921][ T5779] usb 5-1: USB disconnect, device number 10
[  411.806667][T12686] overlayfs: failed to clone upperpath
[  411.821200][T12668] 9pnet: p9_errstr2errno: server reported unknown error �@�L��	00000000000000000008
[  411.858652][    T8] usb 9-1: USB disconnect, device number 4
[  411.956484][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1941'.
[  411.977594][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1941'.
[  411.994546][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1941'.
[  412.007138][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1941'.
[  412.090390][T12693] ref_ctr increment failed for inode: 0x1d1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88804c0c1300
[  412.099988][   T23] IPVS: starting estimator thread 0...
[  412.203176][T12696] IPVS: using max 17 ests per chain, 40800 per kthread
[  412.275715][   T11] dummy0: left promiscuous mode
[  412.439805][T12704] loop4: detected capacity change from 0 to 4096
[  412.465672][T12704] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  412.589904][T12704] ntfs: volume version 3.1.
[  412.611004][T12710] gretap1: entered promiscuous mode
[  414.134987][T12726] loop8: detected capacity change from 0 to 4096
[  414.654821][T12735] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  414.677139][T12726] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  414.708015][T12734] tipc: Started in network mode
[  414.731449][T12734] tipc: Node identity 92864212391c, cluster identity 4711
[  414.795586][T12734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.847385][T12726] Remounting filesystem read-only
[  415.130217][T12736] syzkaller0: entered promiscuous mode
[  415.146668][T12736] syzkaller0: entered allmulticast mode
[  415.167649][T12736] tipc: Resetting bearer <eth:syzkaller0>
[  415.460585][T12731] tipc: Resetting bearer <eth:syzkaller0>
[  419.774076][T12731] tipc: Disabling bearer <eth:syzkaller0>
[  419.782361][T12745] netlink: 'syz.8.1963': attribute type 4 has an invalid length.
[  419.811923][   T23] tipc: Node number set to 2879013394
[  419.820111][T12762] netlink: 'syz.5.1965': attribute type 39 has an invalid length.
[  419.852905][T12778] __nla_validate_parse: 1 callbacks suppressed
[  419.852925][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1975'.
[  419.883697][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1975'.
[  420.563135][ T7601] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  420.797754][ T7601] usb 5-1: Using ep0 maxpacket: 32
[  420.839756][ T7601] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  420.849282][ T7601] usb 5-1: config 0 has no interface number 0
[  420.860231][ T7601] usb 5-1: config 0 interface 12 has no altsetting 0
[  420.879495][ T7601] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  420.904224][ T7601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.921178][ T7601] usb 5-1: Product: syz
[  420.941351][ T7601] usb 5-1: Manufacturer: syz
[  420.950232][ T7601] usb 5-1: SerialNumber: syz
[  420.961472][ T7601] usb 5-1: config 0 descriptor??
[  420.978957][ T7601] f81534 5-1:0.12: required endpoints missing
[  421.300091][   T23] usb 5-1: USB disconnect, device number 11
[  422.954234][T12838] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1996'.
[  423.137730][T12842] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1996'.
[  426.021305][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2008'.
[  426.204499][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2010'.
[  427.020166][T12896] netlink: 'syz.9.2018': attribute type 1 has an invalid length.
[  427.164507][T12896] bond1: entered promiscuous mode
[  427.208030][T12896] 8021q: adding VLAN 0 to HW filter on device bond1
[  427.237438][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2020'.
[  427.262942][T12905] bond1: (slave bridge5): making interface the new active one
[  427.270909][T12905] bridge5: entered promiscuous mode
[  427.282518][T12905] bridge5: left promiscuous mode
[  427.504245][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2020'.
[  427.602072][T12908] netlink: 'syz.5.2021': attribute type 6 has an invalid length.
[  428.750471][T12937] bond5: entered promiscuous mode
[  428.922037][T12937] vcan0: entered promiscuous mode
[  428.939223][T12937] vcan0: entered allmulticast mode
[  428.946091][T12937] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  428.959005][T12937] bond5: (slave vcan0): Error -95 calling set_mac_address
[  429.293877][   T28] audit: type=1326 audit(1771398362.841:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.9.2030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33cc79c629 code=0x0
[  429.605617][T12947] loop8: detected capacity change from 0 to 4096
[  429.637863][T12947] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  429.837920][T12947] ntfs: volume version 3.1.
[  429.927577][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2040'.
[  430.301476][T12964] loop4: detected capacity change from 0 to 128
[  434.381054][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2059'.
[  434.416396][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2059'.
[  435.959923][T13045] netlink: 'syz.5.2073': attribute type 1 has an invalid length.
[  436.044285][T13045] macvlan2: entered promiscuous mode
[  436.050019][T13045] macvlan2: entered allmulticast mode
[  436.057562][T13045] bond6: entered promiscuous mode
[  436.063599][T13045] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  436.081521][T13045] bond6: left promiscuous mode
[  436.392262][T13054] loop4: detected capacity change from 0 to 128
[  436.418306][T13054] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  436.471110][T13054] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  436.601270][   T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  436.883984][T13061] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2080'.
[  438.333922][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2092'.
[  439.130957][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'.
[  439.247342][T13106] bond0: (slave dummy0): Releasing active interface
[  441.717256][T13139] loop8: detected capacity change from 0 to 262144
[  441.747559][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  441.757284][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  441.823094][T13139] F2FS-fs (loop8): invalid crc value
[  441.862963][T13139] F2FS-fs (loop8): Found nat_bits in checkpoint
[  441.907243][T13139] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  442.177884][T13150] netlink: 'syz.4.2110': attribute type 1 has an invalid length.
[  442.209539][T13150] bond5: entered promiscuous mode
[  442.224979][T13150] 8021q: adding VLAN 0 to HW filter on device bond5
[  442.305688][T13150] bond5: (slave bridge3): making interface the new active one
[  442.313522][T13150] bridge3: entered promiscuous mode
[  442.328212][T13150] bridge3: left promiscuous mode
[  442.960207][T13166] netlink: 'syz.5.2118': attribute type 1 has an invalid length.
[  443.173278][T13166] geneve2: entered promiscuous mode
[  443.187084][T13166] geneve2: entered allmulticast mode
[  443.200998][T13166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.220071][T13166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.232647][T13166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.250396][T13166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.265592][T13166] bond7: (slave geneve2): making interface the new active one
[  443.282608][T13166] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  443.861222][T13185] netlink: 'syz.5.2125': attribute type 1 has an invalid length.
[  443.899372][T13185] bond8: entered promiscuous mode
[  443.916326][T13185] 8021q: adding VLAN 0 to HW filter on device bond8
[  444.052399][T13185] bond8: (slave bridge6): making interface the new active one
[  444.088354][T13185] bridge6: entered promiscuous mode
[  444.126866][T13185] bridge6: left promiscuous mode
[  444.821965][T13210] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2132'.
[  444.838905][T13210] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms
[  444.887067][T13213] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2132'.
[  444.929622][T13213] bond9: Unable to set peer notification delay as MII monitoring is disabled
[  445.454299][T13228] netlink: 'syz.8.2140': attribute type 1 has an invalid length.
[  445.495104][T13228] bond4: entered promiscuous mode
[  445.500442][T13228] 8021q: adding VLAN 0 to HW filter on device bond4
[  445.559368][T13231] overlayfs: failed to clone upperpath
[  445.609849][T13228] bond4: (slave bridge2): making interface the new active one
[  445.618386][T13228] bridge2: entered promiscuous mode
[  445.632480][T13228] bridge2: left promiscuous mode
[  447.006851][   T28] audit: type=1326 audit(1771398380.561:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.5.2144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bd359c629 code=0x0
[  447.069973][T13263] netlink: 'syz.9.2154': attribute type 1 has an invalid length.
[  447.172438][T13263] bond2: entered promiscuous mode
[  447.193269][T13263] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.530062][T13263] bond2: (slave bridge5): making interface the new active one
[  447.575385][T13263] bridge5: entered promiscuous mode
[  447.596261][T13263] bridge5: left promiscuous mode
[  447.716469][ T5777] Bluetooth: hci0: command 0x0406 tx timeout
[  449.355903][T13297] netlink: 'syz.8.2164': attribute type 1 has an invalid length.
