last executing test programs:

16m19.808769382s ago: executing program 32 (id=380):
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x97a4, &(0x7f0000012f40)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x4048587b, &(0x7f0000000240)=ANY=[])

15m12.577308572s ago: executing program 33 (id=925):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000)

15m8.720816073s ago: executing program 34 (id=955):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x8c810)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

14m51.637645665s ago: executing program 35 (id=1085):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

14m34.269136442s ago: executing program 36 (id=1210):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
close(0x3)
r0 = userfaultfd(0x80801)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x7, 0x800, 0x0, 0x100000, 0xa00000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9, 0x800000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

14m14.321798523s ago: executing program 37 (id=1362):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r1, 0x0, 0x0, 0x1}])

13m23.42238977s ago: executing program 2 (id=1725):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x0, 0x3, 0x4e1f, 0x0, 0x2, 0x0, 0xa0}, {0xfffffffffffffffd, 0x2002, 0x9, 0x400, 0x8001, 0x3, 0x800000, 0xd3d}, {0x0, 0x200000000000000, 0x7fff, 0x3}, 0xbfd1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x2c19}}, 0xe4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x2, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x8, 0x1, 0xfb, 0x0, 0x8, 0x3c, 0xfb, 0x4, 0xfc, 0x38}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x1, 0x7, 0x20, 0x3, 0x2, 0x106c, 0x5, 0x8000000000000, 0x80000000, 0x7ab60de4, 0x8, 0x0, 0x0, 0x0, 0x29a], 0x1, 0x3c4210})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13m23.219741782s ago: executing program 2 (id=1728):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x90, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5c}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

13m23.027849411s ago: executing program 2 (id=1731):
openat(0xffffffffffffff9c, 0x0, 0x80101, 0x101)
syz_io_uring_setup(0x241d, &(0x7f00000002c0)={0x0, 0x9842, 0x2000, 0xffffffff}, 0x0, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000140))
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
close_range(r0, 0xffffffffffffffff, 0x0)

13m22.946048396s ago: executing program 2 (id=1732):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000dc0)=ANY=[@ANYBLOB="73686f776173736f632c0080da3e68c346f09759880adda7fb7a95a2f9a5376cd7c5d2ddfca3e914f85cffd5047acdc68e67c6179a91f4b17bfee47a6f9f901f2685c19d25d93a65403e593e0aea376762d3323a54ea772757b22259d244f61622274d5e8b21d835ceb3afac660819b63431b9fe729c02baeb2313404366fa28fed4"], 0x5, 0x567, &(0x7f0000000740)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x1f4, &(0x7f0000000880)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

13m22.558126596s ago: executing program 2 (id=1737):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)
close(r0)

13m20.56787042s ago: executing program 2 (id=1750):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x25, 0x0, &(0x7f0000000040))
timer_create(0x2, 0x0, &(0x7f0000044000)=<r3=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(r3)
read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020)
getdents64(r1, &(0x7f0000000080)=""/48, 0x30)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000280)='%\xdf\xf1\xcf(,c\xbe\xfbL:', 0x0)

13m20.339742172s ago: executing program 38 (id=1750):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x25, 0x0, &(0x7f0000000040))
timer_create(0x2, 0x0, &(0x7f0000044000)=<r3=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(r3)
read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020)
getdents64(r1, &(0x7f0000000080)=""/48, 0x30)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000280)='%\xdf\xf1\xcf(,c\xbe\xfbL:', 0x0)

12m42.599893652s ago: executing program 1 (id=2066):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = fanotify_init(0x200, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r1, 0x161, 0x40000867, r2, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000030301010600000000000000050000000c000200ffffe9ff0000"], 0x34}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0)

12m42.191762083s ago: executing program 1 (id=2070):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m41.848938931s ago: executing program 1 (id=2073):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0xb8, 0x17, 0x29, 0x6, 0x8, 0x8f, 0xaa, 0x44, 0x1, 0x9, 0x3, 0x4, 0x9, 0x5}, 0xe)

12m41.639849132s ago: executing program 1 (id=2076):
mount(0x0, 0x0, 0x0, 0x800000, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000100)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x337, &(0x7f0000001140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

12m40.531803189s ago: executing program 1 (id=2081):
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'})

12m40.358801349s ago: executing program 1 (id=2083):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
write$eventfd(r0, &(0x7f0000000640)=0x9, 0x8)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4)

12m30.780212179s ago: executing program 5 (id=2166):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x100}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaeaaa2388a828008100200086dd6d35200000181101fe8000000000000000000000000000aafc0000000000000000000000000000004e204e20"], 0x56)

12m30.555611291s ago: executing program 5 (id=2169):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0)

12m28.974890763s ago: executing program 5 (id=2171):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

12m28.683450458s ago: executing program 5 (id=2177):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0xc, &(0x7f0000000000)=ANY=[], 0x9, 0x1d4, &(0x7f0000000080)="$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")
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20)

12m27.201780786s ago: executing program 5 (id=2182):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x23d, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

12m26.420398336s ago: executing program 5 (id=2191):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383163030890e0879b0a71c6e70a9b336c959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074d090acd3b78130daa61d8e8040000065802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae13f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea77b5602984e4de7c6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6932fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cff7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f2157322c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f19880f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060085ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e606000000e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999b596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f203903dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efe5496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5ca00000000000000008734dd73583df292892448039ef799cf0630becdcce04579f5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd078ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9dec58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6b331b4603b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0006087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c2769310123cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f4647b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1de51f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d4db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72932b99b380000000000000006859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec8982b6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000002601e87b162dadc600", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020)
socket$kcm(0x2, 0xa, 0x2)

12m26.316906652s ago: executing program 39 (id=2191):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020)
socket$kcm(0x2, 0xa, 0x2)

12m24.210722592s ago: executing program 40 (id=2083):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
write$eventfd(r0, &(0x7f0000000640)=0x9, 0x8)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4)

8m6.591886121s ago: executing program 6 (id=3336):
socket(0x10, 0x3, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'})

8m5.507754878s ago: executing program 6 (id=3338):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000010000)={&(0x7f0000000000)={0xa, 0x9, 0x6, @mcast1, 0x8}, 0x1c, 0x0}, 0x4000)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x10000, 0x1, 0xb}, {0x10000002}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r7, 0x8)

8m4.382786247s ago: executing program 6 (id=3341):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000)

7m58.551497181s ago: executing program 6 (id=3354):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd50301001774004095000000000000006916360000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

7m56.938964085s ago: executing program 6 (id=3360):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000, 0x0, 0xd}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})

7m55.054663484s ago: executing program 6 (id=3365):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x4, 0xa}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

7m37.032995965s ago: executing program 41 (id=3365):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x4, 0xa}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5m16.068369804s ago: executing program 4 (id=3851):
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x8020)
socket$inet6_sctp(0xa, 0x0, 0x84)
pipe2$9p(0x0, 0x4000)
vmsplice(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x80008, 0x6f}, 0x2c)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

5m15.776235519s ago: executing program 4 (id=3853):
socket(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000000882, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000000c0)={'\x00', 0xfffb, 0x401, 0x7fff, 0x3, 0x800, <r1=>0xffffffffffffffff})
prlimit64(r1, 0x6, 0x0, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80804120, &(0x7f00000022c0))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

5m12.850943492s ago: executing program 4 (id=3861):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@nombcache}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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")
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$netlink(0x10, 0x3, 0xa)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac)

5m10.373929951s ago: executing program 4 (id=3868):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(0x0, 0x81, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x5, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x89e, &(0x7f0000000180)={[{@dax_always}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@dioread_lock}, {@grpid}]}, 0x0, 0x445, &(0x7f0000000800)="$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")

5m5.924668964s ago: executing program 4 (id=3876):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000006a0081ebffffffffffff5df4fbce0502e0dfffff0e000a000e0000000224ec4dc2b20114664568a71802", 0x2e}], 0x1}, 0x48020)

5m4.863419489s ago: executing program 4 (id=3878):
syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
fcntl$setown(r0, 0x8, r3)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
fcntl$setlease(r0, 0x400, 0x2)

4m47.203110371s ago: executing program 42 (id=3878):
syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
fcntl$setown(r0, 0x8, r3)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
fcntl$setlease(r0, 0x400, 0x2)

38.796411649s ago: executing program 9 (id=4618):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00123c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

37.695191676s ago: executing program 9 (id=4624):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

37.518976065s ago: executing program 9 (id=4627):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

32.950093383s ago: executing program 9 (id=4638):
socket(0x10, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RXATTRWALK(r0, &(0x7f0000000280)={0xf, 0x1f, 0x1, 0xffffffffffff46d1}, 0xf)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={'\x00', 0xfffb, 0x401, 0x7fff, 0x3, 0x800, <r1=>0xffffffffffffffff})
prlimit64(r1, 0x6, &(0x7f0000000100)={0x3, 0x8}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80804120, &(0x7f00000022c0))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)

29.763669029s ago: executing program 9 (id=4646):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, 0x0, 0xa}, 0x94)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x20000000)
socket$alg(0x26, 0x5, 0x0)
accept4$netrom(r0, &(0x7f0000000680)={{}, [@remote, @bcast, @remote, @bcast, @remote, @netrom, @default, @null]}, &(0x7f0000000700)=0x48, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

27.977176422s ago: executing program 9 (id=4652):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28)

10.989735177s ago: executing program 43 (id=4652):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28)

10.631692156s ago: executing program 7 (id=4691):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)

9.574854541s ago: executing program 7 (id=4693):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)="000086", 0x3)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44814)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0xb, 0xffffffff, 0x4, 0x7, 0x7f, 0x1000, 0x7}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8.390373453s ago: executing program 0 (id=4694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00)

6.592943386s ago: executing program 3 (id=4696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x3580}}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgrp(0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket(0x10, 0x803, 0x0)
getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, 0x0, 0x922bac8576b92dde)
symlink(0x0, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x24040084)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)

6.592024656s ago: executing program 8 (id=4697):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r2, &(0x7f0000000040)='./file0/file0\x00', 0x54)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x18, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
syz_open_dev$loop(0x0, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64)

6.32736725s ago: executing program 7 (id=4698):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x5, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.223704756s ago: executing program 0 (id=4699):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x400)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.156932959s ago: executing program 8 (id=4700):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')

6.124338171s ago: executing program 7 (id=4702):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]})

