last executing test programs:

9m36.376081247s ago: executing program 2 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@loopback, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x3a}, {0xffffffff, 0x4, 0x0, 0x2, 0x8004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xa}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4000000003, 0x0, 0x2, 0xa}}, 0x20)
pipe(&(0x7f0000000240))

9m35.320880273s ago: executing program 2 (id=25):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @private=0xa0100fe, @local}}}], 0x20}}], 0x1, 0x48c0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m32.128354391s ago: executing program 2 (id=31):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, 0x0, 0x0}, 0x20)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m30.998773988s ago: executing program 2 (id=32):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010)

9m29.563083994s ago: executing program 2 (id=36):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
r2 = semget$private(0x0, 0x6, 0x3b1)
semop(r2, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2)
semctl$GETZCNT(r2, 0x0, 0xf, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x3f00000000000000)

9m26.086644639s ago: executing program 2 (id=41):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000003c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}})
shmctl$SHM_UNLOCK(r3, 0xc)
semget(0x1, 0x1, 0x39c)

9m23.844998004s ago: executing program 32 (id=41):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000003c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}})
shmctl$SHM_UNLOCK(r3, 0xc)
semget(0x1, 0x1, 0x39c)

8m53.152058687s ago: executing program 1 (id=97):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x40000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_MARK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000814}, 0x40c0)
ioprio_get$pid(0x3, r1)

8m52.087343783s ago: executing program 1 (id=100):
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r1, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44)

8m50.737139367s ago: executing program 1 (id=103):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = syz_open_dev$mtd(0x0, 0x0, 0x20000)
ioctl$MTDFILEMODE(r3, 0x4d13, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
sendfile(r5, r4, 0x0, 0x7ffffffd)

8m43.788781807s ago: executing program 1 (id=114):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210805, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x584, &(0x7f0000000700)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010)

8m43.099753914s ago: executing program 1 (id=115):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x31, 0x0, &(0x7f00000002c0))
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0)
write(r1, &(0x7f0000000940)='naa.6', 0x5)

8m41.482117154s ago: executing program 1 (id=121):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
read$char_usb(r3, 0x0, 0x0)
ptrace(0x10, r1)
tkill(r1, 0x20)
ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000fc0))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4044042}, 0x200c0055)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20)
sendmsg$nl_generic(r0, 0x0, 0x4000000)

8m39.252151358s ago: executing program 33 (id=121):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
read$char_usb(r3, 0x0, 0x0)
ptrace(0x10, r1)
tkill(r1, 0x20)
ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000fc0))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4044042}, 0x200c0055)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r4, 0x40106f52, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20)
sendmsg$nl_generic(r0, 0x0, 0x4000000)

6m8.546900367s ago: executing program 0 (id=377):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299583d", 0xa}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10)

6m6.192500774s ago: executing program 0 (id=380):
socket$inet(0xa, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x6)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x16, 0x0, @void}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r4, &(0x7f0000000040)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000000000029000000020000006ca52a"], 0x28}}], 0x1, 0x4008040)
r5 = socket$inet(0x2, 0xa, 0x200000)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14008010)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)

6m5.026725883s ago: executing program 0 (id=381):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

6m3.364436294s ago: executing program 0 (id=386):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}]})
alarm(0x5)
socket$inet6(0xa, 0x80002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
fallocate(r5, 0x0, 0x10002, 0x8009)

6m1.997148997s ago: executing program 0 (id=389):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x6, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x3}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
r2 = inotify_init()
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)
symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0)

5m58.482916764s ago: executing program 0 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
ftruncate(r3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0}]})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001500192340834b80040d8c560211820fffff5bab4e210000000058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000040002000800030004000000224e0000", 0x58}], 0x1)

5m43.273597437s ago: executing program 34 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
ftruncate(r3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0}]})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001500192340834b80040d8c560211820fffff5bab4e210000000058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000040002000800030004000000224e0000", 0x58}], 0x1)

3m40.818719772s ago: executing program 7 (id=615):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x6}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000340)=""/174, 0xae}], 0x2, 0x2, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m34.452585108s ago: executing program 7 (id=636):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8d4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x2, 0x0, 0x0, 0x5, 0x0, 0x8}]}, {0x0, [0x30, 0x5f, 0x344055a408cb7db1]}}, 0x0, 0x29, 0x0, 0x1, 0x2}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x4040850)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r8=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r8}}, 0x10)
write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000800)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r8, 0x2}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)

3m32.504145606s ago: executing program 7 (id=629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x2, 0x9, 0x8001, 'pptp\x00', 'syz0\x00', {0x6f7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)

3m30.27866973s ago: executing program 7 (id=630):
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000001680)={{}, 'port0\x00', 0x92, 0x1a047c, 0x7fff, 0x8, 0x1ff, 0x0, 0x3, 0x0, 0x5})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10)
fchdir(0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)

3m26.997004161s ago: executing program 7 (id=635):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
r2 = inotify_init()
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)
symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0)

3m24.734309717s ago: executing program 7 (id=641):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040194)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
r2 = epoll_create1(0x80000)
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0)

3m9.641556537s ago: executing program 35 (id=641):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040194)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
r2 = epoll_create1(0x80000)
r3 = getpid()
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48ba", 0xa0)

1m0.629378953s ago: executing program 3 (id=821):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r2 = openat(r0, 0x0, 0x2, 0x0)
write(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='rdma', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000500)='172.20.20.20\x00', 0xd)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8)

58.73771349s ago: executing program 3 (id=823):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x4000080)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)

53.427525789s ago: executing program 3 (id=828):
openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0)
clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0)

50.174812569s ago: executing program 3 (id=836):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r1=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r5)
timer_settime(r1, 0x1, 0x0, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c000000020601000600000600000000000a00000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)

47.102671735s ago: executing program 3 (id=839):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
r2 = inotify_init()
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)
symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0)

45.312282219s ago: executing program 3 (id=841):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)

29.955103476s ago: executing program 36 (id=841):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)

21.674219549s ago: executing program 5 (id=872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
r2 = inotify_init()
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$vsock_stream(0x28, 0x1, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)

19.562574821s ago: executing program 5 (id=875):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)
ptrace(0x10, r2)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)

19.212073019s ago: executing program 6 (id=877):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38)

11.725010583s ago: executing program 9 (id=861):
epoll_create1(0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000200)={0x1, @vbi={0x7, 0x1, 0x1, 0x3a324152, [0xfffffffb, 0xdeee], [0x4, 0x4], 0x13a}})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'wg1\x00'}}, 0x1e)
sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x11, &(0x7f0000000880)="50985cd3baad0be6a3f42c443af29c8238500bfcee38ff73921861daa76438cab539db44cba23aa57a8164325d30be2564c6ebd5c1f37a4f5474c7ca2ec0984f28dce4dc83fdee987b0d06e40ddf2288fba3bd7bc22cc4f30c3f7a7a4ca1f05310abdcea6b9951d381bbfb4617abbd701a4f8d64564fbe2d3497e7fca4e2f1c270bf9775ad6cfc", 0x87)
socket$inet(0x2b, 0x801, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x100000000000000)

11.722871503s ago: executing program 6 (id=888):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)
ptrace(0x10, r2)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

11.712947123s ago: executing program 5 (id=889):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x2, 0x2003)

9.594822096s ago: executing program 9 (id=878):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x4000080)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)

9.594001525s ago: executing program 8 (id=892):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)
ptrace(0x10, r2)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

9.593088305s ago: executing program 6 (id=880):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50", 0x47}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a2e", 0x96}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50", 0x18}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.592861896s ago: executing program 5 (id=881):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38)

8.253763048s ago: executing program 9 (id=882):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29", 0x5}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10)

7.545292576s ago: executing program 8 (id=883):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299", 0x8}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10)

7.232662963s ago: executing program 5 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
r2 = inotify_init()
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$vsock_stream(0x28, 0x1, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)

6.262346137s ago: executing program 4 (id=891):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

6.104044771s ago: executing program 9 (id=893):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)
ptrace(0x10, r2)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)

6.038369292s ago: executing program 4 (id=894):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x2, 0x2003)

5.966507214s ago: executing program 8 (id=895):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)
ptrace(0x10, r2)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x3, 0x200, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x81, 0xfffffffd, 0x800, 0x32, 0x0, 0xfffffffe, 0x80000, 0x85, 0xfffffffd, 0x0, 0x9, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x9fa, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xbda6, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x800, 0xfffeffe4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x5, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x4, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)

5.942228185s ago: executing program 6 (id=896):
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)

4.89875149s ago: executing program 5 (id=897):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r0, 0x1)

4.89855412s ago: executing program 4 (id=898):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1})
eventfd2(0x5, 0x1)
ioperm(0x9, 0xa1d7, 0x80000004)
ptrace(0x10, r2)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x2, 0x2003)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x20000, 0x1, 0x288})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

4.021117262s ago: executing program 6 (id=899):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38)

3.933786924s ago: executing program 9 (id=900):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x4000009)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
listen(0xffffffffffffffff, 0xc)
listen(0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x18}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)

3.093708295s ago: executing program 8 (id=901):
eventfd2(0x5, 0x1)

1.975370802s ago: executing program 4 (id=902):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r0, 0x1)

1.731775338s ago: executing program 4 (id=903):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r1=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r5)
timer_settime(r1, 0x1, 0x0, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c000000020601000600000600000000000a00000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000"], 0x6c}}, 0x40000)

1.725419068s ago: executing program 8 (id=913):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xffff, @local, 0x9}}}, 0x38)

1.725139138s ago: executing program 6 (id=904):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29", 0x5}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10)

631.280436ms ago: executing program 9 (id=905):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299", 0x8}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10)

449.73888ms ago: executing program 8 (id=906):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