[  449.650743][T13300] bond5: (slave veth5): Enslaving as an active interface with a down link
[  449.858114][T13297] bond5 (unregistering): (slave veth5): Releasing active interface
[  449.907172][T13297] bond5 (unregistering): Released all slaves
[  452.338263][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2188'.
[  454.550495][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2199'.
[  455.889715][T13421] tipc: Failed to remove unknown binding: 66,1,1/0:2600773795/2600773797
[  455.899020][T13421] tipc: Failed to remove unknown binding: 66,1,1/0:2600773795/2600773797
[  457.532280][T13438] netlink: 'syz.9.2215': attribute type 11 has an invalid length.
[  457.674024][T13438] netlink: 'syz.9.2215': attribute type 11 has an invalid length.
[  457.755108][T13442] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2213'.
[  457.792086][T13442] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms
[  458.026733][T13442] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2213'.
[  458.036090][T13442] bond10: peer notification delay (2365) is not a multiple of miimon (39), value rounded to 2340 ms
[  458.310306][    T8] libceph: connect (1)[c::]:6789 error -22
[  458.330313][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  458.467921][T13458] ceph: No mds server is up or the cluster is laggy
[  459.156211][T13477] bond6: entered promiscuous mode
[  459.218399][T13479] macvlan2: entered promiscuous mode
[  459.322986][T13479] macvlan2: entered allmulticast mode
[  459.402396][T13479] bond6: (slave macvlan2): Opening slave failed
[  460.293822][T13485] overlayfs: failed to clone lowerpath
[  460.301476][T13485] overlayfs: failed to clone lowerpath
[  462.743493][T13530] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2244'.
[  465.188621][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2258'.
[  465.653031][T13569] ref_ctr_offset mismatch. inode: 0x3fc offset: 0x0 ref_ctr_offset(old): 0x2090100 ref_ctr_offset(new): 0x0
[  466.604956][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'.
[  466.631325][T13580] veth0_macvtap: left promiscuous mode
[  467.170058][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2273'.
[  467.189750][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2273'.
[  467.212935][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2273'.
[  467.716423][T13616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2279'.
[  467.896829][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'.
[  468.753663][T13644] veth1_to_bond: entered allmulticast mode
[  468.763621][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2290'.
[  468.774105][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2290'.
[  468.928981][T13643] veth1_to_bond: left allmulticast mode
[  469.110239][T13647] overlayfs: failed to clone upperpath
[  469.633523][T13664] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  469.633523][T13664] The task syz.4.2296 (13664) triggered the difference, watch for misbehavior.
[  470.361205][T13666] loop8: detected capacity change from 0 to 32768
[  470.403292][T13666] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  470.548338][T13666] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  470.605441][T13666] XFS (loop8): Starting recovery (logdev: internal)
[  470.752165][T13666] XFS (loop8): Ending recovery (logdev: internal)
[  470.920215][   T28] audit: type=1800 audit(1771398404.471:162): pid=13666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2297" name="file1" dev="loop8" ino=4422 res=0 errno=0
[  471.118137][   T28] audit: type=1800 audit(1771398404.671:163): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2297" name="file1" dev="loop8" ino=4422 res=0 errno=0
[  471.196620][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'.
[  471.666900][T10970] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  473.406050][T13767] loop8: detected capacity change from 0 to 512
[  473.422156][T13767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  473.436070][T13767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  473.444510][T13767] System zones: 1-2, 4-12, 8-8
[  473.459945][T13767] EXT4-fs error (device loop8): ext4_orphan_get:1398: inode #15: comm syz.8.2329: iget: bad i_size value: 38620345925642
[  473.480138][T13767] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2329: couldn't read orphan inode 15 (err -117)
[  473.504853][T13767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.882005][T13784] sctp: [Deprecated]: syz.4.2333 (pid 13784) Use of struct sctp_assoc_value in delayed_ack socket option.
[  473.882005][T13784] Use struct sctp_sack_info instead
[  474.083463][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2338'.
[  474.440062][   T49] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm kworker/u4:3: bg 0: block 5: invalid block bitmap
[  474.474314][   T49] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  474.495479][   T49] EXT4-fs (loop8): This should not happen!! Data will be lost
[  474.495479][   T49] 
[  474.511779][   T49] EXT4-fs (loop8): Total free blocks count 0
[  474.529868][   T49] EXT4-fs (loop8): Free/Dirty block details
[  474.536171][   T49] EXT4-fs (loop8): free_blocks=0
[  474.541247][   T49] EXT4-fs (loop8): dirty_blocks=2896
[  474.552817][   T49] EXT4-fs (loop8): Block reservation details
[  474.559081][   T49] EXT4-fs (loop8): i_reserved_data_blocks=2896
[  474.690745][   T12] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 844 with error 28
[  474.764633][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2345'.
[  474.809586][T13811] vlan2: entered allmulticast mode
[  474.822572][T13811] macvlan0: entered allmulticast mode
[  474.828551][T13811] veth1_vlan: entered allmulticast mode
[  474.850298][T13811] bridge5: port 1(vlan2) entered blocking state
[  474.860959][T13811] bridge5: port 1(vlan2) entered disabled state
[  474.876105][T13811] vlan2: entered promiscuous mode
[  474.881363][T13811] macvlan0: entered promiscuous mode
[  475.369809][T13813] loop8: detected capacity change from 0 to 40427
[  475.481544][T13687] I/O error, dev loop8, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  475.585679][T13813] netlink: 'syz.8.2344': attribute type 10 has an invalid length.
[  475.618258][T13813] team0: Port device dummy0 added
[  478.448342][   T28] audit: type=1326 audit(1771398412.001:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  478.607250][   T28] audit: type=1326 audit(1771398412.031:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  478.704808][   T28] audit: type=1326 audit(1771398412.031:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  478.802904][   T28] audit: type=1326 audit(1771398412.031:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  478.878713][   T28] audit: type=1326 audit(1771398412.031:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  478.958991][   T28] audit: type=1326 audit(1771398412.031:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  478.986398][   T28] audit: type=1326 audit(1771398412.031:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  479.012671][T13868] netlink: 'syz.9.2353': attribute type 1 has an invalid length.
[  479.047754][   T28] audit: type=1326 audit(1771398412.031:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  479.112116][   T28] audit: type=1326 audit(1771398412.031:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4cf596417 code=0x7ffc0000
[  479.172284][   T28] audit: type=1326 audit(1771398412.031:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.4.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4cf53da19 code=0x7ffc0000
[  479.205784][T13868] 8021q: adding VLAN 0 to HW filter on device bond4
[  479.244531][T13868] bond3: (slave bond4): making interface the new active one
[  479.301048][T13868] bond3: (slave bond4): Enslaving as an active interface with an up link
[  479.339093][T13871] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2353'.
[  479.414103][T13871] bond3: entered promiscuous mode
[  479.424891][T13871] bond4: entered promiscuous mode
[  479.461823][T13871] bond3: entered allmulticast mode
[  479.483308][T13871] bond4: entered allmulticast mode
[  479.488704][T13871] 8021q: adding VLAN 0 to HW filter on device bond3
[  479.523837][T13873] netlink: 'syz.4.2362': attribute type 13 has an invalid length.
[  479.750027][T13876] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2363'.
[  479.862053][T13882] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2363'.
[  480.777657][T13897] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2370'.
[  481.080622][T13902] pimreg: entered allmulticast mode
[  481.124037][T13902] pimreg: left allmulticast mode
[  481.403155][   T23] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  481.543529][T13911] overlayfs: failed to clone upperpath
[  481.644587][   T23] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  481.661747][   T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.690869][   T23] usb 9-1: config 0 descriptor??