5.030789377s ago: executing program 3 (id=4703):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r0 = syz_io_uring_setup(0x5229, &(0x7f0000000080)={0x0, 0x6bb8, 0x8, 0x6, 0x42f6}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

5.018958798s ago: executing program 7 (id=4712):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5.017329358s ago: executing program 8 (id=4704):
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_procfs(0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080)

4.865255646s ago: executing program 0 (id=4705):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001a80)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440), 0x743, 0x40012002, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)

3.244099241s ago: executing program 0 (id=4706):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0xc8, 0x9, 0x4, 0x20000008, [{0x1, 0x575e, 0x10b, 0x6}, {0x1, 0xf, 0x80000001, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f00000006c0)="11c9b9fa74afdbb96366a799e076617dd79b727d84a27461a4c7a038077b5b08f60844117227c654d9eec99f8755334cb1f1169a4868659e055d6d3e2523f5343bc73a2ec613cc3becb5dbd4c49bf5663e2422200a89fabdc07af572c2720b09e3ff53f06d90b0c241d1ac245c72418c5c3a16e7633ede416c3e2d1b69a33947cf30d41a102c0f21b1182421089489937f2682bfec87dd", 0x97}, {&(0x7f0000000c40)="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", 0xf3d}], 0x4}, 0x4)

3.243783541s ago: executing program 3 (id=4707):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xd8}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0xc000}, 0x18)

3.243256651s ago: executing program 8 (id=4708):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = syz_clone(0x1000, 0x0, 0x300, 0x0, 0x0, 0x0)
migrate_pages(r3, 0x0, 0x0, 0x0)

1.523258081s ago: executing program 3 (id=4709):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
socket$unix(0x1, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1)
r2 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x80)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r1, 0x0, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601fcff00000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.52172343s ago: executing program 8 (id=4710):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_TSC(0x1a, 0x3)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r3, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
read$FUSE(0xffffffffffffffff, &(0x7f0000003f00)={0x2020}, 0x2020)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0)

1.496335572s ago: executing program 0 (id=4711):
syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
readahead(r0, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
getdents64(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)

1.304660262s ago: executing program 7 (id=4713):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94)
socket$inet(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

311.568574ms ago: executing program 0 (id=4714):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x31, 0xffffffffffffffff, 0xf983e000)
unshare(0x2c020400)
r2 = msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0)
msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x8000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000))
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1)

92.206095ms ago: executing program 8 (id=4715):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x82, &(0x7f0000000080)={0x0, 0x5}, 0x8)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4a1})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000))
socket(0x2b, 0x2, 0x9)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})

91.279805ms ago: executing program 3 (id=4724):
socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = fanotify_init(0x1a, 0x800)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
socket$igmp6(0xa, 0x3, 0x2)
fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]})

0s ago: executing program 3 (id=4716):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