0s ago: executing program 4 (id=907):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
r2 = inotify_init()
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)
symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

link becomes ready
[  194.653573][ T4941] device veth1_macvtap entered promiscuous mode
[  194.671385][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.681157][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  196.396918][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.443151][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.477639][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.488437][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.524311][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.571629][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.603042][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.630576][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.703614][ T4941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.717706][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.731533][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.747044][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.760420][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.775384][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.818218][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.858990][ T4941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.915594][ T4941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.926993][ T4941] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.940893][ T4941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.976021][ T4941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.530559][ T5282] xt_CT: No such helper "snmp_trap"
[  197.742176][ T4941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.783025][ T4941] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.153216][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.162141][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  199.352899][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  199.362350][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  199.423539][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'.
[  199.505014][ T5297] tipc: Started in network mode
[  199.509930][ T5297] tipc: Node identity fa292f9df801, cluster identity 4711
[  199.587069][ T5297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.675860][ T5293] tipc: Resetting bearer <eth:syzkaller0>
[  199.753490][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.922913][ T5292] tipc: Disabling bearer <eth:syzkaller0>
[  199.929596][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.002047][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  200.540952][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.565330][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.656768][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  201.588434][ T5323] loop4: detected capacity change from 0 to 4096
[  201.610402][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[  201.800461][ T5323] ntfs: volume version 3.1.
[  204.065993][ T5337] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  204.197815][  T126] Bluetooth: Patch file not found ar3k/AthrBT_0xd3674841.dfu
[  204.250491][ T5337] udc usbip-vudc.0: failed to start g1: -19
[  204.475662][ T5337] UDC core: g1: couldn't find an available UDC or it's busy
[  204.648313][  T126] Bluetooth: Loading patch file failed
[  204.653939][  T126] ath3k: probe of 5-1:0.0 failed with error -110
[  204.666684][  T126] usb 5-1: USB disconnect, device number 2
[  205.000382][ T5345] Invalid option length (1047276) for dns_resolver key
[  207.248621][ T5363] netlink: 28 bytes leftover after parsing attributes in process `syz.5.196'.
[  209.049296][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[  209.062065][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[  209.072038][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[  209.083358][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[  209.093630][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[  209.153799][ T4288] Bluetooth: hci1: command 0x0405 tx timeout
[  209.538078][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  209.550423][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.559659][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  214.399178][ T5405] xt_CT: No such helper "snmp_trap"
[  215.164372][ T5422] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  215.184388][ T5422] udc usbip-vudc.0: failed to start g1: -19
[  215.190724][ T5422] UDC core: g1: couldn't find an available UDC or it's busy
[  215.762019][ T5431] loop5: detected capacity change from 0 to 4096
[  217.237555][ T5431] ntfs: volume version 3.1.
[  217.264389][ T5439] zram0: detected capacity change from 0 to 8
[  217.370969][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.222'.
[  218.587748][   T26] audit: type=1326 audit(1786467931.856:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  218.745557][   T26] audit: type=1326 audit(1786467931.856:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  218.844714][ T5445] team0: Port device team_slave_0 removed
[  218.896571][   T26] audit: type=1326 audit(1786467931.856:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  218.985654][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  218.992573][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  219.002789][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  219.014133][ T5456] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  219.027830][ T5456] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  219.055025][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  219.063084][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  219.071479][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  219.094059][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  219.101600][ T5456] virt_wifi0 speed is unknown, defaulting to 1000
[  219.124746][   T26] audit: type=1326 audit(1786467931.856:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  219.221973][   T26] audit: type=1326 audit(1786467931.856:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  219.262144][   T26] audit: type=1326 audit(1786467931.856:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  220.804293][   T26] audit: type=1326 audit(1786467931.856:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  220.903123][   T26] audit: type=1326 audit(1786467931.856:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  221.014011][   T26] audit: type=1326 audit(1786467931.856:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  221.079524][   T26] audit: type=1326 audit(1786467931.856:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.5.226" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a019e0d9 code=0x7ffc0000
[  225.059369][ T5496] syz.3.232 (5496): drop_caches: 2
[  227.152644][ T5530] loop6: detected capacity change from 0 to 4096
[  227.651300][ T5530] ntfs: volume version 3.1.
[  231.406203][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.245'.
[  231.422731][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.245'.
[  231.448493][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.245'.
[  231.461305][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.245'.
[  231.582842][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.245'.
[  235.427970][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  235.428000][   T26] audit: type=1800 audit(1786467949.126:23): pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.242" name="nexus" dev="configfs" ino=38859 res=0 errno=0
[  238.859005][ T5614] loop3: detected capacity change from 0 to 512
[  239.748687][ T5614] EXT4-fs: test_dummy_encryption requires encrypt feature
[  239.846645][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'.
[  239.948644][   T26] audit: type=1800 audit(1786467953.646:24): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.252" name="scan_secs" dev="configfs" ino=39958 res=0 errno=0
[  240.937316][ T5638] virt_wifi0 speed is unknown, defaulting to 1000
[  242.165516][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  244.399594][ T5662] loop5: detected capacity change from 0 to 512
[  244.590173][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'.
[  244.599447][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'.
[  244.789872][ T5662] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  245.083839][ T5662] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.937508][ T5680] loop4: detected capacity change from 0 to 512
[  246.032108][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.274'.
[  246.044117][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.274'.
[  246.054109][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.274'.
[  246.063708][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.274'.
[  246.072931][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.274'.
[  246.181176][ T4607] EXT4-fs (loop5): unmounting filesystem.
[  246.373941][ T5680] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  246.460390][ T5680] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  246.479742][ T5680] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.275: corrupted xattr entries
[  246.494552][ T5680] EXT4-fs (loop4): Remounting filesystem read-only
[  246.501113][ T5680] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  246.636277][ T5680] EXT4-fs (loop4): 1 truncate cleaned up
[  246.653098][ T5680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  247.934091][ T5702] netlink: 'syz.5.278': attribute type 2 has an invalid length.
[  248.600263][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  248.621188][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'.
[  248.822267][   T26] audit: type=1326 audit(1786467962.516:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5705 comm="syz.5.282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73a019e0d9 code=0x0
[  252.025464][ T5725] ceph: No mds server is up or the cluster is laggy
[  252.033232][   T22] libceph: connect (1)[c::]:6789 error -101
[  252.040938][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  252.225927][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[  252.237133][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[  252.247758][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[  252.258825][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[  252.268817][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[  255.399189][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.406833][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.120521][ T5762] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  257.021655][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[  257.243659][ T5773] 9pnet_fd: p9_fd_create_tcp (5773): problem connecting socket to 127.0.0.1
[  260.788511][ T5803] loop6: detected capacity change from 0 to 4096
[  261.687719][ T5803] ntfs: volume version 3.1.
[  261.939073][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  261.950493][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  262.781743][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  262.793598][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  262.804692][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  263.749800][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'.
[  263.761000][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'.
[  263.771060][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'.
[  263.780750][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'.
[  264.718222][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'.
[  265.209028][ T5831] loop5: detected capacity change from 0 to 512
[  265.334945][ T5831] EXT4-fs: Ignoring removed i_version option
[  265.341066][ T5831] EXT4-fs: Ignoring removed bh option
[  265.874756][ T5831] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.307: inode #13: comm syz.5.307: iget: illegal inode #
[  265.973361][ T5831] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.307: couldn't read orphan inode 13 (err -117)
[  265.998235][ T5831] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  267.154344][ T4607] EXT4-fs (loop5): unmounting filesystem.
[  270.492798][  T129] libceph: connect (1)[c::]:6789 error -101
[  270.511317][ T5880] ceph: No mds server is up or the cluster is laggy
[  270.540459][  T129] libceph: mon0 (1)[c::]:6789 connect error
[  270.660609][ T5898] loop3: detected capacity change from 0 to 512
[  270.743026][ T5898] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.313: Unrecognised inode hash code 255
[  270.886177][ T5898] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.313: Corrupt directory, running e2fsck is recommended
[  270.933114][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  270.944434][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  270.954329][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  270.964102][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  270.973459][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'.
[  271.613030][ T5898] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  271.621373][ T5898] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.313: corrupted in-inode xattr
[  271.695495][ T5898] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.313: couldn't read orphan inode 15 (err -117)
[  271.714258][ T5909] capability: warning: `syz.0.318' uses 32-bit capabilities (legacy support in use)
[  271.755047][ T5898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  271.995303][ T5913] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  272.127882][ T5921] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.313: Unrecognised inode hash code 255
[  272.139453][ T5921] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.313: Corrupt directory, running e2fsck is recommended
[  272.153590][ T5921] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 4: comm syz.3.313: path /75/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0
[  272.781472][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  273.654490][ T5929] loop6: detected capacity change from 0 to 40427
[  273.797784][ T5929] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  274.598436][ T5938] 9pnet_virtio: no channels available for device 127.0.0.1
[  275.847962][ T5941] virt_wifi0 speed is unknown, defaulting to 1000
[  278.754040][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  282.643354][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[  282.654801][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[  282.670289][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[  282.679976][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[  282.689348][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[  283.073382][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  285.643146][ T4320] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  286.263044][ T4320] usb 5-1: Using ep0 maxpacket: 32