[  481.735643][   T23] cp210x 9-1:0.0: cp210x converter detected
[  483.548609][ T5777] Bluetooth: hci2: command 0x0406 tx timeout
[  483.782928][   T23] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  483.807687][   T23] usb 9-1: cp210x converter now attached to ttyUSB0
[  484.066233][    T8] usb 9-1: USB disconnect, device number 5
[  484.081295][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  484.118007][    T8] cp210x 9-1:0.0: device disconnected
[  484.875315][   T28] kauditd_printk_skb: 66 callbacks suppressed
[  484.875333][   T28] audit: type=1326 audit(1771398418.431:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  484.940792][   T28] audit: type=1326 audit(1771398418.431:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  485.009686][   T28] audit: type=1326 audit(1771398418.431:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  485.062976][   T28] audit: type=1326 audit(1771398418.431:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  485.122958][   T28] audit: type=1326 audit(1771398418.431:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  485.182893][   T28] audit: type=1326 audit(1771398418.431:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  485.223374][   T28] audit: type=1326 audit(1771398418.431:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  485.269508][   T28] audit: type=1326 audit(1771398418.431:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  485.304139][   T28] audit: type=1326 audit(1771398418.431:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feade196417 code=0x7ffc0000
[  485.335777][   T28] audit: type=1326 audit(1771398418.431:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13959 comm="syz.8.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feade13da19 code=0x7ffc0000
[  487.715349][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2411'.
[  487.727051][T14004] lo: entered promiscuous mode
[  487.732033][T14004] lo: entered allmulticast mode
[  488.159460][T14022] bridge0: entered promiscuous mode
[  490.611346][T14076] netlink: 'syz.4.2437': attribute type 39 has an invalid length.
[  490.733563][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2436'.
[  490.747543][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2436'.
[  490.772179][T14077] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  490.781368][T14077] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  490.790460][T14077] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  490.799371][T14077] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  490.824129][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2436'.
[  490.849510][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2436'.
[  491.164363][T14084] lo: Caught tx_queue_len zero misconfig
[  491.220382][T14087] vxcan1: Caught tx_queue_len zero misconfig
[  494.443220][T14130] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.655835][T14130] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.924229][T14130] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.160422][T14130] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.750441][T14130] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.902493][T14130] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.978357][T14130] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.031642][T14130] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.108593][T14142] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  497.972473][T14163] netlink: 'syz.8.2465': attribute type 1 has an invalid length.
[  497.981112][T14161] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  498.013644][ T5858] IPVS: starting estimator thread 0...
[  498.068411][T14163] 8021q: adding VLAN 0 to HW filter on device bond5
[  498.103922][T14164] IPVS: using max 19 ests per chain, 45600 per kthread
[  498.167778][T14166] bond5: (slave bridge2): making interface the new active one
[  498.218633][T14166] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  498.527865][T14177] loop8: detected capacity change from 0 to 1024
[  498.655360][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2471'.
[  498.672371][T14181] 9pnet: Found fid 0 not clunked
[  499.008236][   T28] kauditd_printk_skb: 161 callbacks suppressed
[  499.008253][   T28] audit: type=1326 audit(1771398432.561:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.044198][   T28] audit: type=1326 audit(1771398432.601:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.084764][   T28] audit: type=1326 audit(1771398432.631:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.146790][   T28] audit: type=1326 audit(1771398432.631:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.203733][   T28] audit: type=1326 audit(1771398432.631:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.283124][   T28] audit: type=1326 audit(1771398432.631:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.392868][   T28] audit: type=1326 audit(1771398432.631:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.472979][   T28] audit: type=1326 audit(1771398432.631:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.529703][   T28] audit: type=1326 audit(1771398432.691:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.529751][T14198] netlink: 'syz.4.2479': attribute type 1 has an invalid length.
[  499.596220][   T28] audit: type=1326 audit(1771398432.691:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  499.678557][T14198] 8021q: adding VLAN 0 to HW filter on device bond7
[  499.708311][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2487'.
[  499.845550][T14204] bond7: (slave bridge5): making interface the new active one
[  499.861185][T14204] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  499.904981][T14205] bridge3: port 1(veth0_to_bond) entered blocking state
[  499.921252][T14205] bridge3: port 1(veth0_to_bond) entered disabled state
[  499.945730][T14205] veth0_to_bond: entered allmulticast mode
[  499.975566][T14205] veth0_to_bond: entered promiscuous mode
[  501.420623][T14261] tipc: Started in network mode
[  501.432969][T14261] tipc: Node identity 4, cluster identity 4711
[  501.447763][T14261] tipc: Node number set to 4
[  501.617065][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'.
[  501.649726][T14264] bridge_slave_0: left allmulticast mode
[  501.667936][T14264] bridge_slave_0: left promiscuous mode
[  501.676798][T14264] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.886331][T14276] netlink: 'syz.9.2505': attribute type 1 has an invalid length.
[  501.927973][T14276] 8021q: adding VLAN 0 to HW filter on device bond5
[  501.953164][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  501.959662][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  502.033791][T14280] bond5: (slave bridge6): making interface the new active one
[  502.042110][T14280] bond5: (slave bridge6): Enslaving as an active interface with an up link
[  502.198819][T14286] netlink: 'syz.9.2508': attribute type 1 has an invalid length.
[  502.245069][T14286] bond6: entered promiscuous mode
[  502.250505][T14286] bond6: entered allmulticast mode
[  502.256709][T14286] 8021q: adding VLAN 0 to HW filter on device bond6
[  502.279903][T14286] bridge7: entered promiscuous mode
[  502.285601][T14286] bridge7: entered allmulticast mode
[  502.291736][T14286] bond6: (slave bridge7): Enslaving as a backup interface with an up link
[  502.356062][   T40] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  502.504360][   T40] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  502.658275][T14303] (null): rxe_set_mtu: Set mtu to 256
[  503.012360][T14303] infiniband syz1: set down
[  503.024860][T14303] infiniband syz1: added syz_tun
[  503.179302][T14303] RDS/IB: syz1: added
[  503.197048][T14303] smc: adding ib device syz1 with port count 1
[  503.215389][T14303] smc:    ib device syz1 port 1 has pnetid 
[  506.182694][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2539'.
[  506.754602][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2544'.
[  507.739787][T14413] xt_hashlimit: max too large, truncated to 1048576
[  508.667241][T14428] loop8: detected capacity change from 0 to 1024
[  508.718406][T14428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  508.781630][T14428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  508.985496][T14428] loop8: detected capacity change from 1024 to 1
[  509.148346][T10970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.170095][T10970] syz-executor: attempt to access beyond end of device
[  509.170095][T10970] loop8: rw=133121, sector=2, nr_sectors = 2 limit=1
[  509.194600][T10970] buffer_io_error: 138 callbacks suppressed
[  509.194705][T10970] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[  509.221988][T10970] EXT4-fs (loop8): I/O error while writing superblock
[  509.249776][T14434] kmmpd-loop8: attempt to access beyond end of device
[  509.249776][T14434] loop8: rw=14337, sector=128, nr_sectors = 2 limit=1
[  509.266789][T14434] Buffer I/O error on dev loop8, logical block 64, lost sync page write
[  509.498872][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  509.498889][   T28] audit: type=1326 audit(1771398443.051:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14453 comm="syz.5.2567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bd359c629 code=0x0
[  509.699450][ T5774] Bluetooth: hci0: unexpected event for opcode 0x200a
[  510.087131][    T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  510.401621][    T8] usb 9-1: Using ep0 maxpacket: 16
[  510.489643][    T8] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[  510.528250][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.580621][    T8] usb 9-1: config 0 descriptor??
[  510.642091][    C0] vcan0: j1939_tp_rxtimer: 0xffff888069c50c00: rx timeout, send abort
[  510.654222][    T8] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  510.714806][    T8] usb 9-1: Detected FT2233HP
[  510.833747][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  510.852372][    T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  510.974362][    T8] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  511.015518][    T8] usb 9-1: USB disconnect, device number 6
[  511.049383][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  511.107929][    T8] ftdi_sio 9-1:0.0: device disconnected
[  511.122859][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805cb58c00: rx timeout, send abort
[  511.163382][    C0] vcan0: j1939_tp_rxtimer: 0xffff888069c50c00: abort rx timeout. Force session deactivation
[  511.641069][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805cb58c00: abort rx timeout. Force session deactivation
[  513.213449][T14495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2580'.
[  513.397369][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfc1c00: rx timeout, send abort
[  513.905782][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805cfc1c00: abort rx timeout. Force session deactivation
[  518.270437][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2603'.