3874.121:5843): pid=16839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3221" name="bus" dev="ramfs" ino=73005 res=1 errno=0
[  586.785182][   T26] audit: type=1804 audit(3924043874.167:5844): pid=16842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3221" name="bus" dev="ramfs" ino=73005 res=1 errno=0
[  586.897904][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3223'.
[  586.968109][T16848] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  587.008299][T16848] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821)
[  588.119868][T16868] team0 (unregistering): Port device team_slave_1 removed
[  588.199800][T16868] team0 (unregistering): Failed to send options change via netlink (err -105)
[  588.208956][T16868] team0 (unregistering): Failed to send port change of device bridge3 via netlink (err -105)
[  588.301778][T16868] team0 (unregistering): Port device bridge3 removed
[  590.121571][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  590.128045][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  591.509534][T16925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3241'.
[  591.548687][T16926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3241'.
[  591.572209][T16920] loop9: detected capacity change from 0 to 4096
[  591.600539][T16931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3243'.
[  591.679208][T16931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3243'.
[  591.790870][T16931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3243'.
[  592.392522][T16939] overlayfs: failed to clone upperpath
[  592.456533][T16940] xt_hashlimit: size too large, truncated to 1048576
[  592.547247][T16942] overlayfs: failed to clone upperpath
[  593.326093][ T4897] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  593.880170][   T26] audit: type=1804 audit(3924043880.782:5845): pid=16979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3255" name="bus" dev="ramfs" ino=73929 res=1 errno=0
[  594.525995][ T4897] usb 10-1: Using ep0 maxpacket: 32
[  594.620839][   T26] audit: type=1804 audit(3924043881.290:5846): pid=16981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3255" name="bus" dev="ramfs" ino=73929 res=1 errno=0
[  594.713638][ T4897] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.763855][ T4897] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  594.991928][ T4897] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  595.013729][ T4897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.043707][ T4897] usb 10-1: Product: syz
[  595.048127][ T4897] usb 10-1: Manufacturer: syz
[  595.059081][ T4897] usb 10-1: SerialNumber: syz
[  595.098925][ T4897] usb 10-1: config 0 descriptor??
[  596.255395][ T4897] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  596.466869][ T4897] Bluetooth: hci3: Injecting HCI hardware error event
[  596.478852][ T4189] Bluetooth: hci3: hardware error 0x00
[  597.310956][ T4448] usb 10-1: USB disconnect, device number 8
[  597.706658][T17032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.883756][T17032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.913724][T17040] netlink: 'syz.0.3268': attribute type 1 has an invalid length.
[  598.024552][T17040] 8021q: adding VLAN 0 to HW filter on device bond2
[  598.138741][T17049] bond2: (slave gretap2): making interface the new active one
[  598.199358][T17049] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  598.224908][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  598.459985][ T4896] Bluetooth: hci0: command 0x0406 tx timeout
[  600.034588][T17093] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa
[  600.190477][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3282'.
[  600.561476][T17104] loop6: detected capacity change from 0 to 1764
[  600.689975][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3287'.
[  600.827853][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3287'.
[  607.766969][T17197] IPVS: Error connecting to the multicast addr
[  607.813917][T17198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3307'.
[  607.861824][T17202] binder: transaction release 77 bad handle 1, ret = -22
[  608.512216][   T26] audit: type=1804 audit(3924043894.272:5847): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3315" name="file0" dev="hugetlbfs" ino=74194 res=1 errno=0
[  608.545541][   T26] audit: type=1804 audit(3924043894.309:5848): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3315" name="file0" dev="hugetlbfs" ino=74194 res=1 errno=0
[  609.746819][T17247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  612.932734][ T4898] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  612.990763][T17291] loop9: detected capacity change from 0 to 512
[  612.997342][ T4898] Bluetooth: hci4: Injecting HCI hardware error event
[  613.008083][ T4189] Bluetooth: hci4: hardware error 0x00
[  613.110986][T17291] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  613.126671][T17291] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  613.166675][T17291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  613.215299][T17291] System zones: 1-12
[  613.239920][T17291] EXT4-fs (loop9): orphan cleanup on readonly fs
[  613.304616][T17291] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3329: invalid indirect mapped block 2 (level 2)
[  613.436798][T17291] EXT4-fs (loop9): Remounting filesystem read-only
[  613.458993][T17291] EXT4-fs (loop9): 1 truncate cleaned up
[  613.487567][T17291] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback.
[  616.494599][T17355] xt_policy: output policy not valid in PREROUTING and INPUT
[  622.146813][T17391] netlink: 'syz.4.3352': attribute type 4 has an invalid length.
[  622.462369][T17391] netlink: 'syz.4.3352': attribute type 4 has an invalid length.
[  622.721652][ T4896] lo speed is unknown, defaulting to 1000
[  623.737318][T17418] loop9: detected capacity change from 0 to 128
[  623.798196][T17418] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  623.867667][T17418] hpfs: filesystem error: improperly stopped
[  623.882501][T17418] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  623.891025][T17418] hpfs: You really don't want any checks? You are crazy...
[  623.915691][T17418] hpfs: hpfs_map_sector(): read error
[  623.927900][T17421] team0 (unregistering): Port device team_slave_0 removed
[  623.953878][T17418] hpfs: code page support is disabled
[  623.966124][T17421] team0 (unregistering): Failed to send options change via netlink (err -105)
[  623.980069][T17421] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  623.993677][T17418] hpfs: hpfs_map_4sectors(): unaligned read
[  624.001375][T17421] team0 (unregistering): Port device team_slave_1 removed
[  624.083748][T17418] hpfs: hpfs_map_4sectors(): unaligned read
[  624.091416][T17418] hpfs: filesystem error: unable to find root dir
[  624.137433][T17418] hpfs filesystem being remounted at /396/file1 supports timestamps until 2106-02-07 (0xffffffff)
[  624.152971][T17418] hpfs: hpfs_map_4sectors(): unaligned read
[  624.163636][T17418] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  624.175994][T17418] hpfs: hpfs_map_4sectors(): unaligned read
[  624.183275][T17418] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  625.243805][T17418] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  625.721686][T17453] xt_hashlimit: size too large, truncated to 1048576
[  628.156333][T17483] No such timeout policy "syz1"
[  630.972694][T17504] device bridge4 entered promiscuous mode
[  634.738440][T17559] device dummy0 entered promiscuous mode
[  634.744385][T17559] device macvlan3 entered promiscuous mode
[  634.802863][ T4189] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  634.813447][ T4189] CPU: 0 PID: 4189 Comm: kworker/u5:1 Not tainted syzkaller #0
[  634.821349][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  634.831615][ T4189] Workqueue: hci2 hci_rx_work
[  634.836722][ T4189] Call Trace:
[  634.840030][ T4189]  <TASK>
[  634.843163][ T4189]  dump_stack_lvl+0x188/0x250
[  634.847972][ T4189]  ? show_regs_print_info+0x20/0x20
[  634.853494][ T4189]  ? load_image+0x400/0x400
[  634.858312][ T4189]  sysfs_create_dir_ns+0x26a/0x290
[  634.863740][ T4189]  ? sysfs_warn_dup+0xa0/0xa0
[  634.868552][ T4189]  ? process_one_work+0x85f/0x1010
[  634.874985][ T4189]  ? do_raw_spin_unlock+0x11d/0x230
[  634.880525][ T4189]  kobject_add_internal+0x6e0/0xd90
[  634.886543][ T4189]  kobject_add+0x160/0x230
[  634.891354][ T4189]  ? kobject_init+0x1d0/0x1d0
[  634.896240][ T4189]  ? klist_children_get+0x50/0x50
[  634.901285][ T4189]  ? get_device_parent+0x121/0x3f0
[  634.907078][ T4189]  device_add+0x483/0xfb0
[  634.911428][ T4189]  hci_conn_add_sysfs+0xd1/0x1e0
[  634.916481][ T4189]  le_conn_complete_evt+0xc48/0x15c0
[  634.921984][ T4189]  ? cs_le_create_conn+0x5e0/0x5e0
[  634.927747][ T4189]  ? __mutex_trylock_common+0x155/0x260
[  634.933324][ T4189]  hci_le_meta_evt+0x285/0x3c90
[  634.938305][ T4189]  ? hci_event_packet+0x37b/0x1370
[  634.943771][ T4189]  ? __lock_acquire+0x7d10/0x7d10
[  634.948929][ T4189]  ? hci_remote_host_features_evt+0x280/0x280
[  634.955290][ T4189]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  634.961045][ T4189]  ? mark_lock+0x94/0x320
[  634.965714][ T4189]  ? mutex_unlock+0x10/0x10
[  634.970403][ T4189]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  634.976782][ T4189]  ? lock_chain_count+0x20/0x20
[  634.981805][ T4189]  ? __rwlock_init+0x140/0x140
[  634.986598][ T4189]  hci_event_packet+0xe48/0x1370
[  634.991930][ T4189]  ? lockdep_hardirqs_on+0x94/0x140
[  634.997635][ T4189]  ? rcu_lock_release+0x20/0x20
[  635.002525][ T4189]  ? hci_send_to_monitor+0x9c/0x4a0
[  635.007831][ T4189]  hci_rx_work+0x255/0xa10
[  635.012371][ T4189]  process_one_work+0x85f/0x1010
[  635.017605][ T4189]  ? worker_detach_from_pool+0x240/0x240
[  635.023635][ T4189]  ? lockdep_hardirqs_off+0x70/0x100
[  635.029110][ T4189]  ? _raw_spin_lock_irq+0xb7/0xf0
[  635.034593][ T4189]  ? _raw_spin_lock_irqsave+0x100/0x100
[  635.040265][ T4189]  ? wq_worker_running+0x97/0x170
[  635.045488][ T4189]  worker_thread+0xaa6/0x1290
[  635.050230][ T4189]  kthread+0x436/0x520
[  635.054336][ T4189]  ? rcu_lock_release+0x20/0x20
[  635.059390][ T4189]  ? kthread_blkcg+0xd0/0xd0
[  635.064023][ T4189]  ret_from_fork+0x1f/0x30
[  635.068824][ T4189]  </TASK>
[  635.075371][ T4189] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  635.089481][ T4189] Bluetooth: hci2: failed to register connection device
[  636.886454][T17579] xt_hashlimit: size too large, truncated to 1048576
[  636.912866][T17579] xt_hashlimit: invalid rate
[  637.135295][T17602] loop9: detected capacity change from 0 to 512
[  637.189504][T17602] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  637.283634][T17602] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.3398: bad orphan inode 131083
[  637.333150][T17602] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  638.798906][T17637] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  638.798906][T17637] The task syz.9.3400 (17637) triggered the difference, watch for misbehavior.
[  639.777831][T17649] rdma_rxe: rxe_register_device failed with error -23
[  639.882163][T17649] rdma_rxe: failed to add bond_slave_1
[  645.224470][   T26] audit: type=1326 audit(3924043928.135:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  646.050270][   T26] audit: type=1326 audit(3924043928.135:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  646.132061][   T26] audit: type=1326 audit(3924043928.191:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  646.148581][T17708] bond0 speed is unknown, defaulting to 1000
[  646.551147][   T26] audit: type=1326 audit(3924043928.191:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  646.989167][   T26] audit: type=1326 audit(3924043928.191:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  647.217132][   T26] audit: type=1326 audit(3924043928.191:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  647.240527][   T26] audit: type=1326 audit(3924043928.458:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  647.264384][   T26] audit: type=1326 audit(3924043928.578:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  647.288255][   T26] audit: type=1326 audit(3924043928.578:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  647.312918][   T26] audit: type=1326 audit(3924043928.588:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.0.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa41c00d819 code=0x7ffc0000
[  647.515299][ T4446] Bluetooth: hci5: command 0x0409 tx timeout
[  647.740209][T17744] device bridge3 entered promiscuous mode
[  648.761696][T17708] lo speed is unknown, defaulting to 1000
[  648.955483][T17708] chnl_net:caif_netlink_parms(): no params data found
[  649.094211][T17708] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.125894][T17708] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.135870][T17708] device bridge_slave_0 entered promiscuous mode
[  649.147688][T17708] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.161502][T17708] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.179163][T17708] device bridge_slave_1 entered promiscuous mode
[  649.213363][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.232975][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.276994][T17708] team0: Port device team_slave_0 added
[  649.290487][T17708] team0: Port device team_slave_1 added
[  649.333943][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.341918][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  649.370331][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.383693][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.391678][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  649.421837][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  649.486638][T17708] device hsr_slave_0 entered promiscuous mode
[  649.494827][T17708] device hsr_slave_1 entered promiscuous mode
[  649.512365][T17708] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  649.527764][T17708] Cannot create hsr debugfs directory
[  649.769412][ T4230] Bluetooth: hci5: command 0x041b tx timeout
[  650.178807][ T4437] device hsr_slave_0 left promiscuous mode
[  650.185662][ T4437] device hsr_slave_1 left promiscuous mode
[  650.193613][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  650.201831][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.211068][ T4437] device bridge_slave_1 left promiscuous mode
[  650.218373][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.228317][ T4437] device bridge_slave_0 left promiscuous mode
[  650.234664][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.316139][ T4437] bond2 (unregistering): Released all slaves
[  650.330847][ T4437] bond1 (unregistering): Released all slaves
[  650.515167][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  650.542807][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  650.597601][ T4437] bond0 (unregistering): Released all slaves
[  652.023639][ T4446] Bluetooth: hci5: command 0x040f tx timeout
[  652.102506][T17708] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  652.141891][T17708] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  652.169123][T17708] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  652.190671][T17708] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  652.335318][T17708] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.357382][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  652.386959][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  652.407313][T17708] 8021q: adding VLAN 0 to HW filter on device team0
[  652.420869][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  652.454678][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  652.486535][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.493716][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.511284][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  652.547008][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  652.585220][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  652.605852][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.613066][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.683660][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  652.694996][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  652.713094][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  652.735781][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  652.768757][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  652.787693][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  652.809952][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  652.829880][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  652.843512][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  652.865127][T17708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  652.899832][T17708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  652.916814][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  652.934817][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  653.273433][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  653.290112][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  653.307122][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.614368][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  653.632771][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  653.660741][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  653.669951][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  653.683591][T17708] device veth0_vlan entered promiscuous mode