[  286.284608][ T4320] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  286.712162][ T4320] usb 5-1: config 0 has too many interfaces: 92, using maximum allowed: 32
[  286.749602][ T4320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.694951][ T4320] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 92
[  287.705651][ T4320] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  287.715018][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.738116][ T4320] usb 5-1: config 0 descriptor??
[  288.964083][ T4320] usb 5-1: can't set config #0, error -71
[  289.031118][ T4320] usb 5-1: USB disconnect, device number 3
[  289.554152][ T6040] tmpfs: Bad value for 'mpol'
[  291.564374][ T6060] loop6: detected capacity change from 0 to 128
[  291.604257][ T6060] FAT-fs (loop6): bogus number of FAT structure
[  291.619211][ T6060] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  291.639062][ T6060] FAT-fs (loop6): Can't find a valid FAT filesystem
[  293.567481][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.352'.
[  295.326559][ T6141] wlan0 speed is unknown, defaulting to 1000
[  295.333911][ T6141] wlan0 speed is unknown, defaulting to 1000
[  295.340325][ T6141] wlan0 speed is unknown, defaulting to 1000
[  295.352608][ T6141] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  295.389913][ T6141] wlan0 speed is unknown, defaulting to 1000
[  295.396939][ T6141] wlan0 speed is unknown, defaulting to 1000
[  295.403963][ T6141] wlan0 speed is unknown, defaulting to 1000
[  295.410853][ T6141] wlan0 speed is unknown, defaulting to 1000
[  295.417817][ T6141] wlan0 speed is unknown, defaulting to 1000
[  296.805644][ T6145] tmpfs: Bad value for 'mpol'
[  298.669715][ T6162] loop5: detected capacity change from 0 to 2048
[  298.712714][ T6157] loop3: detected capacity change from 0 to 8192
[  298.764300][ T6162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  298.773590][ T6162] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.005302][ T6169] loop6: detected capacity change from 0 to 1024
[  299.088967][ T4607] EXT4-fs (loop5): unmounting filesystem.
[  300.095329][ T6175] netlink: 23 bytes leftover after parsing attributes in process `syz.5.363'.
[  300.251285][   T22] libceph: connect (1)[c::]:6789 error -101
[  300.278006][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  300.394323][ T6175] ceph: No mds server is up or the cluster is laggy
[  300.668426][   T22] libceph: connect (1)[c::]:6789 error -101
[  300.689576][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  301.276337][ T6187] netlink: 52 bytes leftover after parsing attributes in process `syz.4.365'.
[  301.313539][   T22] libceph: connect (1)[c::]:6789 error -101
[  301.319561][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  302.920795][ T6204] dummy_hcd dummy_hcd.0: remove, state 4
[  303.012282][ T6204] usb usb1: USB disconnect, device number 1
[  303.256669][ T6204] dummy_hcd dummy_hcd.0: stopped
[  303.261779][ T6204] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  304.956604][ T6226] loop3: detected capacity change from 0 to 256
[  304.981511][ T6226] FAT-fs (loop3): "posix" option is obsolete, not supported now
[  305.164029][ T6229] loop4: detected capacity change from 0 to 1024
[  306.047090][ T6229] hfsplus: unable to parse mount options
[  308.166790][ T4320] libceph: connect (1)[c::]:6789 error -101
[  308.172793][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  308.255540][ T6240] ceph: No mds server is up or the cluster is laggy
[  309.816052][   T26] audit: type=1800 audit(1786468023.516:26): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.382" name="nexus" dev="configfs" ino=41202 res=0 errno=0
[  311.149124][   T26] audit: type=1800 audit(1786468024.846:27): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.384" name="nexus" dev="configfs" ino=41220 res=0 errno=0
[  311.364658][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  311.374316][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  311.383389][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  311.392337][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  311.401383][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  311.571263][ T6290] loop6: detected capacity change from 0 to 512
[  311.629962][ T6290] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  311.690977][ T6290] EXT4-fs (loop6): 1 truncate cleaned up
[  311.711842][ T6290] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  313.695549][ T6306] loop4: detected capacity change from 0 to 2048
[  316.107574][ T6306] EXT4-fs: error -4 creating inode table initialization thread
[  316.115872][ T6306] EXT4-fs (loop4): mount failed
[  316.214859][ T4941] EXT4-fs (loop6): unmounting filesystem.
[  316.222126][ T6302] ceph: No mds server is up or the cluster is laggy
[  316.229142][ T4320] libceph: connect (1)[c::]:6789 error -101
[  316.235735][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  316.331602][ T6320] loop3: detected capacity change from 0 to 1024
[  316.529857][ T4320] libceph: connect (1)[c::]:6789 error -101
[  316.583163][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  316.859992][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  316.886672][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.718936][   T26] audit: type=1800 audit(1786468031.416:28): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.397" name="nexus" dev="configfs" ino=40769 res=0 errno=0
[  320.109923][ T6368] loop6: detected capacity change from 0 to 256
[  321.118744][ T6368] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  321.199873][ T6373] loop3: detected capacity change from 0 to 1024
[  321.219879][ T6373] hfsplus: unable to parse mount options
[  323.528149][ T4320] libceph: connect (1)[c::]:6789 error -101
[  323.535988][ T6388] ceph: No mds server is up or the cluster is laggy
[  323.544072][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  323.669689][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'.
[  323.688272][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'.
[  323.697271][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'.
[  323.706208][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'.
[  323.715089][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.418'.
[  323.798950][ T6396] loop4: detected capacity change from 0 to 1024
[  325.499059][ T6421] device syzkaller0 entered promiscuous mode
[  325.528946][ T6421] tipc: Started in network mode
[  325.547535][ T6421] tipc: Node identity a2fdf370b172, cluster identity 4711
[  328.052333][ T6421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.494171][ T6420] tipc: Resetting bearer <eth:syzkaller0>
[  329.996665][ T6420] tipc: Disabling bearer <eth:syzkaller0>
[  331.354918][ T6454] ceph: No mds server is up or the cluster is laggy
[  331.363299][ T4320] libceph: connect (1)[c::]:6789 error -101
[  331.369287][ T4320] libceph: mon0 (1)[c::]:6789 connect error
[  331.399237][  T126] tipc: Node number set to 328201072
[  332.524252][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'.
[  332.535598][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'.
[  332.544600][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'.
[  332.554533][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'.
[  332.564032][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'.
[  334.760201][ T6487] loop5: detected capacity change from 0 to 128
[  335.016069][ T6487] FAT-fs (loop5): bogus number of FAT structure
[  335.022417][ T6487] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  335.103095][ T6487] FAT-fs (loop5): Can't find a valid FAT filesystem
[  336.264856][   T26] audit: type=1800 audit(1786468049.966:29): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.426" name="nexus" dev="configfs" ino=41991 res=0 errno=0
[  336.763041][ T6507] loop3: detected capacity change from 0 to 512
[  336.843440][ T6507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  337.582265][ T6514] loop4: detected capacity change from 0 to 256
[  337.650347][ T6507] EXT4-fs (loop3): 1 truncate cleaned up
[  337.704185][ T6507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  337.767663][ T6514] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  340.434307][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  340.453137][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  340.462241][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  340.485754][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  340.491689][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  340.499800][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  340.508126][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  340.805758][ T6538] device syzkaller0 entered promiscuous mode
[  340.955767][ T6539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.242656][ T6539] tipc: Resetting bearer <eth:syzkaller0>
[  341.336547][ T6537] tipc: Resetting bearer <eth:syzkaller0>
[  341.401459][ T6537] tipc: Disabling bearer <eth:syzkaller0>
[  341.417127][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.436'.
[  342.593246][ T4278] Bluetooth: hci5: command 0x0409 tx timeout
[  342.792677][ T6527] chnl_net:caif_netlink_parms(): no params data found
[  342.860003][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.450'.
[  342.869964][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.450'.
[  342.879568][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.450'.
[  342.888661][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.450'.
[  342.897595][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.450'.
[  343.189517][   T26] audit: type=1800 audit(1786468056.886:30): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.441" name="nexus" dev="configfs" ino=41756 res=0 errno=0
[  343.283045][ T4320] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  344.275587][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.282757][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.292171][ T4320] usb 6-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  344.303115][ T4320] usb 6-1: config 0 interface 0 has no altsetting 0
[  344.340268][ T6527] device bridge_slave_0 entered promiscuous mode
[  344.393909][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.402002][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.419820][ T6527] device bridge_slave_1 entered promiscuous mode
[  345.010029][ T4278] Bluetooth: hci5: command 0x041b tx timeout
[  345.110431][ T4320] usb 6-1: string descriptor 0 read error: -71
[  345.118934][ T4320] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  345.202999][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  346.610259][ T4541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.852079][ T4320] usb 6-1: config 0 descriptor??
[  346.862410][ T4320] usb 6-1: can't set config #0, error -71
[  346.872653][ T4320] usb 6-1: USB disconnect, device number 2
[  346.955634][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.030922][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'.
[  347.042105][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.073207][ T4278] Bluetooth: hci5: command 0x040f tx timeout
[  347.083261][ T6602] futex_wake_op: syz.5.447 tries to shift op by 144; fix this program
[  347.243329][ T4541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.417571][ T6527] team0: Port device team_slave_0 added
[  348.367569][ T4541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.457658][ T6527] team0: Port device team_slave_1 added
[  348.613519][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.620646][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.743014][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.832531][ T4541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.874501][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.881506][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.948126][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.154667][ T4278] Bluetooth: hci5: command 0x0419 tx timeout
[  349.165684][ T6527] device hsr_slave_0 entered promiscuous mode
[  349.185924][ T6527] device hsr_slave_1 entered promiscuous mode
[  349.203214][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.222186][ T6527] Cannot create hsr debugfs directory
[  349.300213][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  349.384175][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  349.393488][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  349.402460][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  349.411462][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  349.421245][ T4541] tipc: Left network mode
[  351.233136][ T4278] Bluetooth: hci5: command 0x0405 tx timeout
[  351.454272][ T6635] sctp: [Deprecated]: syz.3.454 (pid 6635) Use of struct sctp_assoc_value in delayed_ack socket option.
[  351.454272][ T6635] Use struct sctp_sack_info instead
[  353.353820][ T6527] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  354.452872][ T6527] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  355.386490][ T6527] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  355.659820][   T26] audit: type=1800 audit(1786468069.356:31): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.460" name="nexus" dev="configfs" ino=43193 res=0 errno=0
[  355.699796][ T6527] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  355.986244][   T26] audit: type=1800 audit(1786468069.686:32): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.455" name="nexus" dev="configfs" ino=43197 res=0 errno=0
[  356.456658][ T6671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  356.560781][ T6671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  356.573327][ T6671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  356.715547][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'.
[  357.264065][ T6688] 9pnet_virtio: no channels available for device 127.0.0.1
[  357.967423][ T6690] loop4: detected capacity change from 0 to 64
[  358.107878][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.257820][ T6695] loop6: detected capacity change from 0 to 512
[  358.309083][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'.
[  359.084407][ T6527] 8021q: adding VLAN 0 to HW filter on device team0