[  519.072293][    T8] libceph: connect (1)[c::]:6789 error -101
[  519.079376][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  519.193188][T14589] ceph: No mds server is up or the cluster is laggy
[  520.579920][T14607] batadv_slave_0: entered promiscuous mode
[  521.525358][T14623] xt_cgroup: invalid path, errno=-2
[  521.751011][T14626] overlayfs: failed to clone upperpath
[  522.874244][ T7690] libceph: connect (1)[c::]:6789 error -101
[  522.888080][ T7690] libceph: mon0 (1)[c::]:6789 connect error
[  523.010327][T14643] ceph: No mds server is up or the cluster is laggy
[  523.444576][ T7690] libceph: connect (1)[c::]:6789 error -101
[  523.486893][ T7690] libceph: mon0 (1)[c::]:6789 connect error
[  523.773801][T14656] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2629'.
[  523.814266][T14656] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2629'.
[  523.872484][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2629'.
[  524.958174][T14680] tipc: Failed to remove unknown binding: 66,0,0/0:299048566/299048567
[  525.004376][T14680] tipc: Failed to remove unknown binding: 66,0,0/0:299048566/299048567
[  526.573373][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2654'.
[  526.652247][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'.
[  526.660827][T14728] loop8: detected capacity change from 0 to 16
[  526.686477][T14728] erofs: Unknown parameter '0x0000000000000003'
[  526.886025][T14731] ref_ctr increment failed for inode: 0x523 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807aee4280
[  528.605022][   T28] audit: type=1326 audit(1771398462.161:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.654950][   T28] audit: type=1326 audit(1771398462.161:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.718399][   T28] audit: type=1326 audit(1771398462.181:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.766236][   T28] audit: type=1326 audit(1771398462.181:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.829845][   T28] audit: type=1326 audit(1771398462.181:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.862468][   T28] audit: type=1326 audit(1771398462.191:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.895693][   T28] audit: type=1326 audit(1771398462.191:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.921326][   T28] audit: type=1326 audit(1771398462.191:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  528.977041][   T28] audit: type=1326 audit(1771398462.191:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  529.023901][   T28] audit: type=1326 audit(1771398462.191:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.8.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  530.146528][T14779] binder: 14777:14779 ioctl c0306201 0 returned -14
[  530.223618][T14778] bond11: entered allmulticast mode
[  530.400594][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2676'.
[  530.450806][T14778] bridge7: entered allmulticast mode
[  530.457311][T14778] bond11: (slave bridge7): Enslaving as an active interface with an up link
[  531.681850][T14813] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2682'.
[  532.377988][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2686'.
[  533.361523][T14858] bond7: entered allmulticast mode
[  533.390059][T14860] bridge11: entered promiscuous mode
[  533.408372][T14860] bridge11: entered allmulticast mode
[  533.481722][T14860] bond7: (slave bridge11): Enslaving as an active interface with an up link
[  533.914524][T14877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2697'.
[  533.940944][T14877] ip6gre1: entered promiscuous mode
[  533.964089][T14877] ip6gre1: entered allmulticast mode
[  534.077780][T14877] netlink: 'syz.4.2697': attribute type 6 has an invalid length.
[  534.092909][T14877] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2697'.
[  534.113360][T14882] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  534.322365][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2701'.
[  539.784959][T14898] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  539.806568][T14907] overlayfs: failed to clone upperpath
[  539.814285][T14899] syz_tun: left allmulticast mode
[  539.826355][T14899] syz_tun: left promiscuous mode
[  539.831682][T14899] bridge0: port 3(syz_tun) entered disabled state
[  539.875445][T14899] bridge_slave_0: left allmulticast mode
[  539.881179][T14899] bridge_slave_0: left promiscuous mode
[  539.943410][T14899] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.974888][T14911] loop8: detected capacity change from 0 to 256
[  539.991272][T14899] bridge_slave_1: left allmulticast mode
[  540.011506][T14899] bridge_slave_1: left promiscuous mode
[  540.025090][T14899] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.040015][T14911] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  540.079072][T14899] bond0: (slave bond_slave_0): Releasing backup interface
[  540.101944][T14899] bond0: (slave bond_slave_1): Releasing backup interface
[  540.127390][T14899] team0: Port device team_slave_0 removed
[  540.136980][T14899] team0: Port device team_slave_1 removed
[  540.149715][T14899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.160456][T14899] bond0: (slave wlan1): Releasing backup interface
[  540.181354][T14899] bond1: (slave bridge1): Releasing backup interface
[  540.194948][T14899] bond2: (slave veth5): Releasing active interface
[  540.208891][T14899] bond4: (slave bridge5): Releasing backup interface
[  540.238920][T14899] bond7: (slave geneve2): Releasing active interface
[  540.248726][T14899] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.258413][T14899] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.267699][T14899] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.285487][T14899] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.306889][T14899] bond11: (slave bridge7): Releasing backup interface
[  540.323742][T14899] bridge7: left allmulticast mode
[  540.611369][T14928] sctp: [Deprecated]: syz.8.2711 (pid 14928) Use of struct sctp_assoc_value in delayed_ack socket option.
[  540.611369][T14928] Use struct sctp_sack_info instead
[  540.714467][T14933] overlayfs: failed to clone upperpath
[  542.501624][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2724'.
[  542.569845][T14966] overlayfs: failed to clone upperpath
[  543.123849][T14988] overlayfs: failed to resolve './file2': -2
[  545.730119][T15037] netlink: 'syz.8.2746': attribute type 4 has an invalid length.
[  545.771662][T15037] netlink: 'syz.8.2746': attribute type 4 has an invalid length.
[  545.777889][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2745'.
[  547.164722][T15051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2752'.
[  547.273433][T15051] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2752'.
[  547.343837][T15051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2752'.
[  548.565488][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2758'.
[  549.055964][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  549.055982][   T28] audit: type=1326 audit(1771398482.611:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.146177][   T28] audit: type=1326 audit(1771398482.611:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.216684][   T28] audit: type=1326 audit(1771398482.621:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.322453][   T28] audit: type=1326 audit(1771398482.621:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.421876][   T28] audit: type=1326 audit(1771398482.621:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.452279][   T28] audit: type=1326 audit(1771398482.621:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.519164][   T28] audit: type=1326 audit(1771398482.621:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.560703][   T28] audit: type=1326 audit(1771398482.621:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.600297][   T28] audit: type=1326 audit(1771398482.621:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.651741][   T28] audit: type=1326 audit(1771398482.621:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade19c629 code=0x7ffc0000
[  549.852211][T15094] Set syz0 is full, maxelem 0 reached
[  550.287132][T15102] loop8: detected capacity change from 0 to 2048
[  550.391588][T15102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  553.847575][T15137] loop8: detected capacity change from 0 to 16
[  553.903909][T15137] erofs: (device loop8): mounted with root inode @ nid 36.
[  553.994880][T15137] erofs: (device loop8): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[  554.014616][T15137] erofs: (device loop8): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[  554.356984][   T23] IPVS: starting estimator thread 0...
[  554.473154][T15151] IPVS: using max 18 ests per chain, 43200 per kthread
[  554.796309][T15163] tmpfs: Bad value for 'mpol'
[  556.161079][T15174] netlink: 'syz.5.2796': attribute type 1 has an invalid length.
[  556.353033][T15179] bond12: (slave veth15): Enslaving as an active interface with a down link
[  556.384804][T15174] bond12: entered promiscuous mode
[  556.393634][T15174] bond12: entered allmulticast mode
[  556.409345][T15174] 8021q: adding VLAN 0 to HW filter on device bond12
[  557.829675][T15224] overlayfs: failed to clone upperpath
[  557.875178][T15226] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  558.600341][T15255] netlink: 'syz.9.2829': attribute type 1 has an invalid length.