[  653.693733][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  653.702378][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  653.716545][T17708] device veth1_vlan entered promiscuous mode
[  653.741408][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  653.759141][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  653.767574][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  653.777334][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  653.789207][T17708] device veth0_macvtap entered promiscuous mode
[  653.803136][T17708] device veth1_macvtap entered promiscuous mode
[  653.820840][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  653.833597][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.846701][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.857937][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  653.868920][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  653.878465][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  653.888780][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  653.901336][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.913149][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.925439][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.938248][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.949363][T17708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.960960][T17708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.973440][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.984267][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  653.997805][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  654.011064][T17708] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.021341][T17708] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.038342][T17708] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.051189][T17708] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.142017][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.155137][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.175150][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  654.197008][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.205854][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.216867][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  654.278511][ T4230] Bluetooth: hci5: command 0x0419 tx timeout
[  654.348782][T17933] sch_tbf: burst 4 is lower than device lo mtu (18) !
[  654.392156][T17938] overlayfs: workdir and upperdir must reside under the same mount
[  656.243840][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'.
[  656.330103][T17993] netlink: 'syz.9.3433': attribute type 1 has an invalid length.
[  656.356581][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  656.356599][   T26] audit: type=1326 audit(3924043938.424:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.422367][   T26] audit: type=1326 audit(3924043938.460:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.447881][   T26] audit: type=1326 audit(3924043938.460:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.474634][   T26] audit: type=1326 audit(3924043938.460:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.499673][   T26] audit: type=1326 audit(3924043938.470:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.523508][   T26] audit: type=1326 audit(3924043938.470:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6aacc1104e code=0x7ffc0000
[  656.557937][   T26] audit: type=1326 audit(3924043938.470:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.596771][   T26] audit: type=1326 audit(3924043938.479:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.622384][   T26] audit: type=1326 audit(3924043938.507:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.647426][   T26] audit: type=1326 audit(3924043938.507:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  656.760864][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  656.767917][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  659.071031][T18049] rdma_rxe: rxe_register_device failed with error -23
[  659.104141][T18049] rdma_rxe: failed to add bond_slave_1
[  659.369861][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3457'.
[  659.663659][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3460'.
[  659.905733][T18088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3462'.
[  661.533518][T18057] loop7: detected capacity change from 0 to 40427
[  664.674149][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3482'.
[  665.276295][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  665.276313][   T26] audit: type=1326 audit(3924043946.654:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18200 comm="syz.0.3488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa41c00d819 code=0x0
[  665.676718][T18211] ufs: You didn't specify the type of your ufs filesystem
[  665.676718][T18211] 
[  665.676718][T18211] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  665.676718][T18211] 
[  665.676718][T18211] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  665.710954][T18211] ufs: ufstype=old is supported read-only
[  665.724537][T18211] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  669.635067][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.644876][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.128242][T18240] netlink: 'syz.9.3498': attribute type 33 has an invalid length.
[  670.171315][T18240] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3498'.
[  670.762255][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.772218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.272323][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.294178][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.338113][ T4499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.379931][T18273] netlink: 'syz.9.3507': attribute type 39 has an invalid length.
[  671.389030][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.398840][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.878074][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.820769][   T26] audit: type=1326 audit(3924043955.457:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  675.270339][    C0] net_ratelimit: 10 callbacks suppressed
[  675.270362][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.340774][   T26] audit: type=1326 audit(3924043955.457:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  675.535588][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.562858][   T26] audit: type=1326 audit(3924043955.457:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  675.681091][   T26] audit: type=1326 audit(3924043955.466:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  675.789279][   T26] audit: type=1326 audit(3924043955.466:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  675.871540][   T26] audit: type=1326 audit(3924043955.466:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  675.897130][T18347] loop7: detected capacity change from 0 to 512
[  675.951757][T18347] FAT-fs (loop7): Unrecognized mount option "/dev/comedi5" or missing value
[  675.980288][   T26] audit: type=1326 audit(3924043955.466:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  676.007358][   T26] audit: type=1326 audit(3924043955.466:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3319b2904e code=0x7ffc0000
[  676.062789][   T26] audit: type=1326 audit(3924043955.484:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3319b2904e code=0x7ffc0000
[  676.387077][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.395603][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.844678][   T26] audit: type=1326 audit(3924043955.484:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18319 comm="syz.9.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3319b2904e code=0x7ffc0000
[  677.419729][T18386] capability: warning: `syz.0.3535' uses 32-bit capabilities (legacy support in use)
[  677.514035][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.587035][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.607908][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.620375][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.634706][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.646417][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.660772][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.672203][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.683526][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.694968][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  677.709451][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3534'.
[  678.138174][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.651650][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.665395][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.467048][ T4897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.779574][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.673757][T18435] tipc: Started in network mode
[  680.758752][T18435] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  680.796994][T18435] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  680.895223][    C0] net_ratelimit: 1 callbacks suppressed
[  680.895245][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.942981][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.025121][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.061925][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.033675][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.949026][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.236699][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.248385][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.323237][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.331907][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.279674][T18502] 9pnet: Insufficient options for proto=fd
[  685.299178][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3563'.
[  686.628717][    C0] net_ratelimit: 4 callbacks suppressed
[  686.628739][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.733409][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.216020][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.224426][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.232796][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.242771][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.305481][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.134319][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.443676][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.452622][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.058085][T18559] atomic_op ffff88802c2df998 conn xmit_atomic 0000000000000000
[  691.845793][ T4200] Bluetooth: Wrong link type (-71)
[  692.697613][    C0] net_ratelimit: 4 callbacks suppressed
[  692.697658][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.744602][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.673842][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.684122][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.695132][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.703941][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.548912][T18602] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  695.818880][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.827713][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.010688][T18611] device ip6gre1 entered promiscuous mode
[  696.935026][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.943923][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.293204][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.304171][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.313837][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.323528][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.333417][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.343168][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.352633][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.362401][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.372040][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.381735][T18616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  697.797557][T18633] bridge0: port 3(hsr0) entered blocking state
[  697.808728][T18633] bridge0: port 3(hsr0) entered disabled state
[  697.820927][T18633] device hsr0 entered promiscuous mode
[  698.246942][    C0] net_ratelimit: 1 callbacks suppressed
[  698.246964][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.817277][T18665] bond0: Device is already in use.
[  699.018870][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.028198][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.189368][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.197851][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.685063][T18671] device syzkaller0 entered promiscuous mode
[  700.316324][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.299626][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.308379][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.317056][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.355694][ T4499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.398505][T18690] ´(Y}ñB: renamed from veth1_to_bridge
[  702.059416][T18710] bond0: Device is already in use.
[  702.622844][T18710] rdma_rxe: ignoring netdev event = 32 for bond0
[  703.176703][T18710] rdma_rxe: ignoring netdev event = 34 for bond0
[  703.229016][T18710] rdma_rxe: ignoring netdev event = 12 for bond0
[  703.349512][T18723] __nla_validate_parse: 12 callbacks suppressed
[  703.349531][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3623'.
[  703.414371][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'.
[  703.784408][    C0] net_ratelimit: 4 callbacks suppressed
[  703.784428][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.930048][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  703.948228][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  703.962367][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  703.978409][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  703.993936][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  704.010218][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  704.026265][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  704.043011][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3625'.
[  706.323494][T18738] loop9: detected capacity change from 0 to 512
[  706.984410][ T4428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.993060][ T4428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.001450][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.009792][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.018359][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.119807][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.128532][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.439667][T18760] loop7: detected capacity change from 0 to 128
[  709.155314][T18760] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  709.257588][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.266682][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.719760][T18760] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  710.385099][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.394040][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.716984][T18760] ext2 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  711.003399][T18793] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  711.512154][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.521136][ T4896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.544357][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.628033][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.636808][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.208906][T18836] gfs2: gfs2 mount does not exist
[  713.584114][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.238142][T18844] loop9: detected capacity change from 0 to 256
[  714.356709][T18844] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  714.472624][T18844] vfat filesystem being mounted at /452/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  714.882469][    C0] net_ratelimit: 3 callbacks suppressed