[  359.111486][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  359.128291][ T6695] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  359.153538][ T6695] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  359.167688][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  359.651144][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  359.672170][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  359.713355][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.720579][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.759411][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  359.787733][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  360.600711][   T26] audit: type=1326 audit(1786468074.116:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  360.693345][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.700429][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.755644][   T26] audit: type=1326 audit(1786468074.116:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  360.759545][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  360.861276][   T26] audit: type=1326 audit(1786468074.116:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  360.901411][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  360.926515][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  360.956184][   T26] audit: type=1326 audit(1786468074.116:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  361.370422][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.381512][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.388594][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.402198][ T6723] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  361.421311][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.428836][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.436334][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.443895][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.451317][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.458665][ T6723] virt_wifi0 speed is unknown, defaulting to 1000
[  361.585237][ T4941] EXT4-fs (loop6): unmounting filesystem.
[  361.621277][ T4541] device hsr_slave_0 left promiscuous mode
[  361.648315][   T26] audit: type=1326 audit(1786468074.116:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  361.672829][ T4541] device hsr_slave_1 left promiscuous mode
[  361.813105][   T26] audit: type=1326 audit(1786468074.126:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  361.875230][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.882728][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.933369][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.940882][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.106205][   T26] audit: type=1326 audit(1786468074.126:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  362.142015][   T26] audit: type=1326 audit(1786468074.126:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  362.211351][   T26] audit: type=1326 audit(1786468074.126:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  362.274396][ T6741] loop5: detected capacity change from 0 to 512
[  362.868973][   T26] audit: type=1326 audit(1786468074.126:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  362.894131][ T6741] EXT4-fs: test_dummy_encryption requires encrypt feature
[  362.948165][   T26] audit: type=1326 audit(1786468074.126:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc042b9e0d9 code=0x7ffc0000
[  364.797240][ T4541] device bridge_slave_1 left promiscuous mode
[  364.911793][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.003944][ T4541] device bridge_slave_0 left promiscuous mode
[  365.010174][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.289249][ T4541] device veth1_macvtap left promiscuous mode
[  366.306761][ T4541] device veth0_macvtap left promiscuous mode
[  366.313331][ T4541] device veth1_vlan left promiscuous mode
[  366.319196][ T4541] device veth0_vlan left promiscuous mode
[  368.456020][ T4541] team0 (unregistering): Port device team_slave_1 removed
[  368.549867][ T6780] loop3: detected capacity change from 0 to 512
[  368.585042][ T4541] team0 (unregistering): Port device team_slave_0 removed
[  368.643688][ T6780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  368.673128][ T6780] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.755248][ T4541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.840164][ T4541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.988147][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  368.988243][   T26] audit: type=1800 audit(1786468082.686:51): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.486" name="nexus" dev="configfs" ino=42414 res=0 errno=0
[  369.941569][ T6796] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  372.672407][ T4541] bond0 (unregistering): Released all slaves
[  372.799364][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  372.814742][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  372.843974][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  372.871348][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  372.891633][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  372.907680][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.478'.
[  373.049678][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.489'.
[  373.090120][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  373.124562][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  373.233327][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  373.333433][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  373.341996][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  374.715419][ T6816] tty tty31: ldisc open failed (-12), clearing slot 30
[  375.015893][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  375.196263][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  375.235303][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  376.443992][   T26] audit: type=1800 audit(1786468090.146:52): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.497" name="nexus" dev="configfs" ino=43526 res=0 errno=0
[  376.885831][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'.
[  376.895405][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'.
[  377.607693][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'.
[  377.616748][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'.
[  377.625633][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'.
[  378.289181][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.296077][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.713193][ T6857] vivid-003: disconnect
[  379.123518][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  379.162057][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  379.179133][ T6851] vivid-003: reconnect
[  379.197126][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.450329][ T6867] loop4: detected capacity change from 0 to 128
[  379.480642][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  379.490342][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  379.499832][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  379.508876][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  379.517783][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'.
[  379.643071][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'.
[  379.663157][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'.
[  379.672251][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'.
[  379.681332][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'.
[  379.690254][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'.
[  381.830855][   T26] audit: type=1800 audit(1786468095.526:53): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.509" name="nexus" dev="configfs" ino=42570 res=0 errno=0
[  381.859671][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  381.930736][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  382.429088][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  382.453553][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  382.492377][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  382.534078][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  382.725918][ T6527] device veth0_vlan entered promiscuous mode
[  383.150601][ T6905] file system registered
[  383.709128][ T6908] siw: device registration error -23
[  383.742837][ T6527] device veth1_vlan entered promiscuous mode
[  383.902662][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  383.912321][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  383.923529][   T26] audit: type=1326 audit(1786468097.416:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  384.160232][ T6527] device veth0_macvtap entered promiscuous mode
[  384.358629][   T26] audit: type=1326 audit(1786468097.416:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  384.421532][ T6527] device veth1_macvtap entered promiscuous mode
[  384.426730][   T26] audit: type=1326 audit(1786468097.416:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  385.119905][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  385.283301][   T26] audit: type=1326 audit(1786468097.416:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  385.307757][   T26] audit: type=1326 audit(1786468097.416:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  385.312165][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  385.482365][   T26] audit: type=1326 audit(1786468097.426:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  385.527208][   T26] audit: type=1326 audit(1786468097.426:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  385.558289][   T26] audit: type=1326 audit(1786468097.426:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  385.617249][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.627884][   T26] audit: type=1326 audit(1786468097.426:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.6.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a2d9e0d9 code=0x7ffc0000
[  385.689029][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.723219][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.774495][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.787454][ T6928] loop6: detected capacity change from 0 to 1024
[  386.215658][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.572994][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.597228][ T6928] hfsplus: unable to parse mount options
[  386.633916][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.333616][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.378368][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.446393][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  387.461363][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  387.484403][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.522786][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  387.522801][   T26] audit: type=1800 audit(1786468101.216:66): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.521" name="nexus" dev="configfs" ino=42666 res=0 errno=0
[  387.551968][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.563312][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.582418][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.596767][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.608060][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.627813][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  387.693427][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.739530][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.747370][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  388.785950][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  389.085128][ T6527] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.112932][ T6527] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.745734][ T6527] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.754793][ T6527] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.534475][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.542342][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.627268][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  390.673379][ T4682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.681251][ T4682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.714647][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  391.651448][ T6986] __nla_validate_parse: 1 callbacks suppressed
[  391.651482][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[  392.315887][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[  392.424940][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[  392.543116][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[  392.565107][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[  393.917699][   T26] audit: type=1800 audit(1786468107.616:67): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.533" name="nexus" dev="configfs" ino=42836 res=0 errno=0
[  398.345244][ T7028] vivid-001: disconnect
[  400.277700][ T7021] vivid-001: reconnect
[  400.477873][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.545'.
[  400.509393][ T7036] loop4: detected capacity change from 0 to 512
[  400.560537][ T7036] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.543: Unrecognised inode hash code 255
[  400.572302][ T7036] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.543: Corrupt directory, running e2fsck is recommended
[  400.598261][ T7036] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  400.653252][ T7036] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.543: corrupted in-inode xattr
[  400.751887][ T7036] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.543: couldn't read orphan inode 15 (err -117)
[  400.826016][ T7036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  401.104104][ T7044] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  401.208220][ T7056] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.543: Unrecognised inode hash code 255
[  401.219954][ T7056] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.543: Corrupt directory, running e2fsck is recommended
[  401.234610][ T7056] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 4: comm syz.4.543: path /120/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0
[  401.898356][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  403.485235][ T7065] loop4: detected capacity change from 0 to 1024
[  403.583804][ T7065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  404.502446][ T7081] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  404.608216][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.551'.
[  404.645155][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.551'.
[  404.663231][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.551'.
[  404.684023][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.551'.
[  404.747122][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.551'.
[  404.767849][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.544'.
[  404.778200][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.544'.
[  404.787475][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.544'.
[  404.796544][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.544'.
[  404.867498][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  405.618377][ T7088] ip6t_rpfilter: unknown options
[  406.185887][   T26] audit: type=1800 audit(1786468119.886:68): pid=7097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.554" name="nexus" dev="configfs" ino=42932 res=0 errno=0