[  558.680870][T15255] 8021q: adding VLAN 0 to HW filter on device bond8
[  558.709600][T15257] bond8: (slave ip6erspan0): making interface the new active one
[  558.719301][T15257] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link
[  558.728549][T15259] lo: entered allmulticast mode
[  558.742936][T15259] tunl0: entered allmulticast mode
[  558.748305][T15259] gre0: entered allmulticast mode
[  558.763008][T15259] gretap0: entered allmulticast mode
[  558.768433][T15259] erspan0: entered allmulticast mode
[  558.783208][T15259] ip_vti0: entered allmulticast mode
[  558.789076][T15259] ip6_vti0: entered allmulticast mode
[  558.795366][T15259] sit0: entered allmulticast mode
[  558.820252][T15259] ip6tnl0: entered allmulticast mode
[  558.836906][T15259] ip6gre0: entered allmulticast mode
[  558.842335][T15259] syz_tun: entered allmulticast mode
[  558.853021][T15259] ip6gretap0: entered allmulticast mode
[  558.858974][T15259] bridge0: entered allmulticast mode
[  558.865445][T15259] bond0: entered allmulticast mode
[  558.870979][T15259] team0: entered allmulticast mode
[  558.879139][T15259] dummy0: entered allmulticast mode
[  558.885937][T15259] nlmon0: entered allmulticast mode
[  558.891612][T15259] caif0: entered allmulticast mode
[  558.897522][T15259] batadv0: entered allmulticast mode
[  558.905627][T15259] veth0: entered allmulticast mode
[  558.913040][T15259] veth1: entered allmulticast mode
[  558.918562][T15259] wg1: entered allmulticast mode
[  558.923851][T15259] wg2: entered allmulticast mode
[  558.929347][T15259] veth0_to_bridge: entered allmulticast mode
[  558.936039][T15259] bridge_slave_0: entered allmulticast mode
[  558.942298][T15259] veth1_to_bridge: entered allmulticast mode
[  558.948830][T15259] bridge_slave_1: entered allmulticast mode
[  558.955322][T15259] veth0_to_bond: entered allmulticast mode
[  558.961343][T15259] bond_slave_0: entered allmulticast mode
[  558.968117][T15259] veth1_to_bond: entered allmulticast mode
[  558.975115][T15259] bond_slave_1: entered allmulticast mode
[  558.981186][T15259] veth0_to_team: entered allmulticast mode
[  558.987412][T15259] team_slave_0: entered allmulticast mode
[  558.993830][T15259] veth1_to_team: entered allmulticast mode
[  558.999871][T15259] team_slave_1: entered allmulticast mode
[  559.009048][T15259] veth0_to_batadv: entered allmulticast mode
[  559.015591][T15259] batadv_slave_0: left promiscuous mode
[  559.021303][T15259] batadv_slave_0: entered allmulticast mode
[  559.027682][T15259] xfrm0: entered allmulticast mode
[  559.055412][T15259] veth0_to_hsr: entered allmulticast mode
[  559.061285][T15259] hsr_slave_0: entered allmulticast mode
[  559.070125][T15259] veth1_to_hsr: entered allmulticast mode
[  559.078191][T15259] hsr_slave_1: entered allmulticast mode
[  559.085455][T15259] hsr0: entered allmulticast mode
[  559.090694][T15259] veth1_virt_wifi: entered allmulticast mode
[  559.097295][T15259] veth0_virt_wifi: entered allmulticast mode
[  559.103856][T15259] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  559.122640][T15259] veth1_vlan: entered allmulticast mode
[  559.128698][T15259] veth0_vlan: entered allmulticast mode
[  559.142686][T15259] vlan0: entered allmulticast mode
[  559.150522][T15259] vlan1: entered allmulticast mode
[  559.157611][T15259] macvlan0: entered allmulticast mode
[  559.163583][T15259] macvlan1: entered allmulticast mode
[  559.169241][T15259] ipvlan0: entered allmulticast mode
[  559.175761][T15259] ipvlan1: entered allmulticast mode
[  559.181363][T15259] veth1_macvtap: entered allmulticast mode
[  559.188298][T15259] veth0_macvtap: entered allmulticast mode
[  559.195084][T15259] macvtap0: entered allmulticast mode
[  559.200775][T15259] macsec0: entered allmulticast mode
[  559.206986][T15259] geneve0: entered allmulticast mode
[  559.214325][T15259] geneve1: entered allmulticast mode
[  559.220019][T15259] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  559.231809][T15259] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[  559.240520][T15259] netdevsim netdevsim5 netdevsim2: entered allmulticast mode
[  559.277116][T15259] netdevsim netdevsim5 netdevsim3: entered allmulticast mode
[  559.293329][T15259] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  559.300831][T15259] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  559.309108][T15259] veth2: entered allmulticast mode
[  559.318855][T15259] veth3: entered allmulticast mode
[  559.343689][T15259] ip6erspan0: entered allmulticast mode
[  559.355744][T15259] bond1: entered allmulticast mode
[  559.367076][T15259] vlan2: entered allmulticast mode
[  559.378027][T15259] bridge1: entered allmulticast mode
[  559.385408][T15259] bond2: entered allmulticast mode
[  559.390832][T15259] veth4: entered allmulticast mode
[  559.396757][T15259] veth5: entered allmulticast mode
[  559.402163][T15259] ip6tnl1: entered allmulticast mode
[  559.408376][T15259] bridge2: entered allmulticast mode
[  559.416726][T15259] veth6: entered allmulticast mode
[  559.422146][T15259] veth7: entered allmulticast mode
[  559.428349][T15259] gre1: entered allmulticast mode
[  559.434206][T15259] veth8: entered allmulticast mode
[  559.439646][T15259] veth9: entered allmulticast mode
[  559.449241][T15259] bridge3: entered allmulticast mode
[  559.457889][T15259] bridge4: entered allmulticast mode
[  559.468781][T15259] veth10: entered allmulticast mode
[  559.491180][T15259] veth11: entered allmulticast mode
[  559.497188][T15259] bond3: entered allmulticast mode
[  559.504216][T15259] gre2: entered allmulticast mode
[  559.510208][T15259] ip6tnl2: entered allmulticast mode
[  559.538415][T15259] bond4: entered allmulticast mode
[  559.582383][T15259] bridge5: entered allmulticast mode
[  559.606737][T15259] gretap1: left promiscuous mode
[  559.617390][T15259] gretap1: entered allmulticast mode
[  559.652468][T15259] gre3: entered allmulticast mode
[  559.664565][T15259] bond5: entered allmulticast mode
[  559.673585][T15259] bond6: entered allmulticast mode
[  559.679013][T15259] bond7: entered allmulticast mode
[  559.684952][T15259] geneve2: left promiscuous mode
[  559.709265][T15259] bond8: left promiscuous mode
[  559.719121][T15259] bond8: entered allmulticast mode
[  559.748578][T15259] bond9: entered allmulticast mode
[  559.754312][T15259] bond10: entered allmulticast mode
[  559.759829][T15259] mac80211_hwsim hwsim23 wlan2: entered allmulticast mode
[  559.768903][T15259] bridge6: entered allmulticast mode
[  559.785370][T15259] veth12: entered allmulticast mode
[  559.790803][T15259] veth13: entered allmulticast mode
[  559.817030][T15259] bridge7: entered allmulticast mode
[  559.839098][T15259] bond12: left promiscuous mode
[  559.852251][T15259] veth14: entered allmulticast mode
[  559.884883][T15259] veth15: entered allmulticast mode
[  560.073570][T15280] bond9: entered allmulticast mode
[  560.452113][T15280] ip6gretap1: entered promiscuous mode
[  560.459723][T15280] bond9: (slave ip6gretap1): no link monitoring support
[  560.469465][T15280] bond9: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[  560.492257][T15280] ip6gretap1: entered allmulticast mode
[  560.498893][T15280] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  561.206307][T15296] bridge0: port 1(macvlan2) entered blocking state
[  561.223083][T15296] bridge0: port 1(macvlan2) entered disabled state
[  561.249157][T15296] macvlan2: entered allmulticast mode
[  561.265722][T15296] bridge0: entered allmulticast mode
[  561.287685][T15296] macvlan2: left allmulticast mode
[  561.329405][T15296] bridge0: left allmulticast mode
[  561.428829][T15304] overlayfs: failed to clone upperpath
[  561.480566][T15305] (unnamed net_device) (uninitialized): up delay (129) is not a multiple of miimon (9), value rounded to 126 ms
[  561.562629][T15305] bond6: entered allmulticast mode
[  561.678926][T15307] bridge4: entered allmulticast mode
[  561.685800][T15307] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  563.258243][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  563.258261][   T28] audit: type=1326 audit(1771398752.809:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  563.311800][   T28] audit: type=1326 audit(1771398752.809:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  563.405419][   T28] audit: type=1326 audit(1771398752.839:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4cf55cece code=0x7ffc0000
[  563.443222][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  563.449606][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  563.795864][   T28] audit: type=1326 audit(1771398752.839:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  563.842018][   T28] audit: type=1326 audit(1771398752.839:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  563.880010][   T28] audit: type=1326 audit(1771398752.839:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  563.918357][   T28] audit: type=1326 audit(1771398752.839:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  564.021245][   T28] audit: type=1326 audit(1771398752.839:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  564.497762][   T28] audit: type=1326 audit(1771398752.839:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  564.646759][   T28] audit: type=1326 audit(1771398752.839:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  567.722254][T15376] netlink: 'syz.4.2875': attribute type 1 has an invalid length.