[  714.882487][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.094577][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.174055][ T4448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.183201][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.529590][T18847] tipc: Started in network mode
[  715.542593][T18847] tipc: Node identity 466c6167733a2072002e, cluster identity 4711
[  715.634851][T18865] bridge0: port 1(hsr0) entered blocking state
[  715.651405][T18865] bridge0: port 1(hsr0) entered disabled state
[  715.740331][T18865] device hsr0 entered promiscuous mode
[  716.009808][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.018798][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.137031][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.157283][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.873200][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.883572][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.084763][T18911] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  721.112221][T18911] __nla_validate_parse: 2 callbacks suppressed
[  721.112240][T18911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3662'.
[  722.089999][    C0] net_ratelimit: 4 callbacks suppressed
[  722.090020][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.105860][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.144065][ T4897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.282841][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'.
[  722.356362][T18926] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3665'.
[  723.206052][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.215942][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.295290][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  723.301784][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  723.711969][T18951] bridge0: port 3(hsr0) entered blocking state
[  723.731515][T18951] bridge0: port 3(hsr0) entered disabled state
[  723.782030][T18951] device hsr0 entered promiscuous mode
[  724.332964][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.342068][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.920794][T18961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.930974][T18961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.940025][T18961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.368299][T18951] bridge0: port 3(hsr0) entered blocking state
[  725.374886][T18951] bridge0: port 3(hsr0) entered forwarding state
[  725.416935][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3675'.
[  725.426326][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3675'.
[  725.580337][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3675'.
[  725.939859][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3675'.
[  726.012674][T18963] netlink: 'syz.4.3675': attribute type 6 has an invalid length.
[  726.112472][T18968] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  726.122662][T18968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  726.133478][T18968] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  726.175882][   T26] kauditd_printk_skb: 63 callbacks suppressed
[  726.175902][   T26] audit: type=1800 audit(3924044002.782:5965): pid=18968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3673" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  727.725020][    C0] net_ratelimit: 373 callbacks suppressed
[  727.725040][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.138436][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.340065][T19014] netlink: 'syz.9.3688': attribute type 1 has an invalid length.
[  728.449024][T19016] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  728.521054][T19016] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  728.601450][T19016] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  728.633473][T19016] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  728.809732][T19016] bond5: (slave geneve2): making interface the new active one
[  728.852876][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.862181][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.910519][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.931926][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  729.222182][T19016] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  730.791522][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.800470][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.461460][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.471066][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.973067][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3699'.
[  738.546466][T19129] loop9: detected capacity change from 0 to 256
[  738.638320][T19129] FAT-fs (loop9): Unrecognized mount option "smackfsroot=shortname=mixed" or missing value
[  743.406486][T19165] overlayfs: failed to clone upperpath
[  745.413705][T19199] loop9: detected capacity change from 0 to 256
[  747.392608][T19199] vfat filesystem being mounted at /467/bus supports timestamps until 2107-12-31 (0x10391447e)
[  748.814623][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3737'.
[  749.324744][T19248] loop7: detected capacity change from 0 to 256
[  749.558529][T19248] vfat filesystem being mounted at /48/file1 supports timestamps until 2107-12-31 (0x10391447e)
[  750.384240][T19252] netlink: 'syz.7.3747': attribute type 1 has an invalid length.
[  750.558991][T19255] loop9: detected capacity change from 0 to 4096
[  750.563214][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3745'.
[  750.593840][T19255] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512)
[  750.628784][T19256] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  750.643920][T19260] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  750.655796][T19260] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  750.674174][T19260] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  750.687646][T19260] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  750.761480][T19260] bond1: (slave geneve2): making interface the new active one
[  750.978819][T19260] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  751.307393][T19260] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  751.424178][T19268] bridge4: port 1(erspan0) entered blocking state
[  751.457453][T19268] bridge4: port 1(erspan0) entered disabled state
[  751.503477][T19268] device erspan0 entered promiscuous mode
[  751.534228][T19267] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3747'.
[  751.572721][T19267] 8021q: adding VLAN 0 to HW filter on device bond1
[  751.610510][T19282] bridge0: port 1(vlan2) entered blocking state
[  751.658923][T19282] bridge0: port 1(vlan2) entered disabled state
[  751.720431][T19282] device vlan2 entered promiscuous mode
[  751.726216][T19282] device bridge_slave_0 entered promiscuous mode
[  754.280913][T19287] bridge0: port 3(hsr0) entered disabled state
[  754.287257][T19287] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.294855][T19287] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.550237][   T26] audit: type=1326 audit(3924044029.033:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19316 comm="syz.9.3762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x0
[  755.473186][T19287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  755.513607][T19287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  755.845602][T19287] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.854800][T19287] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.864084][T19287] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.873552][T19287] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.007992][T19287] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  756.018524][T19287] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  756.028364][T19287] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  756.038179][T19287] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  756.066362][T19309] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  758.326219][T19350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3767'.
[  759.394787][T19350] bridge1: port 1(erspan0) entered blocking state
[  759.435468][T19365] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000
[  759.436438][T19350] bridge1: port 1(erspan0) entered disabled state
[  759.455249][T19350] device erspan0 entered promiscuous mode
[  762.885764][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.969349][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.012972][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.021962][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.156933][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.166670][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.176315][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.184873][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.195151][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.217493][T19419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.281844][T19448] netlink: 'syz.3.3793': attribute type 10 has an invalid length.
[  765.396020][T19448] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  765.944495][T19476] device ip6gre1 entered promiscuous mode
[  766.089802][T19476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  766.139847][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3803'.
[  767.110391][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  767.338245][T19497] loop7: detected capacity change from 0 to 7
[  767.408422][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.419756][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  767.538747][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.550261][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  767.674108][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.685110][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  767.783560][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.794879][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  767.955271][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  767.966679][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  768.067889][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  768.079216][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  768.209420][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  768.220554][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  768.229058][T17716] ldm_validate_partition_table(): Disk read failed.
[  768.369461][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  768.381338][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  768.458112][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  768.470013][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  768.504094][    C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  768.515223][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  768.543998][T17716] Dev loop7: unable to read RDB block 0
[  768.576601][T17716]  loop7: unable to read partition table
[  768.598388][T17716] loop7: partition table beyond EOD, truncated
[  768.897980][    C0] net_ratelimit: 831 callbacks suppressed
[  768.897995][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.913832][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.024933][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.034362][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.184787][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  770.199408][ T4448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  770.220986][T19497] ldm_validate_partition_table(): Disk read failed.
[  770.239828][T19497] Dev loop7: unable to read RDB block 0
[  770.275395][T19497]  loop7: unable to read partition table
[  770.285318][T19497] loop7: partition table beyond EOD, truncated
[  770.291920][T19497] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  771.152033][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.161005][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.030843][ T4420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.039407][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.328109][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.337618][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.496290][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  772.505157][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  773.862058][T19532] loop7: detected capacity change from 0 to 1024
[  774.025714][T19532] hfsplus: failed to load root directory
[  774.249177][T19560] device ip6gre4 entered promiscuous mode
[  774.363743][ T4499] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  774.400993][ T4499] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  774.620117][    C0] net_ratelimit: 2 callbacks suppressed
[  774.620138][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.793350][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  775.353795][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.377707][ T4897] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  775.440549][ T4897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.463705][T19321] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  775.750501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.760128][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.588982][T19321] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  776.874419][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.883788][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.001467][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.010339][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.753809][ T4456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.821642][   T26] audit: type=1326 audit(3924044051.427:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  778.954514][   T26] audit: type=1326 audit(3924044051.454:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  779.037689][   T26] audit: type=1326 audit(3924044051.454:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  779.076085][   T26] audit: type=1326 audit(3924044051.463:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  779.531962][   T26] audit: type=1326 audit(3924044051.463:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  779.775812][   T26] audit: type=1326 audit(3924044051.463:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  779.844614][   T26] audit: type=1326 audit(3924044051.463:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  779.867878][   T26] audit: type=1326 audit(3924044051.463:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  779.911010][   T26] audit: type=1326 audit(3924044051.463:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  780.026200][   T26] audit: type=1326 audit(3924044051.463:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19601 comm="syz.9.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  780.061609][T19605] net_ratelimit: 378 callbacks suppressed
[  780.061629][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.082169][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  780.122251][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.141549][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.213022][T19602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.233432][T19602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.255826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.264123][T19602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.273057][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.036550][ T4230] Bluetooth: hci5: command 0x0406 tx timeout
[  781.382865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.675568][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.770592][T19662] device erspan0 left promiscuous mode
[  781.781207][T19662] bridge1: port 1(erspan0) entered disabled state
[  781.817552][T19662] device bridge_slave_0 left promiscuous mode
[  781.855659][T19662] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.926566][T19662] device bridge_slave_1 left promiscuous mode
[  781.933210][T19662] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.111684][T19662] bond0: (slave bond_slave_0): Releasing backup interface
[  782.132223][T19662] bond0: (slave bond_slave_1): Releasing backup interface
[  782.194563][T19662] team0: Port device team_slave_0 removed
[  783.941230][T19662] team0: Port device team_slave_1 removed
[  784.007079][T19662] batman_adv: batadv0: Removing interface: batadv_slave_0
[  784.070526][T19662] batman_adv: batadv0: Removing interface: batadv_slave_1
[  784.103855][T19662] device hsr0 left promiscuous mode
[  784.109991][T19662] bridge0: port 3(hsr0) entered disabled state
[  784.221546][T19662] bond1: (slave geneve2): Releasing active interface
[  784.328137][T19668] team0: Mode changed to "loadbalance"