[  407.412664][ T7110] __nla_validate_parse: 1 callbacks suppressed
[  407.412688][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.557'.
[  408.441642][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.557'.
[  408.455120][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.557'.
[  408.464932][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.557'.
[  408.474321][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.557'.
[  409.141152][ T7129] siw: device registration error -23
[  409.363544][   T26] audit: type=1326 audit(1786468122.846:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  409.783409][   T26] audit: type=1326 audit(1786468122.846:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  409.825414][   T26] audit: type=1326 audit(1786468122.856:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  409.916382][   T26] audit: type=1326 audit(1786468122.856:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  411.515690][   T26] audit: type=1326 audit(1786468122.856:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  412.270061][ T7139] ip6t_rpfilter: unknown options
[  412.503916][   T26] audit: type=1326 audit(1786468122.856:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  413.005356][   T26] audit: type=1326 audit(1786468122.856:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  414.746180][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.565'.
[  414.771992][   T26] audit: type=1326 audit(1786468122.856:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  415.013236][   T26] audit: type=1326 audit(1786468122.856:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  415.143082][   T26] audit: type=1326 audit(1786468122.856:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  415.288254][   T26] audit: type=1326 audit(1786468122.856:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  415.383794][   T26] audit: type=1326 audit(1786468122.866:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.7.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe318f9e0d9 code=0x7ffc0000
[  416.054523][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  416.077130][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  416.086231][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  416.095668][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  416.104613][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  416.241611][   T26] audit: type=1800 audit(1786468129.936:81): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.567" name="nexus" dev="configfs" ino=44382 res=0 errno=0
[  416.917630][   T26] audit: type=1326 audit(1786468130.616:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feff159e0d9 code=0x0
[  418.054243][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  418.072570][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  418.081089][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  421.078303][ T7198] ip6t_rpfilter: unknown options
[  423.909414][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'.
[  423.934085][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'.
[  423.943320][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'.
[  423.952252][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'.
[  423.961212][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.581'.
[  424.193764][ T7225] vivid-000: disconnect
[  424.711702][ T7223] vivid-000: reconnect
[  424.850622][   T26] audit: type=1326 audit(1786468138.546:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.6.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80a2d9e0d9 code=0x0
[  431.213172][ T7262] ip6t_rpfilter: unknown options
[  439.716931][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.723336][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  441.145863][ T7327] loop3: detected capacity change from 0 to 512
[  441.204792][ T7327] EXT4-fs: Ignoring removed i_version option
[  441.210970][ T7327] EXT4-fs: Ignoring removed bh option
[  441.427366][ T7327] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.599: inode #13: comm syz.3.599: iget: illegal inode #
[  441.625759][ T7327] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.599: couldn't read orphan inode 13 (err -117)
[  441.861824][ T7327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  445.268127][ T7358] bridge0: port 3(syz_tun) entered blocking state
[  445.276783][ T7358] bridge0: port 3(syz_tun) entered disabled state
[  445.292089][ T7358] device syz_tun entered promiscuous mode
[  445.306790][ T7358] bridge0: port 3(syz_tun) entered blocking state
[  445.313726][ T7358] bridge0: port 3(syz_tun) entered forwarding state
[  445.353176][ T7359] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  445.473128][ T7337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 426: padding at end of block bitmap is not set
[  446.614614][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  446.761426][ T7368] loop3: detected capacity change from 0 to 1024
[  446.845591][ T7368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  447.240461][ T7379] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  447.897123][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  447.912098][ T7384] loop7: detected capacity change from 0 to 512
[  447.985779][ T7384] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  448.077988][ T7384] EXT4-fs (loop7): 1 truncate cleaned up
[  448.090407][ T7384] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  449.965971][ T6527] EXT4-fs (loop7): unmounting filesystem.
[  454.118228][   T26] audit: type=1800 audit(1786468167.816:84): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.618" name="nexus" dev="configfs" ino=44825 res=0 errno=0
[  454.134032][ T7426] Missing 'naa.' prefix
[  455.104650][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'.
[  455.116722][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'.
[  455.130108][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'.
[  455.139934][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'.
[  455.149365][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'.
[  457.096070][ T7445] loop7: detected capacity change from 0 to 128
[  461.211583][ T7471] loop5: detected capacity change from 0 to 512
[  461.485242][ T7471] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  462.333380][ T7471] EXT4-fs (loop5): 1 truncate cleaned up
[  462.339360][ T7471] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  464.504299][ T4607] EXT4-fs (loop5): unmounting filesystem.
[  464.715521][   T26] audit: type=1800 audit(1786468178.416:85): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.631" name="nexus" dev="configfs" ino=44918 res=0 errno=0
[  464.740751][ T7497] Missing 'naa.' prefix
[  466.202396][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'.
[  466.214043][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'.
[  466.226293][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'.
[  466.236006][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'.
[  466.246319][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'.
[  467.393116][ T4278] Bluetooth: hci5: command 0x0406 tx timeout
[  467.459546][ T7514] loop3: detected capacity change from 0 to 16
[  467.473689][ T7514] erofs: Unknown parameter 'ãé'
[  467.730220][ T7518] atomic_op ffff88807bee1998 conn xmit_atomic 0000000000000000
[  470.364861][ T7531] loop5: detected capacity change from 0 to 128
[  474.301461][ T7550] loop5: detected capacity change from 0 to 4096
[  474.432200][ T7550] ntfs: (device loop5): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume.  Weird.
[  474.443968][ T7550] ntfs: (device loop5): ntfs_fill_super(): Unsupported NTFS filesystem.
[  474.792080][ T7545] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  474.885771][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  474.898023][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  474.908070][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  474.918165][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  474.927646][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  478.584704][ T7572] virt_wifi0 speed is unknown, defaulting to 1000
[  482.394583][   T26] audit: type=1800 audit(1786468196.096:86): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.651" name="nexus" dev="configfs" ino=46088 res=0 errno=0
[  483.035355][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'.
[  484.940019][   T26] audit: type=1800 audit(1786468198.636:87): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.645" name="nexus" dev="configfs" ino=45596 res=0 errno=0
[  486.067036][ T7614] loop2: detected capacity change from 0 to 7
[  486.084713][ T7614] Dev loop2: unable to read RDB block 7
[  486.090676][ T7614]  loop2: AHDI p1 p2 p3
[  486.095082][ T7614] loop2: partition table partially beyond EOD, truncated
[  486.104613][ T7614] loop2: p1 start 1601398130 is beyond EOD, truncated
[  486.111762][ T7614] loop2: p2 start 1702059890 is beyond EOD, truncated
[  486.129616][ T7615] capability: warning: `syz.4.660' uses deprecated v2 capabilities in a way that may be insecure
[  486.692687][ T7616] vivid-002: disconnect
[  487.309179][ T7611] vivid-002: reconnect
[  487.360599][   T26] audit: type=1800 audit(1786468201.056:88): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.653" name="nexus" dev="configfs" ino=45622 res=0 errno=0
[  487.373907][ T7618] Missing 'naa.' prefix
[  490.036922][ T7634] loop5: detected capacity change from 0 to 512
[  490.119586][ T7634] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  490.271892][ T7634] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.662: corrupted xattr entries
[  490.502174][ T7634] EXT4-fs (loop5): Remounting filesystem read-only
[  490.509554][ T7634] EXT4-fs (loop5): 1 truncate cleaned up
[  490.687530][ T7634] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  492.022665][ T4607] EXT4-fs (loop5): unmounting filesystem.
[  492.099432][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  492.109711][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  492.117741][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  492.126301][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  492.134123][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  492.142457][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  492.597899][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.668'.
[  492.806176][ T7658] input input6: cannot allocate more than FF_MAX_EFFECTS effects
[  493.549976][ T4288] Bluetooth: hci1: command 0x0409 tx timeout
[  495.117661][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[  495.279594][ T7642] virt_wifi0 speed is unknown, defaulting to 1000
[  495.559050][ T7668] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  495.582427][ T7668] cramfs: wrong magic
[  496.547179][ T4424] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.589971][   T26] audit: type=1800 audit(1786468210.286:89): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.672" name="nexus" dev="configfs" ino=45708 res=0 errno=0
[  496.591264][ T7676] Missing 'naa.' prefix
[  497.603853][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[  498.671298][ T7668] netlink: 88 bytes leftover after parsing attributes in process `syz.6.671'.
[  498.807335][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'.
[  498.907243][ T4424] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.338449][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[  500.694405][ T7695] loop6: detected capacity change from 0 to 8
[  501.157158][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.164080][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.456225][ T4424] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.540445][ T7700] loop6: detected capacity change from 0 to 512
[  501.618277][ T7700] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  501.656872][ T4424] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.708509][ T7700] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.678: corrupted xattr entries
[  501.720306][ T7700] EXT4-fs (loop6): Remounting filesystem read-only
[  501.727789][ T7700] EXT4-fs (loop6): 1 truncate cleaned up
[  501.736563][ T7700] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  502.540782][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[  502.835195][ T7642] chnl_net:caif_netlink_parms(): no params data found
[  502.877501][ T4941] EXT4-fs (loop6): unmounting filesystem.
[  503.617987][ T7721] loop5: detected capacity change from 0 to 164
[  503.823572][ T7721] Unsupported NM flag settings (240)
[  504.405078][ T4607] Unsupported NM flag settings (240)
[  504.411512][ T4607] Unsupported NM flag settings (240)
[  504.463773][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.470977][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.480105][ T4607] Unsupported NM flag settings (240)
[  504.493373][ T7642] device bridge_slave_0 entered promiscuous mode
[  504.505512][ T4607] Unsupported NM flag settings (240)
[  504.511178][ T4607] Unsupported NM flag settings (240)
[  505.878285][ T4607] Unsupported NM flag settings (240)
[  505.931304][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.975183][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.016209][ T7642] device bridge_slave_1 entered promiscuous mode
[  506.972572][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.687497][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.885696][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[  509.875558][ T7642] team0: Port device team_slave_0 added
[  510.323777][ T7642] team0: Port device team_slave_1 added
[  511.581881][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.642736][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.060999][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.413583][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.451600][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.615580][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.843082][ T7642] device hsr_slave_0 entered promiscuous mode
[  512.866200][ T7642] device hsr_slave_1 entered promiscuous mode
[  512.887909][ T7642] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  512.916496][ T7642] Cannot create hsr debugfs directory
[  513.859954][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'.
[  513.871313][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'.
[  513.881914][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'.
[  513.891900][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'.
[  513.901538][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'.
[  515.161064][ T7783] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  515.238745][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'.
[  515.538950][ T7786] loop6: detected capacity change from 0 to 128
[  515.775180][ T7785] loop3: detected capacity change from 0 to 512