[  567.849587][T15376] 8021q: adding VLAN 0 to HW filter on device bond9
[  567.858540][T15376] bond8: (slave bond9): making interface the new active one
[  567.873613][T15376] bond8: (slave bond9): Enslaving as an active interface with an up link
[  567.892638][T15387] bond8: (slave gretap1): Enslaving as a backup interface with an up link
[  567.904400][T15386] xt_socket: unknown flags 0x4c
[  568.020465][T15376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2875'.
[  568.031679][T15376] 8021q: adding VLAN 0 to HW filter on device bond8
[  569.041763][T15430] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  569.435479][T15445] tipc: Failed to remove unknown binding: 66,0,0/2879013394:3323186511/3323186512
[  569.447118][T15445] tipc: Failed to remove unknown binding: 66,0,0/2879013394:3323186511/3323186512
[  569.752251][T15448] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2902'.
[  569.971266][T15455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.010077][T15455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.061048][T15455] bond0 (unregistering): Released all slaves
[  571.037369][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2906'.
[  572.687878][T15475] overlayfs: failed to clone upperpath
[  574.222033][T15491] bond0 (unregistering): (slave veth19): Releasing active interface
[  574.274866][T15491] bond0 (unregistering): Released all slaves
[  574.373014][T15493] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  574.744241][T15502] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[  574.960436][   T23] libceph: connect (1)[c::]:6789 error -97
[  574.971410][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  575.105244][T15510] ceph: No mds server is up or the cluster is laggy
[  575.244363][   T23] libceph: connect (1)[c::]:6789 error -97
[  575.253711][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  575.586005][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  575.586021][   T28] audit: type=1326 audit(1771398765.139:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  575.650575][   T28] audit: type=1326 audit(1771398765.139:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  575.708905][   T28] audit: type=1326 audit(1771398765.149:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  575.782056][   T28] audit: type=1326 audit(1771398765.149:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  575.889675][   T28] audit: type=1326 audit(1771398765.149:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  575.935858][   T28] audit: type=1326 audit(1771398765.149:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  575.965679][   T28] audit: type=1326 audit(1771398765.149:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  576.067033][   T28] audit: type=1326 audit(1771398765.149:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4cf55cece code=0x7ffc0000
[  576.151897][   T28] audit: type=1326 audit(1771398765.159:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4cf55cece code=0x7ffc0000
[  576.199004][   T28] audit: type=1326 audit(1771398765.159:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15524 comm="syz.4.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf59c629 code=0x7ffc0000
[  576.420189][T15541] IPv6: NLM_F_CREATE should be specified when creating new route
[  577.754237][T15569] veth0_vlan: left promiscuous mode
[  578.636539][T15583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.650957][T15586] overlayfs: failed to clone upperpath
[  578.669365][T15586] Invalid ELF header magic: != ELF
[  578.858545][T15594] overlayfs: failed to clone upperpath
[  580.330048][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'.
[  581.171355][T15620] UBIFS error (pid: 15620): cannot open "./file0", error -22
[  581.809551][T15634] bond0: left allmulticast mode
[  581.855505][T15634] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.321479][T15660] tipc: Started in network mode
[  583.327309][T15660] tipc: Node identity ac14140f, cluster identity 4711
[  583.338501][T15660] tipc: Enabled bearer <udp:syz2>, priority 10
[  583.625758][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b74e000: rx timeout, send abort
[  584.125885][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b74d400: rx timeout, send abort
[  584.134355][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b74e000: abort rx timeout. Force session deactivation
[  584.463031][    T8] tipc: Node number set to 2886997007
[  584.634232][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b74d400: abort rx timeout. Force session deactivation
[  585.681303][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2993'.
[  585.964312][T15719] netlink: 'syz.9.2997': attribute type 1 has an invalid length.
[  585.997931][T15719] bond10: entered promiscuous mode
[  586.003872][T15719] 8021q: adding VLAN 0 to HW filter on device bond10
[  586.188763][T15719] bond10: (slave veth3): making interface the new active one
[  586.205886][T15719] veth3: entered promiscuous mode
[  586.226890][T15719] bond10: (slave veth3): Enslaving as an active interface with an up link
[  586.854061][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3006'.
[  586.879863][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3006'.
[  586.968425][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3008'.
[  587.226863][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3008'.
[  587.620372][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3013'.
[  587.738915][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'.
[  587.839080][T15765] xt_hashlimit: max too large, truncated to 1048576
[  588.675912][T15778] netlink: 'syz.4.3019': attribute type 10 has an invalid length.
[  588.699375][T15778] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3019'.
[  589.023118][    T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  589.223169][    T8] usb 9-1: Using ep0 maxpacket: 8
[  589.241689][    T8] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  589.258398][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.270338][    T8] usb 9-1: Product: syz
[  589.277970][    T8] usb 9-1: Manufacturer: syz
[  589.285050][    T8] usb 9-1: SerialNumber: syz
[  589.297091][    T8] usb 9-1: config 0 descriptor??
[  589.524138][    T8] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  590.883885][T15803] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  590.967185][    T8] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71
[  591.000140][    T8] usb 9-1: USB disconnect, device number 7
[  591.279546][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3030'.
[  591.622755][T15810] loop8: detected capacity change from 0 to 1024
[  591.640124][T15810] hfsplus: invalid length 32517 has been corrected to 255
[  591.819353][T15812] hfsplus: invalid length 32517 has been corrected to 255
[  591.976589][T15812] hfsplus: invalid length 32517 has been corrected to 255
[  592.521448][T14829] hfsplus: b-tree write err: -5, ino 4
[  593.740847][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  593.740863][   T28] audit: type=1107 audit(1771398783.259:519): pid=15834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JF4 0�7VC0��/"��XHO�9���2_=$�/ԧc�D>
�����Fd�'ۇ��Oz|����`DY�=��nX����Bu����ї6;k�ћhfp�9�ON�������x}}gf��Ʋ��9՚gZ��91��p݈�A�s�(rw�'�m�}.ʺx�U
[  593.740863][   T28] *宥B���OiP���V��'
[  593.970131][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3042'.
[  595.046698][T15861] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  599.101612][T15924] netlink: 'syz.8.3068': attribute type 10 has an invalid length.
[  599.122973][T15924] netlink: 55 bytes leftover after parsing attributes in process `syz.8.3068'.