[  784.335304][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  784.421433][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3842'.
[  786.141315][   T13] net_ratelimit: 16 callbacks suppressed
[  786.141336][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.156764][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.165381][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.626415][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.636426][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.764430][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  787.764449][   T26] audit: type=1800 audit(3924044059.676:6039): pid=19752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3860" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  788.752415][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.762408][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.879527][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  789.888478][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.221590][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  790.229822][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.238957][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  790.487318][ T4428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.734133][    C0] net_ratelimit: 1 callbacks suppressed
[  791.734154][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.749053][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.838229][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.847606][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.500405][T19794] loop7: detected capacity change from 0 to 32768
[  793.850977][T19794] jfs filesystem being mounted at /66/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  793.955151][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.964375][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.266601][ T4448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.275604][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.314005][T19797] netlink: 'syz.4.3868': attribute type 10 has an invalid length.
[  794.322355][T19797] rdma_rxe: ignoring netdev event = 9 for bond0
[  794.346862][T19797] rdma_rxe: ignoring netdev event = 8 for bond0
[  794.357469][T19797] rdma_rxe: ignoring netdev event = 12 for bond0
[  794.363978][T19797] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  794.409177][   T13] bond0 speed is unknown, defaulting to 1000
[  795.081838][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.092357][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.033946][T19833] bond0 speed is unknown, defaulting to 1000
[  797.249703][ T4426] net_ratelimit: 3 callbacks suppressed
[  797.249723][ T4426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.264495][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.347123][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.356426][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.558924][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.574014][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.051488][T19833] lo speed is unknown, defaulting to 1000
[  799.227667][T19867] binder_alloc: 19860: binder_alloc_buf, no vma
[  799.687828][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.700420][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.804551][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.813759][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.670963][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  801.788464][T19911] loop9: detected capacity change from 0 to 2048
[  801.854436][T19911] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback.
[  802.007860][T19911] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  803.069098][    C0] net_ratelimit: 2 callbacks suppressed
[  803.069120][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.083229][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.093503][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.102163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.185803][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.194494][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.323466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.333227][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.439626][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.448814][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.130400][T19917] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  807.924347][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  808.521645][ T4434] net_ratelimit: 2 callbacks suppressed
[  808.521663][ T4434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.536552][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.586159][T19917] EXT4-fs (loop9): Remounting filesystem read-only
[  808.647755][T19321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.514754][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.526126][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.601456][ T4428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.628942][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.895856][ T4897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.640211][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.650150][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.822163][   T26] audit: type=1326 audit(3924044080.953:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218b2cc819 code=0x7ffc0000
[  810.833078][T19985] loop7: detected capacity change from 0 to 16
[  810.973856][T19985] erofs: (device loop7): mounted with root inode @ nid 36.
[  811.069339][   T26] audit: type=1326 audit(3924044081.156:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f218b2cc819 code=0x7ffc0000
[  811.611674][   T26] audit: type=1326 audit(3924044081.156:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218b2cc819 code=0x7ffc0000
[  812.000747][   T26] audit: type=1326 audit(3924044081.156:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218b2cc819 code=0x7ffc0000
[  812.066317][   T26] audit: type=1326 audit(3924044081.202:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f218b2cc819 code=0x7ffc0000
[  813.559962][   T26] audit: type=1326 audit(3924044081.202:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218b2cc819 code=0x7ffc0000
[  813.610917][T20005] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  813.680091][   T26] audit: type=1326 audit(3924044081.202:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19979 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218b2cc819 code=0x7ffc0000
[  813.983141][    C0] net_ratelimit: 41 callbacks suppressed
[  813.983161][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.004811][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.402384][T20021] bond0 speed is unknown, defaulting to 1000
[  815.120676][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.129559][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.368351][T20035] loop7: detected capacity change from 0 to 1024
[  815.554571][ T4420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.563748][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.129783][T20058] Invalid ELF header magic: != ELF
[  816.227364][T20021] lo speed is unknown, defaulting to 1000
[  816.237495][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.256879][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.291039][T20074] 9p filesystem being mounted at /1027/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  816.561328][T20021] chnl_net:caif_netlink_parms(): no params data found
[  816.584541][ T4460] Bluetooth: hci0: command 0x0409 tx timeout
[  816.700502][T20021] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.711380][T20021] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.725915][T20021] device bridge_slave_0 entered promiscuous mode
[  816.737652][T20021] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.746988][T20021] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.755527][T20021] device bridge_slave_1 entered promiscuous mode
[  817.364266][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.373383][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.606042][T20021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  818.659658][T20021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.746839][T20111] cgroup2: Unexpected value for 'memory_localevents'
[  818.895350][ T4499] Bluetooth: hci0: command 0x041b tx timeout
[  818.998241][T20021] team0: Port device team_slave_0 added
[  819.331058][T20021] team0: Port device team_slave_1 added
[  819.618735][    C0] net_ratelimit: 2 callbacks suppressed
[  819.618758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.658271][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.714527][ T4499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.939071][T20128] binder_alloc: 20127: binder_alloc_buf, no vma
[  819.962881][T20021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.999718][T20021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  820.246753][T20021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.368631][T20021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.414068][T20021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  820.745652][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.754230][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.164795][ T4499] Bluetooth: hci0: command 0x040f tx timeout
[  821.190213][ T4416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.199178][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.220714][T20021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  821.346478][T20021] device hsr_slave_0 entered promiscuous mode
[  821.428961][T20021] device hsr_slave_1 entered promiscuous mode
[  821.443233][T20021] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  821.464964][T20021] Cannot create hsr debugfs directory
[  821.593464][ T4416] smc: removing ib device syz1
[  821.872702][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.881954][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.947231][T20159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.476862][ T4897] Bluetooth: hci0: command 0x0419 tx timeout
[  824.475525][T20198] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  824.542408][   T26] audit: type=1326 audit(3924044093.612:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20197 comm="syz.7.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  824.643512][   T26] audit: type=1326 audit(3924044093.659:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20197 comm="syz.7.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  824.825380][   T26] audit: type=1326 audit(3924044093.659:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20197 comm="syz.7.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  824.972457][   T26] audit: type=1326 audit(3924044093.659:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20197 comm="syz.7.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  825.136031][   T26] audit: type=1326 audit(3924044093.659:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20197 comm="syz.7.3966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  825.338084][T20021] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  826.285660][T20021] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  826.351623][T20021] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  826.429199][T20021] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  828.027054][T20021] 8021q: adding VLAN 0 to HW filter on device bond0
[  828.324454][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  828.554611][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  828.849257][T20021] 8021q: adding VLAN 0 to HW filter on device team0
[  828.945541][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  829.004824][T20268] tipc: Failed to remove unknown binding: 66,0,0/5:1533775779/1533775780
[  829.015379][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  829.080471][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state
[  829.088274][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state
[  829.196446][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  829.216437][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  829.241913][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  829.286341][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state
[  829.293942][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state
[  829.362655][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  829.390395][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  829.405692][T20280] __sock_release: fasync list not empty!
[  829.411212][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  829.454180][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  829.507097][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  829.550783][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  829.580758][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  829.603037][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  829.628276][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  829.678716][T20021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  829.781111][T20021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  829.820366][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  829.831215][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  835.658135][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  835.945018][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  835.975726][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  836.027520][T20021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.248642][ T4420] tipc: Left network mode
[  836.549422][T20378] futex_wake_op: syz.0.4005 tries to shift op by 144; fix this program
[  837.486828][T20391] loop7: detected capacity change from 0 to 512
[  837.781058][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  837.815319][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  837.997777][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  838.030914][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  838.103824][T20021] device veth0_vlan entered promiscuous mode
[  838.141635][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  838.170062][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  838.255177][T20021] device veth1_vlan entered promiscuous mode
[  838.522891][T20393] orangefs_mount: mount request failed with -4
[  839.922685][T20391] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  840.179397][T20391] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  840.247717][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  840.326012][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  840.416642][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  840.425571][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  840.461855][T20021] device veth0_macvtap entered promiscuous mode
[  840.543129][T20021] device veth1_macvtap entered promiscuous mode
[  841.439593][T20414] bond0: (slave wlan1): Releasing backup interface
[  841.600906][T20418] netlink: 'syz.9.4014': attribute type 1 has an invalid length.
[  841.779907][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  841.810567][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  841.873845][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.902838][T20021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  841.934692][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  841.949353][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.961509][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  841.983717][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.997146][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  842.009100][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  842.022346][T20021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  842.034813][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  842.046049][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  842.062066][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  842.096552][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  842.132091][T20021] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  842.158891][T20021] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  842.188955][T20021] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  842.216538][T20021] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  842.422471][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.430810][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  842.489475][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  842.504615][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.524080][ T4420] bond0: (slave wlan1): Releasing backup interface
[  842.524632][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  842.540894][ T4420] rdma_rxe: ignoring netdev event = 8 for bond0