[  515.998734][ T7785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  516.044959][ T7781] bridge0: port 3(syz_tun) entered blocking state
[  516.057120][ T7785] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.689: corrupted xattr entries
[  516.075386][ T7785] EXT4-fs (loop3): Remounting filesystem read-only
[  516.219355][ T7781] bridge0: port 3(syz_tun) entered disabled state
[  516.239751][ T7785] EXT4-fs (loop3): 1 truncate cleaned up
[  516.254674][ T7781] device syz_tun entered promiscuous mode
[  516.390738][ T7785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  516.904811][ T7781] bridge0: port 3(syz_tun) entered blocking state
[  516.911337][ T7781] bridge0: port 3(syz_tun) entered forwarding state
[  516.985808][ T7790] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  517.640155][ T4424] device hsr_slave_0 left promiscuous mode
[  517.694730][ T4424] device hsr_slave_1 left promiscuous mode
[  517.814027][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  517.913553][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.043180][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.145164][ T4424] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.306493][ T4424] device bridge_slave_1 left promiscuous mode
[  518.366497][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.535181][ T4424] device bridge_slave_0 left promiscuous mode
[  518.631436][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.810944][  T129] libceph: connect (1)[c::]:6789 error -101
[  519.256952][  T129] libceph: mon0 (1)[c::]:6789 connect error
[  519.517390][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  519.592494][ T7800] ceph: No mds server is up or the cluster is laggy
[  519.636515][ T4424] device veth1_macvtap left promiscuous mode
[  519.642592][ T4424] device veth0_macvtap left promiscuous mode
[  519.695614][ T4424] device veth1_vlan left promiscuous mode
[  519.708003][ T4424] device veth0_vlan left promiscuous mode
[  521.278652][ T7815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  521.287688][ T7815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  521.379299][ T7816] loop3: detected capacity change from 0 to 4096
[  522.165603][ T7816] ntfs3: loop3: failed to replay log file. Can't mount rw!
[  524.382390][ T7822] Mass Storage Function, version: 2009/09/11
[  524.389040][ T7822] LUN: removable file: (no medium)
[  524.405268][ T7822] LUN: removable file: (no medium)
[  527.593235][ T7834] loop7: detected capacity change from 0 to 16384
[  527.614213][ T4424] team0 (unregistering): Port device team_slave_1 removed
[  527.706599][ T7837] loop5: detected capacity change from 0 to 8
[  528.390906][ T4424] team0 (unregistering): Port device team_slave_0 removed
[  528.433041][ T7836] loop7: detected capacity change from 16384 to 0
[  528.623294][ T4424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  528.681199][ T4424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.769188][ T4424] bond0 (unregistering): Released all slaves
[  530.900336][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'.
[  530.911669][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'.
[  531.082322][ T7642] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  532.537052][ T7642] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  532.613154][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.715'.
[  532.712661][ T7869] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  533.007031][ T7642] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  533.070247][ T7642] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  533.165157][ T7867] bridge0: port 3(syz_tun) entered blocking state
[  533.177259][ T7867] bridge0: port 3(syz_tun) entered disabled state
[  533.197403][ T7867] device syz_tun entered promiscuous mode
[  533.204573][ T7867] bridge0: port 3(syz_tun) entered blocking state
[  533.211586][ T7867] bridge0: port 3(syz_tun) entered forwarding state
[  534.605035][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'.
[  534.616579][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'.
[  534.626657][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'.
[  534.636381][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'.
[  534.645799][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'.
[  535.799171][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.848139][ T7642] 8021q: adding VLAN 0 to HW filter on device team0
[  537.090059][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  537.099154][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  537.159226][ T7642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  537.170390][ T7642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  537.240091][ T7897] loop3: detected capacity change from 0 to 128
[  537.477372][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  538.118377][ T7903] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4941] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7903]
[  539.073668][ T7901] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  539.107926][ T4288] Bluetooth: hci2: command 0x0405 tx timeout
[  539.195146][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  539.242077][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.249240][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.337091][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  539.401585][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  540.410937][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.418110][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  540.450233][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  540.459718][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  540.469233][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  540.479378][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  540.488293][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  540.503679][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  540.522675][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  540.552101][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  540.575743][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  540.604322][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  540.636289][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  540.717475][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  540.747023][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  540.773665][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.719'.
[  541.979740][ T7940] bridge0: port 3(syz_tun) entered blocking state
[  541.986890][ T7940] bridge0: port 3(syz_tun) entered disabled state
[  541.999274][ T7940] device syz_tun entered promiscuous mode
[  542.006326][ T7940] bridge0: port 3(syz_tun) entered blocking state
[  542.013019][ T7940] bridge0: port 3(syz_tun) entered forwarding state
[  542.049280][ T7940] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  544.659589][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.702045][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.751382][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.322134][ T7958] 9pnet_virtio: no channels available for device syz
[  545.672091][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  545.683718][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  545.693961][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  545.705759][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  545.716018][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  547.697595][ T7977] loop4: detected capacity change from 0 to 128
[  550.372129][ T7985] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  551.799118][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  551.839484][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  551.876189][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  551.888328][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  551.898922][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  551.910292][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  552.789597][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'.
[  552.836278][ T8002] virt_wifi0 speed is unknown, defaulting to 1000
[  553.319714][ T8002] chnl_net:caif_netlink_parms(): no params data found
[  553.954248][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[  554.219275][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.231378][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.309388][ T8002] device bridge_slave_0 entered promiscuous mode
[  554.352968][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.360192][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.368776][ T8002] device bridge_slave_1 entered promiscuous mode
[  554.462443][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.474927][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.506569][ T8002] team0: Port device team_slave_0 added
[  554.521120][ T8002] team0: Port device team_slave_1 added
[  554.621169][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.638547][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  554.664799][    C0] vkms_vblank_simulate: vblank timer overrun
[  554.679732][ T8002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.721801][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.729117][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  554.755013][    C0] vkms_vblank_simulate: vblank timer overrun
[  554.767338][ T8002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.837294][ T8002] device hsr_slave_0 entered promiscuous mode
[  554.847611][ T8002] device hsr_slave_1 entered promiscuous mode
[  554.857559][ T8002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  554.868484][ T8002] Cannot create hsr debugfs directory
[  555.371432][    T9] device hsr_slave_0 left promiscuous mode
[  555.381594][    T9] device hsr_slave_1 left promiscuous mode
[  555.394083][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.402301][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.410379][    T9] device bridge_slave_1 left promiscuous mode
[  555.416896][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.427336][    T9] device bridge_slave_0 left promiscuous mode
[  555.434061][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.824899][    T9] team0 (unregistering): Port device team_slave_1 removed
[  555.870596][    T9] team0 (unregistering): Port device team_slave_0 removed
[  555.915668][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.961524][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.038246][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[  556.234341][    T9] bond0 (unregistering): Released all slaves
[  556.420816][ T8002] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  556.434677][ T8002] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  556.448467][ T8002] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  556.459431][ T8002] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  556.570314][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.598321][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  556.608009][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  556.618048][ T8002] 8021q: adding VLAN 0 to HW filter on device team0
[  556.630526][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  556.640695][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  556.649295][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.656542][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.668643][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  556.681224][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  556.690697][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  556.699567][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.706856][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.723530][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  556.732736][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  556.771247][ T8002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  556.782331][ T8002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  556.797499][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  556.816478][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  556.825376][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  556.835399][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  556.844224][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  556.852735][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  556.861713][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  556.870427][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  556.893226][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  556.908581][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  557.253863][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.261474][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.290179][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.798867][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  557.815070][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  557.847924][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  557.859835][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  557.877875][ T8002] device veth0_vlan entered promiscuous mode
[  557.891581][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  557.902207][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  557.919598][ T8002] device veth1_vlan entered promiscuous mode
[  557.947818][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  557.961041][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  557.971100][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  557.985147][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  558.002717][ T8002] device veth0_macvtap entered promiscuous mode
[  558.014851][ T8002] device veth1_macvtap entered promiscuous mode