[  600.180525][T15929] ==================================================================
[  600.188666][T15929] BUG: KASAN: slab-out-of-bounds in fib6_add+0x4680/0x46e0
[  600.196279][T15929] Read of size 1 at addr ffff8880672d33ce by task syz.4.3069/15929
[  600.204310][T15929] 
[  600.206664][T15929] CPU: 0 PID: 15929 Comm: syz.4.3069 Not tainted syzkaller #0
[  600.214160][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  600.224262][T15929] Call Trace:
[  600.227572][T15929]  <TASK>
[  600.230527][T15929]  dump_stack_lvl+0x18c/0x250
[  600.235265][T15929]  ? __lock_acquire+0x7d40/0x7d40
[  600.240357][T15929]  ? show_regs_print_info+0x20/0x20
[  600.245590][T15929]  ? load_image+0x400/0x400
[  600.250125][T15929]  ? __virt_addr_valid+0x469/0x540
[  600.255274][T15929]  print_report+0xa8/0x210
[  600.259766][T15929]  ? fib6_add+0x4680/0x46e0
[  600.264308][T15929]  kasan_report+0x117/0x150
[  600.268936][T15929]  ? fib6_add+0x4680/0x46e0
[  600.273572][T15929]  fib6_add+0x4680/0x46e0
[  600.278038][T15929]  ? fib6_update_sernum_stub+0x1e0/0x1e0
[  600.283713][T15929]  ? do_raw_spin_lock+0x11f/0x2c0
[  600.288771][T15929]  ? __rwlock_init+0x150/0x150
[  600.293570][T15929]  ? ip6_route_add+0x75/0x160
[  600.298283][T15929]  ip6_route_add+0x8a/0x160
[  600.302819][T15929]  inet6_rtm_newroute+0x2ba/0x1c90
[  600.308069][T15929]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  600.313994][T15929]  ? __mutex_lock+0x94c/0xcc0
[  600.318705][T15929]  ? __lock_acquire+0x7d40/0x7d40
[  600.323754][T15929]  ? do_raw_spin_lock+0x11f/0x2c0
[  600.328813][T15929]  ? __rwlock_init+0x150/0x150
[  600.333608][T15929]  ? do_raw_spin_unlock+0x121/0x230
[  600.338841][T15929]  ? __mutex_lock+0x956/0xcc0
[  600.343564][T15929]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  600.348703][T15929]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  600.353840][T15929]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  600.359762][T15929]  rtnetlink_rcv_msg+0x869/0xfa0
[  600.364729][T15929]  ? lockdep_hardirqs_on+0x98/0x150
[  600.369952][T15929]  ? rtnetlink_bind+0x80/0x80
[  600.374665][T15929]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  600.380671][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  600.385819][T15929]  ? lock_chain_count+0x20/0x20
[  600.390697][T15929]  ? __local_bh_enable_ip+0x13a/0x1c0
[  600.396186][T15929]  ? lockdep_hardirqs_on+0x98/0x150
[  600.401420][T15929]  ? __local_bh_enable_ip+0x13a/0x1c0
[  600.406817][T15929]  ? _local_bh_enable+0xa0/0xa0
[  600.411699][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  600.416841][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  600.421990][T15929]  ? __dev_queue_xmit+0x124f/0x36b0
[  600.427224][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  600.432439][T15929]  ? ref_tracker_free+0x690/0x840
[  600.437497][T15929]  netlink_rcv_skb+0x241/0x4d0
[  600.442295][T15929]  ? rtnetlink_bind+0x80/0x80
[  600.447010][T15929]  ? netlink_ack+0x1180/0x1180
[  600.451912][T15929]  ? __lock_acquire+0x7d40/0x7d40
[  600.457095][T15929]  ? netlink_deliver_tap+0x2e/0x1b0
[  600.462345][T15929]  netlink_unicast+0x751/0x8d0
[  600.467148][T15929]  netlink_sendmsg+0x8d0/0xbf0
[  600.471958][T15929]  ? kasan_set_track+0x4e/0x70
[  600.476753][T15929]  ? netlink_getsockopt+0x590/0x590
[  600.481987][T15929]  ? aa_sock_msg_perm+0x94/0x150
[  600.486959][T15929]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  600.492272][T15929]  ? security_socket_sendmsg+0x80/0xa0
[  600.497765][T15929]  ? netlink_getsockopt+0x590/0x590
[  600.503082][T15929]  ____sys_sendmsg+0x5ba/0x960
[  600.507876][T15929]  ? __asan_memset+0x22/0x40
[  600.512499][T15929]  ? __sys_sendmsg_sock+0x30/0x30
[  600.517549][T15929]  ? __import_iovec+0x5f2/0x850
[  600.522443][T15929]  ? import_iovec+0x73/0xa0
[  600.526978][T15929]  ___sys_sendmsg+0x2a6/0x360
[  600.531695][T15929]  ? __lock_acquire+0x7d40/0x7d40
[  600.536763][T15929]  ? __sys_sendmsg+0x2a0/0x2a0
[  600.541575][T15929]  __se_sys_sendmsg+0x1c2/0x2b0
[  600.546450][T15929]  ? __x64_sys_sendmsg+0x80/0x80
[  600.551419][T15929]  ? lockdep_hardirqs_on+0x98/0x150
[  600.556690][T15929]  do_syscall_64+0x55/0xa0
[  600.561139][T15929]  ? clear_bhb_loop+0x40/0x90
[  600.565848][T15929]  ? clear_bhb_loop+0x40/0x90
[  600.570550][T15929]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  600.576477][T15929] RIP: 0033:0x7fc4cf59c629
[  600.580914][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.600640][T15929] RSP: 002b:00007fc4d04b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  600.609089][T15929] RAX: ffffffffffffffda RBX: 00007fc4cf816090 RCX: 00007fc4cf59c629
[  600.617093][T15929] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000004
[  600.625093][T15929] RBP: 00007fc4cf632b39 R08: 0000000000000000 R09: 0000000000000000
[  600.633084][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.641087][T15929] R13: 00007fc4cf816128 R14: 00007fc4cf816090 R15: 00007ffe0af43308
[  600.649091][T15929]  </TASK>
[  600.652132][T15929] 
[  600.654471][T15929] Allocated by task 7943:
[  600.658812][T15929]  kasan_set_track+0x4e/0x70
[  600.663532][T15929]  __kasan_kmalloc+0x8f/0xa0
[  600.668148][T15929]  __kmalloc+0xb4/0x230
[  600.672422][T15929]  fib6_info_alloc+0x30/0xf0
[  600.677043][T15929]  ip6_route_info_create+0x44f/0x1240
[  600.682530][T15929]  ip6_route_add+0x28/0x160
[  600.687144][T15929]  inet6_rtm_newroute+0x2ba/0x1c90
[  600.692288][T15929]  rtnetlink_rcv_msg+0x869/0xfa0
[  600.697247][T15929]  netlink_rcv_skb+0x241/0x4d0
[  600.702040][T15929]  netlink_unicast+0x751/0x8d0
[  600.706826][T15929]  netlink_sendmsg+0x8d0/0xbf0
[  600.711620][T15929]  ____sys_sendmsg+0x5ba/0x960
[  600.716404][T15929]  ___sys_sendmsg+0x2a6/0x360
[  600.721116][T15929]  __se_sys_sendmsg+0x1c2/0x2b0
[  600.725993][T15929]  do_syscall_64+0x55/0xa0
[  600.730447][T15929]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  600.736370][T15929] 
[  600.738723][T15929] The buggy address belongs to the object at ffff8880672d3300
[  600.738723][T15929]  which belongs to the cache kmalloc-192 of size 192
[  600.753057][T15929] The buggy address is located 22 bytes to the right of
[  600.753057][T15929]  allocated 184-byte region [ffff8880672d3300, ffff8880672d33b8)
[  600.767747][T15929] 
[  600.770089][T15929] The buggy address belongs to the physical page:
[  600.776624][T15929] page:ffffea00019cb4c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880672d3500 pfn:0x672d3
[  600.788196][T15929] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  600.795769][T15929] page_type: 0xffffffff()
[  600.800126][T15929] raw: 00fff00000000800 ffff888017c41a00 ffffea00010fb490 ffffea00009a58d0
[  600.808728][T15929] raw: ffff8880672d3500 000000000010000e 00000001ffffffff 0000000000000000
[  600.817677][T15929] page dumped because: kasan: bad access detected
[  600.824196][T15929] page_owner tracks the page as allocated
[  600.829976][T15929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6835, tgid 6835 (dhcpcd-run-hook), ts 135157011995, free_ts 135141598275
[  600.848840][T15929]  post_alloc_hook+0x1c1/0x200
[  600.853637][T15929]  get_page_from_freelist+0x1951/0x19e0
[  600.859208][T15929]  __alloc_pages+0x1f0/0x460
[  600.863818][T15929]  alloc_slab_page+0x4f/0x160