[  842.547728][ T4420] rdma_rxe: ignoring netdev event = 18 for bond0
[  842.556265][ T4420] rdma_rxe: ignoring netdev event = 12 for bond0
[  842.569610][ T4499] bond0 speed is unknown, defaulting to 1000
[  842.569882][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  842.599821][T20462] syz.9.4024 (20462) used greatest stack depth: 17168 bytes left
[  842.708294][T20474] loop8: detected capacity change from 0 to 1024
[  842.737005][T20474] hfsplus: unable to parse mount options
[  844.108820][ T4420] rdma_rxe: ignoring netdev event = 26 for bond0
[  844.185543][ T4420] rdma_rxe: ignoring netdev event = 21 for bond0
[  844.292946][ T4420] device hsr_slave_0 left promiscuous mode
[  844.349247][ T4420] device dummy0 left promiscuous mode
[  844.401706][ T4420] bond9 (unregistering): Released all slaves
[  844.604926][ T4420] bond8 (unregistering): Released all slaves
[  845.428150][ T4420] bond7 (unregistering): Released all slaves
[  845.722576][ T4420] bond6 (unregistering): Released all slaves
[  845.817071][ T4420] bond5 (unregistering): Released all slaves
[  847.116536][ T4420] bond4 (unregistering): Released all slaves
[  847.155719][ T4420] bond3 (unregistering): Released all slaves
[  847.238146][ T4420] bond2 (unregistering): Released all slaves
[  847.422613][ T4420] bond1 (unregistering): Released all slaves
[  848.725935][ T4273] smc: removing ib device sy‡1
[  848.755581][ T4420] bond0 (unregistering): Released all slaves
[  849.215841][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'.
[  849.716602][T20495] netlink: 'syz.3.4029': attribute type 1 has an invalid length.
[  849.725286][ T4896] lo speed is unknown, defaulting to 1000
[  849.739058][ T4499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  850.028701][T20538] device syzkaller0 entered promiscuous mode
[  850.856079][ T4499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  851.163105][T20556] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid
[  851.927324][T20550] netlink: 'syz.8.4042': attribute type 1 has an invalid length.
[  855.548768][T20601] autofs4:pid:20601:autofs_fill_super: called with bogus options
[  855.705332][T20601] loop7: detected capacity change from 0 to 64
[  855.796535][T20601] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported.
[  855.841310][T20601] MINIX-fs: bad superblock
[  856.471484][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  856.480419][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  857.421389][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4060'.
[  858.285288][T20645] bond5: (slave batadv_slave_1): Releasing backup interface
[  859.433809][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4066'.
[  859.494597][T20678] netlink: 'syz.3.4069': attribute type 12 has an invalid length.
[  859.530487][T20677] device syzkaller0 entered promiscuous mode
[  859.685921][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4073'.
[  859.762941][T20689] ptrace attach of "./syz-executor exec"[17708] was attempted by " Àÿ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                        \x07                                                                                                                                                                                                                                                                                                                                                                                                "[20689]
[  862.660609][T20706] loop8: detected capacity change from 0 to 512
[  863.395951][T20706] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  863.571697][T20706] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  864.166564][T20706] EXT4-fs (loop8): 1 truncate cleaned up
[  864.176468][T20706] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none.
[  866.572214][T20732] net_ratelimit: 7 callbacks suppressed
[  866.572234][T20732] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  868.507762][T20732] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  869.386744][T20763] IPVS: rr: FWM 3 0x00000003 - no destination available
[  869.500471][T20771] batman_adv: batadv0: Removing interface: dummy0
[  870.881722][T20768] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  871.112832][T20768] 8021q: adding VLAN 0 to HW filter on device bond6
[  871.384879][T20795] loop8: detected capacity change from 0 to 128
[  871.687554][T20795] netlink: 'syz.8.4097': attribute type 1 has an invalid length.
[  877.213874][T20846] 8021q: adding VLAN 0 to HW filter on device bond5
[  880.067177][T20846] bond5: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  880.311176][ T4437] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  880.328420][T20821] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  881.995247][T20822] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  883.161921][T20903] ipt_CLUSTERIP: Please specify destination IP
[  884.305371][T20911] device syzkaller0 entered promiscuous mode
[  886.692632][T20937] autofs4:pid:20937:autofs_fill_super: called with bogus options
[  887.152057][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4141'.
[  891.074093][T20969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4137'.
[  891.169942][   T26] audit: type=1326 audit(3924044155.064:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  891.317465][   T26] audit: type=1326 audit(3924044155.064:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  892.122825][   T26] audit: type=1326 audit(3924044155.064:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  892.167759][   T26] audit: type=1326 audit(3924044155.064:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  892.283735][   T26] audit: type=1326 audit(3924044155.064:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  892.328871][   T26] audit: type=1326 audit(3924044155.064:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  892.425336][   T26] audit: type=1326 audit(3924044155.083:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  892.513397][   T26] audit: type=1326 audit(3924044155.083:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  893.196022][   T26] audit: type=1326 audit(3924044155.083:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  893.859086][   T26] audit: type=1326 audit(3924044155.083:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.9.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3319b68819 code=0x7ffc0000
[  898.150793][T21040] device wg1 left promiscuous mode
[  898.168834][T21040] device bridge2 left promiscuous mode
[  899.514282][ T4460] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  899.818277][ T4460] usb 10-1: Using ep0 maxpacket: 32
[  900.327517][ T4460] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  900.384518][ T4460] usb 10-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  900.621617][ T4460] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.018143][ T4460] usb 10-1: config 0 descriptor??
[  901.364106][ T4460] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  902.803545][T21096] loop7: detected capacity change from 0 to 128
[  903.469418][T21101] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4172'.
[  905.592958][ T4896] usb 10-1: USB disconnect, device number 9
[  906.407052][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  906.442233][T21096] netlink: 'syz.7.4171': attribute type 1 has an invalid length.
[  906.587148][T21096] 8021q: adding VLAN 0 to HW filter on device bond2
[  906.695960][T21118] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  906.802587][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  908.862954][T21145] ip6t_srh: unknown srh invflags 4000
[  910.504449][T19298] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  910.779479][T21188] hugetlbfs: syz.9.4188 (21188): Using mlock ulimits for SHM_HUGETLB is deprecated
[  910.917534][T19298] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  910.940754][T19298] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  911.102484][T19298] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  911.121733][T19298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  911.129974][T19298] usb 9-1: SerialNumber: syz
[  911.176013][T21194] device syzkaller0 entered promiscuous mode
[  911.232690][T19298] usb 9-1: 0:2 : does not exist
[  911.358696][T21201] loop7: detected capacity change from 0 to 1024
[  911.410330][T21201] EXT4-fs (loop7): Ignoring removed orlov option
[  911.435780][T21201] EXT4-fs (loop7): Ignoring removed nobh option
[  911.477311][T21201] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  911.565995][T21210] loop9: detected capacity change from 0 to 512
[  911.631994][T21201] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,orlov,noauto_da_alloc,noauto_da_alloc,data_err=ignore,norecovery,dioread_nolock,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,nobh,lazytime,,errors=continue. Quota mode: writeback.
[  911.712252][T19298] usb 9-1: USB disconnect, device number 2
[  911.783533][T21210] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  911.796560][T21201] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3885: comm syz.7.4191: Allocating blocks 497-513 which overlap fs metadata
[  911.815269][T21210] ext4 filesystem being mounted at /561/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  911.989642][T21201] EXT4-fs (loop7): pa ffff888073d409a0: logic 131328, phys. 449, len 4
[  912.000000][T21201] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1
[  915.732904][T21253] netlink: 'syz.3.4201': attribute type 21 has an invalid length.
[  915.830130][T21253] netlink: 'syz.3.4201': attribute type 6 has an invalid length.
[  915.838917][T21253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4201'.
[  916.905603][T21269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  916.984086][T21269] device syzkaller0 entered promiscuous mode
[  917.032141][T21269] tipc: Resetting bearer <eth:syzkaller0>
[  918.036818][T19298] tipc: Node number set to 897073429
[  919.618609][ T4448] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  920.644832][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  920.644851][   T26] audit: type=1326 audit(3924044182.284:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  920.753384][   T26] audit: type=1326 audit(3924044182.284:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  920.800903][   T26] audit: type=1326 audit(3924044182.321:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  920.904948][   T26] audit: type=1326 audit(3924044182.321:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  920.946893][   T26] audit: type=1326 audit(3924044182.321:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  921.001099][T21352] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4223'.
[  921.063854][   T26] audit: type=1326 audit(3924044182.321:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  921.141411][    C0] Unknown status report in ack skb
[  921.202160][T21356] netlink: 'syz.8.4223': attribute type 12 has an invalid length.
[  922.115844][   T26] audit: type=1326 audit(3924044182.321:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  922.253314][   T26] audit: type=1326 audit(3924044182.321:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  922.315554][   T26] audit: type=1326 audit(3924044182.321:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  922.340538][ T4448] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00
[  922.363815][ T4448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.391124][ T4448] usb 10-1: Product: syz
[  922.398279][   T26] audit: type=1326 audit(3924044182.321:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.7.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aacc50819 code=0x7ffc0000
[  922.426701][ T4448] usb 10-1: Manufacturer: syz
[  922.439072][ T4448] usb 10-1: SerialNumber: syz
[  922.552073][ T4448] usb 10-1: config 0 descriptor??
[  922.573486][ T4448] usb 10-1: can't set config #0, error -71
[  922.594828][ T4448] usb 10-1: USB disconnect, device number 10
[  923.098176][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  923.119922][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  924.840987][T21403] loop7: detected capacity change from 0 to 4096
[  924.906450][T21403] EXT4-fs (loop7): inline encryption not supported
[  925.011776][T21418] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4232'.
[  926.489217][T21403] EXT4-fs (loop7): Test dummy encryption mode enabled
[  926.654321][T21403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  926.732346][T21403] System zones: 0-5
[  926.776153][T21403] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  926.792280][T21428] device syzkaller0 entered promiscuous mode
[  929.032044][T21446] openvswitch: netlink: Actions may not be safe on all matching packets
[  929.919553][T21475] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  933.950480][T21510] overlayfs: failed to resolve './file0': -2
[  935.159348][T21521] device batadv_slave_1 entered promiscuous mode
[  935.223816][T21520] device batadv_slave_1 left promiscuous mode
[  935.241410][T21524] syz.9.4262 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  936.525324][T21541] device syzkaller0 entered promiscuous mode
[  938.546225][T21570] device ip6gre1 entered promiscuous mode
[  939.515189][T21583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4274'.
[  939.524805][T21583] lo: Caught tx_queue_len zero misconfig
[  941.553418][T21611] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  942.067187][T21617] netlink: 'syz.9.4283': attribute type 1 has an invalid length.
[  942.113942][T21617] device bond6 entered promiscuous mode
[  942.127845][T21617] 8021q: adding VLAN 0 to HW filter on device bond6
[  942.231675][T21619] 8021q: adding VLAN 0 to HW filter on device bond6
[  942.248343][T21619] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  942.276118][T21619] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  942.334576][T21619] bond6: (slave wireguard0): making interface the new active one
[  942.343105][T21619] device wireguard0 entered promiscuous mode
[  942.372804][T21619] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  943.567750][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  948.337043][ T4895] Bluetooth: hci0: command 0x0406 tx timeout
[  948.352670][T21673] loop8: detected capacity change from 0 to 1024
[  948.599230][T21673] EXT4-fs (loop8): Ignoring removed orlov option
[  948.626106][T21673] EXT4-fs (loop8): Ignoring removed bh option
[  949.701026][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4304'.
[  949.734452][T21673] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0xfffffffffffffffe,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback.
[  949.772482][    C0] vkms_vblank_simulate: vblank timer overrun
[  950.006816][T21704] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4299'.
[  950.687626][T21708] netlink: 'syz.9.4307': attribute type 10 has an invalid length.
[  950.778116][T21708] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  954.763676][T21773] netlink: 'syz.9.4319': attribute type 1 has an invalid length.
[  954.825217][T21773] 8021q: adding VLAN 0 to HW filter on device bond7
[  954.915476][T21783] loop7: detected capacity change from 0 to 128
[  954.956687][T21783] FAT-fs (loop7): Directory bread(block 414) failed
[  954.966237][T21783] FAT-fs (loop7): Directory bread(block 415) failed
[  954.977314][T21783] FAT-fs (loop7): Directory bread(block 416) failed
[  955.226525][T21783] FAT-fs (loop7): Directory bread(block 417) failed
[  955.277837][T21783] FAT-fs (loop7): Directory bread(block 418) failed
[  955.342332][T21783] FAT-fs (loop7): Directory bread(block 419) failed
[  955.382619][T21783] FAT-fs (loop7): Directory bread(block 420) failed
[  955.415973][T21783] FAT-fs (loop7): Directory bread(block 421) failed
[  955.498686][T21783] vfat filesystem being mounted at /149/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  956.116617][T21796] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  957.305415][T21809] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4328'.
[  957.653485][T21832] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  958.552333][T21848] xt_nat: multiple ranges no longer supported
[  959.576546][T21868] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  963.834981][T21911] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  968.366977][T21967] device lo entered promiscuous mode
[  968.373235][T21967] device tunl0 entered promiscuous mode
[  968.379138][T21967] device gre0 entered promiscuous mode
[  968.385875][T21967] device gretap0 entered promiscuous mode
[  968.392088][T21967] device erspan0 entered promiscuous mode
[  968.398532][T21967] device ip_vti0 entered promiscuous mode
[  968.404927][T21967] device ip6_vti0 entered promiscuous mode