[  558.041553][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.054536][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.064996][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.075831][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.086050][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.096928][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.107215][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.119297][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.124664][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[  558.134461][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.152098][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.163369][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.173308][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.183849][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.194312][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.204892][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.214782][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.226129][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.237484][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.245421][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  558.256909][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  558.265127][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  558.275213][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  558.284454][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  558.293689][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  558.307149][ T8002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.321639][ T8002] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.330479][ T8002] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.348193][ T8002] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.459618][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.476978][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.497250][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  558.512232][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.521903][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.536862][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  558.880926][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  558.895725][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  558.916783][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  558.958208][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  558.971598][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  558.983614][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  558.995716][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  559.073897][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  559.086208][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  559.097874][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  559.109669][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  559.121516][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  559.133570][ T8082] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  559.284905][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  559.297801][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  559.309331][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  559.323674][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  560.232856][ T4288] Bluetooth: hci2: command 0x0419 tx timeout
[  560.940283][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.658'.
[  561.596441][ T8101] bridge0: port 3(syz_tun) entered blocking state
[  561.604385][ T8101] bridge0: port 3(syz_tun) entered disabled state
[  561.620652][ T8101] device syz_tun entered promiscuous mode
[  561.627907][ T8101] bridge0: port 3(syz_tun) entered blocking state
[  561.634462][ T8101] bridge0: port 3(syz_tun) entered forwarding state
[  561.676179][ T8101] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  562.597084][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.614035][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  564.414244][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[  564.425224][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[  564.435002][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[  564.444717][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[  564.454067][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'.
[  566.445991][ T8132] loop5: detected capacity change from 0 to 128
[  566.932932][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.742'.
[  567.791259][ T8136] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  568.263172][ T4320] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  568.274228][ T8143] loop6: detected capacity change from 0 to 8
[  568.341842][ T8143] unable to read inode lookup table
[  568.684282][ T8149] loop5: detected capacity change from 0 to 8
[  569.002148][ T4320] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  569.142236][ T8149] SQUASHFS error: zlib decompression failed, data probably corrupt
[  569.150707][ T8149] SQUASHFS error: Failed to read block 0x9b: -5
[  569.157142][ T8149] SQUASHFS error: Unable to read metadata cache entry [99]
[  569.164585][ T8149] SQUASHFS error: Unable to read inode 0x127
[  569.186349][ T4320] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  569.253923][ T4320] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  569.415082][ T4320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.429088][ T8140] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  569.705460][ T8140] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  570.946055][ T4373] usb 9-1: USB disconnect, device number 2
[  571.182971][ T8176] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  572.115337][   T26] audit: type=1326 audit(1786468286.818:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8178 comm="syz.3.749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feff159e0d9 code=0x0
[  572.347496][ T8170] udevd[8170]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  572.451209][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.050535][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.757'.
[  573.059562][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.757'.
[  573.068838][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'.
[  574.176837][ T8198] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  574.522951][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  577.466706][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'.
[  578.355748][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.765'.
[  578.776743][ T8229] loop8: detected capacity change from 0 to 128
[  580.088472][ T8233] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  580.982333][ T8245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.587234][ T8263] loop6: detected capacity change from 0 to 256
[  584.597986][ T8260] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  588.585939][ T8310] loop6: detected capacity change from 0 to 8
[  588.596373][ T8310] SQUASHFS error: zlib decompression failed, data probably corrupt
[  588.604451][ T8310] SQUASHFS error: Failed to read block 0x9b: -5
[  588.610737][ T8310] SQUASHFS error: Unable to read metadata cache entry [99]
[  588.618049][ T8310] SQUASHFS error: Unable to read inode 0x127
[  588.653650][ T8171] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  588.892272][ T8318] loop5: detected capacity change from 0 to 256
[  590.715515][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'.
[  591.715890][ T8337] loop5: detected capacity change from 0 to 256
[  591.937897][ T8171] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  592.356100][   T26] audit: type=1326 audit(1786468306.828:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  593.059937][   T26] audit: type=1326 audit(1786468306.828:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  593.326945][   T26] audit: type=1326 audit(1786468307.018:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  595.120736][ T8360] loop5: detected capacity change from 0 to 512
[  595.153437][ T8171] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  595.164044][ T8360] EXT4-fs: inline encryption not supported
[  595.253510][ T8360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  595.275052][   T26] audit: type=1326 audit(1786468307.018:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  596.173538][   T26] audit: type=1326 audit(1786468307.018:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  596.197588][   T26] audit: type=1326 audit(1786468307.018:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  596.223262][   T26] audit: type=1326 audit(1786468307.018:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  596.247571][   T26] audit: type=1326 audit(1786468307.018:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  596.274159][   T26] audit: type=1326 audit(1786468307.018:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  596.298333][   T26] audit: type=1326 audit(1786468307.018:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8339 comm="syz.3.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff159e0d9 code=0x7ffc0000
[  596.356871][ T8360] EXT4-fs: error -4 creating inode table initialization thread
[  596.390319][ T8360] EXT4-fs (loop5): mount failed
[  597.611123][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'.
[  597.622506][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'.
[  597.632562][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'.
[  597.643922][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'.
[  597.653463][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'.
[  601.762186][ T8422] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  602.598103][ T8427] loop8: detected capacity change from 0 to 256
[  603.839839][ T8171] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  604.576477][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'.
[  604.709389][ T8439] loop3: detected capacity change from 0 to 512
[  604.769414][ T4288] Bluetooth: hci2: command 0x0405 tx timeout
[  604.840814][ T8439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  606.843223][ T4289] Bluetooth: hci5: command 0x1003 tx timeout
[  606.843264][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  607.066329][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'.
[  607.078351][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'.
[  607.088779][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'.
[  607.098443][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'.
[  607.108205][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'.
[  607.780385][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  614.339474][ T8502] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  614.468878][   T26] kauditd_printk_skb: 27 callbacks suppressed
[  614.468902][   T26] audit: type=1800 audit(1786468329.168:128): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="attr_allow_any_host" dev="configfs" ino=49630 res=0 errno=0
[  615.402705][ T8506] nvmet: adding nsid 1 to subsystem testnqn
[  615.560572][   T26] audit: type=1800 audit(1786468330.258:129): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="addr_trtype" dev="configfs" ino=48802 res=0 errno=0
[  615.593307][ T8502] nvmet_rdma: address family 255 not supported
[  615.622392][   T26] audit: type=1800 audit(1786468330.288:130): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.821" name="addr_adrfam" dev="configfs" ino=48803 res=0 errno=0
[  616.052955][ T8516] virt_wifi0 speed is unknown, defaulting to 1000
[  620.556427][ T8537] input input9: cannot allocate more than FF_MAX_EFFECTS effects
[  621.313978][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.826'.
[  623.345373][ T4288] Bluetooth: hci0: unexpected event for opcode 0x2019
[  624.036618][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.043065][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.229621][ T8560] loop6: detected capacity change from 0 to 128
[  624.776756][ T8569] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4941] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8569]
[  624.811162][ T8569] netlink: 260 bytes leftover after parsing attributes in process `syz.6.831'.
[  624.820712][ T8569] netlink: 104 bytes leftover after parsing attributes in process `syz.6.831'.
[  625.200890][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.831'.
[  625.363343][ T4288] Bluetooth: Wrong link type (-22)
[  626.600650][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'.
[  626.613390][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'.
[  626.634180][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'.
[  626.644152][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'.
[  626.653995][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.837'.
[  629.645840][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'.
[  629.657693][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'.
[  629.667522][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'.
[  629.677361][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'.
[  629.686876][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'.
[  630.625344][ T8604] input input10: cannot allocate more than FF_MAX_EFFECTS effects
[  639.532927][ T8627] bond0: option use_carrier: invalid value (9)
[  639.656239][ T8635] ceph: No mds server is up or the cluster is laggy
[  639.664729][ T4318] libceph: connect (1)[c::]:6789 error -101
[  639.707548][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  639.781336][ T8630] UDC core: g_uac2: couldn't find an available UDC or it's busy
[  640.103150][ T7291] libceph: connect (1)[c::]:6789 error -101
[  640.109255][ T7291] libceph: mon0 (1)[c::]:6789 connect error
[  641.683221][ T8669] input input11: cannot allocate more than FF_MAX_EFFECTS effects
[  641.764209][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.854'.
[  643.827281][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'.
[  643.845625][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'.
[  643.856032][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'.
[  643.865836][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'.
[  643.875225][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.857'.
[  645.088434][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.862'.
[  646.322226][ T8707] input input13: cannot allocate more than FF_MAX_EFFECTS effects
[  647.709508][ T8734] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818)
[  648.069230][ T4272] bridge0: port 3(syz_tun) entered disabled state
[  648.765215][ T4272] device syz_tun left promiscuous mode
[  648.856378][ T4272] bridge0: port 3(syz_tun) entered disabled state
[  649.126403][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.866'.
[  649.391818][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  649.403534][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  649.411468][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  649.420501][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  649.442373][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  649.450750][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  650.556751][ T4395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.726370][ T8751] virt_wifi0 speed is unknown, defaulting to 1000
[  651.473828][ T4288] Bluetooth: hci0: command 0x0409 tx timeout
[  651.727874][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.8.868'.
[  651.922954][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'.
[  653.221211][ T4395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.552994][ T4288] Bluetooth: hci0: command 0x041b tx timeout
[  655.074549][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'.
[  655.169677][ T4395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.441178][ T4395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.634388][ T4288] Bluetooth: hci0: command 0x040f tx timeout
[  656.520618][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.877'.
[  656.580224][ T8751] chnl_net:caif_netlink_parms(): no params data found