[  600.868515][T15929]  new_slab+0x87/0x2d0
[  600.872699][T15929]  ___slab_alloc+0xc5d/0x12f0
[  600.877401][T15929]  __kmem_cache_alloc_node+0x19e/0x250
[  600.882885][T15929]  __kmalloc_node+0xa4/0x230
[  600.887507][T15929]  memcg_alloc_slab_cgroups+0x87/0x130
[  600.892997][T15929]  new_slab+0xc3/0x2d0
[  600.897114][T15929]  ___slab_alloc+0xc5d/0x12f0
[  600.901818][T15929]  kmem_cache_alloc+0x1b3/0x2d0
[  600.906696][T15929]  vm_area_dup+0x61/0x270
[  600.911046][T15929]  copy_mm+0xca8/0x1d50
[  600.915245][T15929]  copy_process+0x16f7/0x3d80
[  600.919944][T15929]  kernel_clone+0x24b/0x8a0
[  600.924466][T15929] page last free stack trace:
[  600.929152][T15929]  free_unref_page_prepare+0x7b2/0x8c0
[  600.934655][T15929]  free_unref_page_list+0xbe/0x860
[  600.939795][T15929]  release_pages+0x1f7a/0x2200
[  600.944583][T15929]  tlb_flush_mmu+0x377/0x510
[  600.949204][T15929]  tlb_finish_mmu+0xc3/0x1d0
[  600.953821][T15929]  exit_mmap+0x428/0xb90
[  600.958085][T15929]  __mmput+0x118/0x3c0
[  600.962174][T15929]  exit_mm+0x1f2/0x2c0
[  600.966275][T15929]  do_exit+0x8dd/0x2460
[  600.970459][T15929]  do_group_exit+0x21b/0x2d0
[  600.975082][T15929]  __x64_sys_exit_group+0x3f/0x40
[  600.980146][T15929]  do_syscall_64+0x55/0xa0
[  600.984597][T15929]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  600.990514][T15929] 
[  600.992854][T15929] Memory state around the buggy address:
[  600.998498][T15929]  ffff8880672d3280: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  601.006574][T15929]  ffff8880672d3300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  601.014649][T15929] >ffff8880672d3380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  601.022722][T15929]                                               ^
[  601.029149][T15929]  ffff8880672d3400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  601.037248][T15929]  ffff8880672d3480: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  601.045338][T15929] ==================================================================
[  601.053775][T15929] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  601.060991][T15929] CPU: 0 PID: 15929 Comm: syz.4.3069 Not tainted syzkaller #0
[  601.068471][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  601.078809][T15929] Call Trace:
[  601.082106][T15929]  <TASK>
[  601.085071][T15929]  dump_stack_lvl+0x18c/0x250
[  601.089787][T15929]  ? show_regs_print_info+0x20/0x20
[  601.095012][T15929]  ? load_image+0x400/0x400
[  601.099546][T15929]  panic+0x2dc/0x730
[  601.103728][T15929]  ? bpf_jit_dump+0xd0/0xd0
[  601.108291][T15929]  ? _raw_spin_unlock_irqrestore+0xc0/0x120
[  601.114211][T15929]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  601.120128][T15929]  ? _raw_spin_unlock+0x40/0x40
[  601.125091][T15929]  ? print_memory_metadata+0x314/0x400
[  601.130664][T15929]  ? fib6_add+0x4680/0x46e0
[  601.135204][T15929]  check_panic_on_warn+0x84/0xa0
[  601.140167][T15929]  ? fib6_add+0x4680/0x46e0
[  601.144717][T15929]  end_report+0x6f/0x130
[  601.148995][T15929]  kasan_report+0x128/0x150
[  601.153521][T15929]  ? fib6_add+0x4680/0x46e0
[  601.158241][T15929]  fib6_add+0x4680/0x46e0
[  601.162609][T15929]  ? fib6_update_sernum_stub+0x1e0/0x1e0
[  601.168285][T15929]  ? do_raw_spin_lock+0x11f/0x2c0
[  601.173351][T15929]  ? __rwlock_init+0x150/0x150
[  601.178148][T15929]  ? ip6_route_add+0x75/0x160
[  601.182879][T15929]  ip6_route_add+0x8a/0x160
[  601.187406][T15929]  inet6_rtm_newroute+0x2ba/0x1c90
[  601.192547][T15929]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  601.198473][T15929]  ? __mutex_lock+0x94c/0xcc0
[  601.203178][T15929]  ? __lock_acquire+0x7d40/0x7d40
[  601.208231][T15929]  ? do_raw_spin_lock+0x11f/0x2c0
[  601.213282][T15929]  ? __rwlock_init+0x150/0x150
[  601.218073][T15929]  ? do_raw_spin_unlock+0x121/0x230
[  601.223388][T15929]  ? __mutex_lock+0x956/0xcc0
[  601.228101][T15929]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  601.233234][T15929]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  601.238362][T15929]  ? ipv6_route_sysctl_table_size+0x50/0x50
[  601.244456][T15929]  rtnetlink_rcv_msg+0x869/0xfa0
[  601.249770][T15929]  ? lockdep_hardirqs_on+0x98/0x150
[  601.254994][T15929]  ? rtnetlink_bind+0x80/0x80
[  601.259692][T15929]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  601.265700][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  601.270842][T15929]  ? lock_chain_count+0x20/0x20
[  601.275716][T15929]  ? __local_bh_enable_ip+0x13a/0x1c0
[  601.281127][T15929]  ? lockdep_hardirqs_on+0x98/0x150
[  601.286483][T15929]  ? __local_bh_enable_ip+0x13a/0x1c0
[  601.291896][T15929]  ? _local_bh_enable+0xa0/0xa0
[  601.296774][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  601.301913][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  601.307055][T15929]  ? __dev_queue_xmit+0x124f/0x36b0
[  601.312279][T15929]  ? __dev_queue_xmit+0x26b/0x36b0
[  601.317456][T15929]  ? ref_tracker_free+0x690/0x840
[  601.322526][T15929]  netlink_rcv_skb+0x241/0x4d0
[  601.327336][T15929]  ? rtnetlink_bind+0x80/0x80
[  601.332047][T15929]  ? netlink_ack+0x1180/0x1180
[  601.336946][T15929]  ? __lock_acquire+0x7d40/0x7d40
[  601.342013][T15929]  ? netlink_deliver_tap+0x2e/0x1b0
[  601.347257][T15929]  netlink_unicast+0x751/0x8d0
[  601.352075][T15929]  netlink_sendmsg+0x8d0/0xbf0
[  601.356902][T15929]  ? kasan_set_track+0x4e/0x70
[  601.361708][T15929]  ? netlink_getsockopt+0x590/0x590
[  601.366945][T15929]  ? aa_sock_msg_perm+0x94/0x150
[  601.371937][T15929]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  601.377267][T15929]  ? security_socket_sendmsg+0x80/0xa0
[  601.382736][T15929]  ? netlink_getsockopt+0x590/0x590
[  601.387932][T15929]  ____sys_sendmsg+0x5ba/0x960
[  601.392786][T15929]  ? __asan_memset+0x22/0x40
[  601.397374][T15929]  ? __sys_sendmsg_sock+0x30/0x30
[  601.402393][T15929]  ? __import_iovec+0x5f2/0x850
[  601.407437][T15929]  ? import_iovec+0x73/0xa0
[  601.411962][T15929]  ___sys_sendmsg+0x2a6/0x360
[  601.416735][T15929]  ? __lock_acquire+0x7d40/0x7d40
[  601.421781][T15929]  ? __sys_sendmsg+0x2a0/0x2a0
[  601.426660][T15929]  __se_sys_sendmsg+0x1c2/0x2b0
[  601.431516][T15929]  ? __x64_sys_sendmsg+0x80/0x80
[  601.436451][T15929]  ? lockdep_hardirqs_on+0x98/0x150
[  601.441662][T15929]  do_syscall_64+0x55/0xa0
[  601.446174][T15929]  ? clear_bhb_loop+0x40/0x90
[  601.450855][T15929]  ? clear_bhb_loop+0x40/0x90
[  601.455596][T15929]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  601.461487][T15929] RIP: 0033:0x7fc4cf59c629
[  601.465905][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.485531][T15929] RSP: 002b:00007fc4d04b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  601.493975][T15929] RAX: ffffffffffffffda RBX: 00007fc4cf816090 RCX: 00007fc4cf59c629
[  601.501947][T15929] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000004
[  601.510438][T15929] RBP: 00007fc4cf632b39 R08: 0000000000000000 R09: 0000000000000000
[  601.518407][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  601.526464][T15929] R13: 00007fc4cf816128 R14: 00007fc4cf816090 R15: 00007ffe0af43308
[  601.534464][T15929]  </TASK>
[  601.537882][T15929] Kernel Offset: disabled
[  601.542207][T15929] Rebooting in 86400 seconds..