[  657.281564][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.290020][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.298955][ T8751] device bridge_slave_0 entered promiscuous mode
[  657.307987][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.316546][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.325378][ T8751] device bridge_slave_1 entered promiscuous mode
[  657.339187][ T4395] tipc: Left network mode
[  657.357261][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.369349][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.448444][ T8751] team0: Port device team_slave_0 added
[  657.473194][ T8751] team0: Port device team_slave_1 added
[  657.590233][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  657.605046][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  657.637874][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  657.671316][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  657.679168][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  657.706312][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  657.722945][ T4288] Bluetooth: hci0: command 0x0419 tx timeout
[  658.189622][ T8751] device hsr_slave_0 entered promiscuous mode
[  658.253521][ T8751] device hsr_slave_1 entered promiscuous mode
[  658.337013][ T8751] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  658.397234][ T8751] Cannot create hsr debugfs directory
[  658.936807][ T8751] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  658.946749][ T8751] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  658.962176][ T8751] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  659.001674][ T8751] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  659.171436][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.200243][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  659.218930][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  659.292495][ T8751] 8021q: adding VLAN 0 to HW filter on device team0
[  659.311331][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  659.321676][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  659.338819][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.346122][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.401972][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  659.424504][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  659.436286][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  659.445364][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.452436][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.460778][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  659.469615][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  659.478665][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  659.488336][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  659.497989][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  659.566303][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  659.575756][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  659.587037][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  659.597266][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  659.606392][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  659.615634][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  659.626941][ T8751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  659.666038][ T4395] device hsr_slave_0 left promiscuous mode
[  659.679595][ T4395] device hsr_slave_1 left promiscuous mode
[  659.687749][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  659.701875][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.711105][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  659.732142][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.740991][ T4395] device bridge_slave_1 left promiscuous mode
[  659.755687][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.772037][ T4395] device bridge_slave_0 left promiscuous mode
[  659.780500][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.836232][ T4395] device veth1_macvtap left promiscuous mode
[  659.842434][ T4395] device veth0_macvtap left promiscuous mode
[  659.857368][ T4395] device veth1_vlan left promiscuous mode
[  659.866029][ T4395] device veth0_vlan left promiscuous mode
[  660.589353][ T4395] team0 (unregistering): Port device team_slave_1 removed
[  660.642715][ T4395] team0 (unregistering): Port device team_slave_0 removed
[  660.688932][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  660.734887][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  661.068458][ T4395] bond0 (unregistering): Released all slaves
[  661.583161][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  661.593364][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  661.601071][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  662.054468][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  662.069360][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  662.101500][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  662.118679][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  662.129923][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  662.145092][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  662.161621][ T8751] device veth0_vlan entered promiscuous mode
[  662.179388][ T8751] device veth1_vlan entered promiscuous mode
[  662.193534][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  662.201686][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  662.250765][ T8751] device veth0_macvtap entered promiscuous mode
[  662.259688][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  662.270362][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  662.283288][ T8751] device veth1_macvtap entered promiscuous mode
[  662.295455][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  662.305148][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  662.319579][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.330489][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.341260][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.353008][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.363879][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.375071][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.385762][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  662.400711][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.419005][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.426638][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  662.446025][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  662.463013][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.480608][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.492275][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.508324][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.520371][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.534215][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.545449][ T8751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.557794][ T8751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.570601][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.579413][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  662.594226][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  662.610380][ T8751] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  662.620640][ T8751] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.637948][ T8751] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.648993][ T8751] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.753491][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.761368][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.784225][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  662.819802][ T6125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.828111][ T6125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.848995][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  663.131501][ T8894] input input15: cannot allocate more than FF_MAX_EFFECTS effects
[  666.505866][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'.
[  666.518516][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'.
[  666.528770][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'.
[  666.538608][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'.
[  666.548959][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'.
[  667.255128][ T8932] ceph: No mds server is up or the cluster is laggy
[  667.320405][ T8121] libceph: connect (1)[c::]:6789 error -101
[  667.365816][ T8121] libceph: mon0 (1)[c::]:6789 connect error
[  667.695083][ T8121] libceph: connect (1)[c::]:6789 error -101
[  667.791185][ T8941] ceph: No mds server is up or the cluster is laggy
[  668.043689][ T8121] libceph: mon0 (1)[c::]:6789 connect error
[  668.310529][ T8121] libceph: connect (1)[c::]:6789 error -101
[  668.333649][ T8121] libceph: mon0 (1)[c::]:6789 connect error
[  671.681852][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'.
[  671.693490][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'.
[  671.703877][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'.
[  671.713774][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'.
[  671.723776][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.899'.
[  673.048985][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.913'.
[  673.060900][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.913'.
[  673.071162][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.913'.
[  673.085754][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.913'.
[  673.096502][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.913'.
[  674.827486][ T9006] ceph: No mds server is up or the cluster is laggy
[  674.838242][  T126] libceph: connect (1)[c::]:6789 error -101
[  675.237046][ T4288] ------------[ cut here ]------------
[  675.244079][ T4288] WARNING: CPU: 0 PID: 4288 at net/bluetooth/hci_conn.c:670 hci_conn_timeout+0x24f/0x450
[  675.254101][ T4288] Modules linked in:
[  675.258054][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:7 Not tainted syzkaller #0
[  675.265980][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  675.276250][ T4288] Workqueue: hci2 hci_conn_timeout
[  675.281458][ T4288] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  675.287284][ T4288] Code: 21 8e e8 44 c8 99 f8 48 8b 35 75 78 e7 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 8e 1a f8 e8 61 9b 48 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  675.307267][ T4288] RSP: 0018:ffffc900043efc08 EFLAGS: 00010293
[  675.313471][ T4288] RAX: ffffffff893992bf RBX: ffff888074260330 RCX: ffff888024a98000
[  675.321528][ T4288] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  675.329606][ T4288] RBP: 00000000ffffffff R08: ffff888074260013 R09: 1ffff1100e84c002
[  675.337668][ T4288] R10: dffffc0000000000 R11: ffffed100e84c003 R12: ffffffff815576b4
[  675.345737][ T4288] R13: dffffc0000000000 R14: ffff888074260000 R15: ffff888074260010
[  675.353819][ T4288] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  675.362886][ T4288] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  675.369526][ T4288] CR2: 0000200000003000 CR3: 00000000570d3000 CR4: 00000000003506f0
[  675.377592][ T4288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  675.385814][ T4288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  675.393873][ T4288] Call Trace:
[  675.397256][ T4288]  <TASK>
[  675.400282][ T4288]  ? process_one_work+0x7b4/0x1160
[  675.405519][ T4288]  process_one_work+0x8ab/0x1160
[  675.410534][ T4288]  ? worker_detach_from_pool+0x240/0x240
[  675.416273][ T4288]  ? _raw_spin_lock_irq+0xb7/0xf0
[  675.421416][ T4288]  ? _raw_spin_lock_irqsave+0x100/0x100
[  675.427035][ T4288]  ? wq_worker_running+0x97/0x190
[  675.432175][ T4288]  worker_thread+0xaf5/0x12a0
[  675.436930][ T4288]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  675.442939][ T4288]  kthread+0x29d/0x330
[  675.447062][ T4288]  ? worker_clr_flags+0x1a0/0x1a0
[  675.452165][ T4288]  ? kthread_blkcg+0xd0/0xd0
[  675.456847][ T4288]  ret_from_fork+0x1f/0x30
[  675.461350][ T4288]  </TASK>
[  675.464422][ T4288] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  675.471730][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:7 Not tainted syzkaller #0
[  675.479286][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  675.489377][ T4288] Workqueue: hci2 hci_conn_timeout
[  675.494502][ T4288] Call Trace:
[  675.497776][ T4288]  <TASK>
[  675.500702][ T4288]  dump_stack_lvl+0x188/0x24e
[  675.505418][ T4288]  ? memcpy+0x3c/0x60
[  675.509460][ T4288]  ? show_regs_print_info+0x12/0x12
[  675.514661][ T4288]  ? load_image+0x410/0x410
[  675.519178][ T4288]  panic+0x2d3/0x710
[  675.523081][ T4288]  ? bpf_jit_dump+0xd0/0xd0
[  675.527624][ T4288]  ? ret_from_fork+0x1f/0x30
[  675.532240][ T4288]  __warn+0x2f8/0x4f0
[  675.536239][ T4288]  ? hci_conn_timeout+0x24f/0x450
[  675.541298][ T4288]  ? hci_conn_timeout+0x24f/0x450
[  675.546332][ T4288]  report_bug+0x2ba/0x4f0
[  675.550680][ T4288]  ? hci_conn_timeout+0x24f/0x450
[  675.555712][ T4288]  handle_bug+0x3a/0x70
[  675.559877][ T4288]  exc_invalid_op+0x16/0x40
[  675.564406][ T4288]  asm_exc_invalid_op+0x16/0x20
[  675.569322][ T4288] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  675.574988][ T4288] Code: 21 8e e8 44 c8 99 f8 48 8b 35 75 78 e7 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 8e 1a f8 e8 61 9b 48 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  675.594716][ T4288] RSP: 0018:ffffc900043efc08 EFLAGS: 00010293
[  675.600931][ T4288] RAX: ffffffff893992bf RBX: ffff888074260330 RCX: ffff888024a98000
[  675.608904][ T4288] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  675.616870][ T4288] RBP: 00000000ffffffff R08: ffff888074260013 R09: 1ffff1100e84c002
[  675.624922][ T4288] R10: dffffc0000000000 R11: ffffed100e84c003 R12: ffffffff815576b4
[  675.632893][ T4288] R13: dffffc0000000000 R14: ffff888074260000 R15: ffff888074260010
[  675.640869][ T4288]  ? process_one_work+0x7b4/0x1160
[  675.645990][ T4288]  ? hci_conn_timeout+0x24f/0x450
[  675.651028][ T4288]  ? hci_conn_timeout+0x24f/0x450
[  675.656076][ T4288]  ? process_one_work+0x7b4/0x1160
[  675.661203][ T4288]  process_one_work+0x8ab/0x1160
[  675.666271][ T4288]  ? worker_detach_from_pool+0x240/0x240
[  675.671926][ T4288]  ? _raw_spin_lock_irq+0xb7/0xf0
[  675.676968][ T4288]  ? _raw_spin_lock_irqsave+0x100/0x100
[  675.682525][ T4288]  ? wq_worker_running+0x97/0x190
[  675.687568][ T4288]  worker_thread+0xaf5/0x12a0
[  675.692260][ T4288]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  675.698182][ T4288]  kthread+0x29d/0x330
[  675.702251][ T4288]  ? worker_clr_flags+0x1a0/0x1a0
[  675.707275][ T4288]  ? kthread_blkcg+0xd0/0xd0
[  675.711880][ T4288]  ret_from_fork+0x1f/0x30
[  675.716319][ T4288]  </TASK>
[  675.719938][ T4288] Kernel Offset: disabled
[  675.724353][ T4288] Rebooting in 86400 seconds..