[  968.411479][T21967] device sit0 entered promiscuous mode
[  968.417595][T21967] device ip6tnl0 entered promiscuous mode
[  968.423492][T21967] device ip6gre0 entered promiscuous mode
[  968.430108][T21967] device syz_tun entered promiscuous mode
[  968.436926][T21967] device ip6gretap0 entered promiscuous mode
[  968.443110][T21967] device bridge0 entered promiscuous mode
[  968.449592][T21967] device vcan0 entered promiscuous mode
[  968.455397][T21967] device bond0 entered promiscuous mode
[  968.461746][T21967] device dummy0 entered promiscuous mode
[  968.468156][T21967] device nlmon0 entered promiscuous mode
[  968.474052][T21967] device caif0 entered promiscuous mode
[  968.479990][T21967] device batadv0 entered promiscuous mode
[  968.486088][T21967] device vxcan0 entered promiscuous mode
[  968.492241][T21967] device vxcan1 entered promiscuous mode
[  968.498209][T21967] device wg0 entered promiscuous mode
[  968.504625][T21967] device wg1 entered promiscuous mode
[  968.510796][T21967] device wg2 entered promiscuous mode
[  968.516881][T21967] device veth0_to_bridge entered promiscuous mode
[  968.524532][T21967] device bridge_slave_0 entered promiscuous mode
[  968.531839][T21967] device veth1_to_bridge entered promiscuous mode
[  968.539084][T21967] device bridge_slave_1 entered promiscuous mode
[  968.546400][T21967] device veth0_to_bond entered promiscuous mode
[  968.553544][T21967] device bond_slave_0 entered promiscuous mode
[  968.560075][T21967] device veth1_to_bond entered promiscuous mode
[  968.567221][T21967] device bond_slave_1 entered promiscuous mode
[  968.573778][T21967] device veth0_to_team entered promiscuous mode
[  968.580807][T21967] device team_slave_0 entered promiscuous mode
[  968.587856][T21967] device veth1_to_team entered promiscuous mode
[  968.594364][T21967] device team_slave_1 entered promiscuous mode
[  968.601389][T21967] device veth0_to_batadv entered promiscuous mode
[  968.608793][T21967] device batadv_slave_0 entered promiscuous mode
[  968.615700][T21967] device veth1_to_batadv entered promiscuous mode
[  968.623571][T21967] device batadv_slave_1 entered promiscuous mode
[  968.631493][T21967] device xfrm0 entered promiscuous mode
[  968.637613][T21967] device veth0_to_hsr entered promiscuous mode
[  968.645603][T21967] device veth1_to_hsr entered promiscuous mode
[  968.653095][T21967] device hsr0 entered promiscuous mode
[  968.659041][T21967] device veth1_virt_wifi entered promiscuous mode
[  968.666145][T21967] device veth0_virt_wifi entered promiscuous mode
[  968.673317][T21967] device virt_wifi0 entered promiscuous mode
[  968.679727][T21967] device vlan0 entered promiscuous mode
[  968.685997][T21967] device vlan1 entered promiscuous mode
[  968.692528][T21967] device macvlan0 entered promiscuous mode
[  968.698487][T21967] device macvlan1 entered promiscuous mode
[  968.704945][T21967] device ipvlan0 entered promiscuous mode
[  968.710985][T21967] device ipvlan1 entered promiscuous mode
[  968.717349][T21967] device macvtap0 entered promiscuous mode
[  968.723639][T21967] device macsec0 entered promiscuous mode
[  968.729849][T21967] device geneve0 entered promiscuous mode
[  968.736150][T21967] device geneve1 entered promiscuous mode
[  968.742324][T21967] device netdevsim0 entered promiscuous mode
[  968.749058][T21967] device netdevsim1 entered promiscuous mode
[  968.755205][T21967] device netdevsim2 entered promiscuous mode
[  968.762164][T21967] device netdevsim3 entered promiscuous mode
[  968.768795][T21967] device wlan0 entered promiscuous mode
[  968.774543][T21967] device wlan1 entered promiscuous mode
[  968.780698][T21967] device ipvlan2 entered promiscuous mode
[  968.786986][T21967] device bond1 entered promiscuous mode
[  968.793486][T21967] device geneve2 entered promiscuous mode
[  968.800020][T21967] device bridge1 entered promiscuous mode
[  968.806657][T21967] device vlan2 entered promiscuous mode
[  968.813028][T21967] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  968.821931][T21967] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  968.829884][T21967] device bond2 entered promiscuous mode
[  968.836286][T21967] device gretap1 entered promiscuous mode
[  969.059269][T21991] veth1_to_bond: Caught tx_queue_len zero misconfig
[  971.758233][T22019] netlink: 'syz.9.4373': attribute type 9 has an invalid length.
[  973.507019][T22038] overlayfs: failed to clone upperpath
[  975.662700][T22063] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready
[  976.744988][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  976.745007][   T26] audit: type=1800 audit(3924044234.759:6092): pid=22064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4384" name="bus" dev="ramfs" ino=85999 res=0 errno=0
[  976.754010][T22075] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  976.858405][T22079] IPVS: stopping master sync thread 22082 ...
[  976.880861][T22082] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  978.485414][T22105] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.4397'.
[  978.581194][T22109] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4400'.
[  979.114661][T22133] loop7: detected capacity change from 0 to 128
[  980.490194][T22133] msdos filesystem being remounted at /159/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  982.675904][T22157] device syzkaller0 left promiscuous mode
[  982.692891][T22157] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  983.478392][T22165] netlink: 'syz.8.4412': attribute type 1 has an invalid length.
[  984.441658][T22165] 8021q: adding VLAN 0 to HW filter on device bond1
[  984.484818][T22184] loop7: detected capacity change from 0 to 164
[  984.537341][T22168] bond1: (slave gretap1): making interface the new active one
[  984.596420][T22168] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  984.674855][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  984.759475][T22184] rock: directory entry would overflow storage
[  984.765881][T22184] rock: sig=0x4d4e, size=5, remaining=4
[  986.178126][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4423'.
[  986.203623][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4423'.
[  986.825293][T22231] loop7: detected capacity change from 0 to 4096
[  986.967682][T22231] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  987.998504][T22247] device syzkaller0 entered promiscuous mode
[  988.802454][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  988.809874][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  989.085130][T22262] device syzkaller0 entered promiscuous mode
[  989.299294][T22256] mmap: syz.7.4434 (22256) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  990.738685][T22295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  993.617275][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4448'.
[  993.626872][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4448'.
[  994.478427][T22335] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  994.489063][T22335] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  994.911325][T22347] device syzkaller0 entered promiscuous mode
[  996.796452][T22369] loop7: detected capacity change from 0 to 1024
[  996.923246][T22369] EXT4-fs (loop7): Ignoring removed oldalloc option
[  996.932906][T22369] EXT4-fs (loop7): Ignoring removed bh option
[  996.947532][T22369] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  997.095301][T22369] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  998.960140][T22404] loop8: detected capacity change from 0 to 512
[  999.133735][T22404] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled
[  999.216522][T22404] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (64763!=18645)
[  999.230571][T22404] EXT4-fs (loop8): group descriptors corrupted!
[ 1000.783780][T22432] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1000.967291][ T4446] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[ 1002.538779][ T4446] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1002.547001][T22471] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4473'.
[ 1002.602834][ T4446] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1002.619390][ T4446] usb 9-1: can't read configurations, error -71
[ 1004.177726][T22492] device syzkaller0 entered promiscuous mode
[ 1011.067084][T22574] loop7: detected capacity change from 0 to 32768
[ 1011.093013][T22576] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4500'.
[ 1011.129894][T22576] device bond8 entered promiscuous mode
[ 1011.177419][T22576] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1011.342024][T22576] device erspan1 entered promiscuous mode
[ 1011.359249][T22576] bond8: (slave erspan1): Enslaving as an active interface with an up link
[ 1011.368493][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[ 1011.387939][T22576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4500'.
[ 1011.420480][T22574] XFS (loop7): Mounting V5 Filesystem
[ 1012.342314][T22576] bond8 (unregistering): (slave erspan1): Releasing backup interface
[ 1012.437232][T22576] device erspan1 left promiscuous mode
[ 1012.443366][T22574] XFS (loop7): Ending clean mount
[ 1012.455320][T22574] XFS (loop7): Quotacheck needed: Please wait.
[ 1012.496822][T22576] bond8 (unregistering): Released all slaves
[ 1012.659364][T22574] XFS (loop7): Quotacheck: Done.
[ 1013.405118][T17708] XFS (loop7): Unmounting Filesystem
[ 1015.166769][T22620] fuse: Bad value for 'fd'
[ 1020.642157][T22661] netlink: 'syz.0.4516': attribute type 14 has an invalid length.
[ 1020.669554][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'.
[ 1022.993616][T22684] netlink: 399 bytes leftover after parsing attributes in process `syz.9.4522'.
[ 1031.016181][T22747] netlink: 'syz.9.4537': attribute type 1 has an invalid length.
[ 1031.111313][T22747] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1032.155899][T22749] bond8: (slave geneve3): making interface the new active one
[ 1032.190708][T22749] bond8: (slave geneve3): Enslaving as an active interface with an up link
[ 1032.228270][T21805] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[ 1034.801323][T22836] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4553'.
[ 1037.198328][T22860] loop7: detected capacity change from 0 to 2048
[ 1038.547985][T22860] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1038.566644][T22860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1042.882118][T22901] loop7: detected capacity change from 0 to 512
[ 1043.005230][T22901] EXT4-fs (loop7): Ignoring removed nobh option
[ 1043.129322][T22901] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[ 1043.940873][T22901] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1045.224363][T22929] device syzkaller0 entered promiscuous mode
[ 1045.247502][T22929] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[ 1045.299078][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'.
[ 1047.289145][   T26] audit: type=1326 audit(3924044300.013:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22963 comm="syz.8.4581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x0
[ 1048.887304][T22994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4585'.
[ 1050.820314][T22999] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1055.516357][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.522928][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1063.078912][T23139] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[ 1074.439267][T23269] device wlan1 left promiscuous mode
[ 1074.760783][T23278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4654'.
[ 1074.832060][T23275] netlink: 'syz.7.4654': attribute type 10 has an invalid length.
[ 1074.909981][T23275] device wlan1 entered promiscuous mode
[ 1074.976953][T23275] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1076.537191][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4662'.
[ 1078.005600][T23323] netlink: 'syz.3.4668': attribute type 1 has an invalid length.
[ 1078.579816][T23323] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1078.629061][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4667'.
[ 1079.703718][T23349] netlink: 'syz.8.4682': attribute type 1 has an invalid length.
[ 1080.873242][T23349] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1087.224641][T23389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4678'.
[ 1092.591272][ T4448] Bluetooth: hci2: command 0x0409 tx timeout
[ 1093.062467][T23474] overlayfs: failed to clone lowerpath
[ 1094.569583][T23437] chnl_net:caif_netlink_parms(): no params data found
[ 1094.841913][T23501] bridge0: port 3(syz_tun) entered blocking state
[ 1094.848853][T23501] bridge0: port 3(syz_tun) entered disabled state
[ 1094.867548][T23501] device syz_tun entered promiscuous mode
[ 1094.879075][T23501] bridge0: port 3(syz_tun) entered blocking state
[ 1094.885653][T23501] bridge0: port 3(syz_tun) entered forwarding state
[ 1095.012651][ T4230] Bluetooth: hci2: command 0x041b tx timeout
[ 1095.714629][T23437] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1095.722328][T23437] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1095.730777][T23437] device bridge_slave_0 entered promiscuous mode
[ 1095.739726][T23437] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1095.747007][T23437] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1095.755939][T23437] device bridge_slave_1 entered promiscuous mode
[ 1095.838946][T23437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1095.891383][T23437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1095.927425][T23437] team0: Port device team_slave_0 added
[ 1095.956246][T23437] team0: Port device team_slave_1 added
[ 1096.419138][T23523] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 1097.326533][ T4448] Bluetooth: hci2: command 0x040f tx timeout
[ 1097.478263][T23437] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1097.762295][T23437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1098.990661][T23437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1099.213167][T23437] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1099.225863][T23437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1099.287747][T23437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1099.496623][   T26] audit: type=1326 audit(3924044349.561:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.248104][   T26] audit: type=1326 audit(3924044349.561:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.283181][   T26] audit: type=1326 audit(3924044349.561:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.438175][T23437] device hsr_slave_0 entered promiscuous mode
[ 1100.451958][   T26] audit: type=1326 audit(3924044349.561:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.475990][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1100.523897][T23437] device hsr_slave_1 entered promiscuous mode
[ 1100.557022][T23437] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1100.579326][ T4448] Bluetooth: hci2: command 0x0419 tx timeout
[ 1100.586570][   T26] audit: type=1326 audit(3924044349.561:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.592514][T23437] Cannot create hsr debugfs directory
[ 1100.620512][T23570] overlayfs: failed to clone upperpath
[ 1100.627272][   T26] audit: type=1326 audit(3924044349.561:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.686744][   T26] audit: type=1326 audit(3924044349.570:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.689189][T23565] ==================================================================
[ 1100.718943][T23565] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520
[ 1100.726907][T23565] Write of size 4 at addr ffff888024842db8 by task syz.7.4713/23565
[ 1100.734991][T23565] 
[ 1100.737353][T23565] CPU: 0 PID: 23565 Comm: syz.7.4713 Not tainted syzkaller #0
[ 1100.745109][T23565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1100.750337][   T26] audit: type=1326 audit(3924044349.570:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.755522][T23565] Call Trace:
[ 1100.755536][T23565]  <TASK>
[ 1100.755546][T23565]  dump_stack_lvl+0x188/0x250
[ 1100.755578][T23565]  ? show_regs_print_info+0x20/0x20
[ 1100.755601][T23565]  ? _printk+0xda/0x130
[ 1100.755618][T23565]  ? ax25_dev_device_down+0x35e/0x520
[ 1100.755648][T23565]  ? load_image+0x400/0x400
[ 1100.755665][T23565]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1100.755688][T23565]  ? lockdep_hardirqs_on+0x94/0x140
[ 1100.755714][T23565]  print_address_description+0x60/0x2d0
[ 1100.755737][T23565]  ? ax25_dev_device_down+0x35e/0x520
[ 1100.755767][T23565]  kasan_report+0xdf/0x130
[ 1100.755793][T23565]  ? ax25_dev_device_down+0x35e/0x520
[ 1100.755821][T23565]  kasan_check_range+0x235/0x290
[ 1100.755846][T23565]  ax25_dev_device_down+0x35e/0x520
[ 1100.755875][T23565]  ax25_device_event+0x4b4/0x4f0
[ 1100.755904][T23565]  raw_notifier_call_chain+0xcb/0x160
[ 1100.755935][T23565]  __dev_notify_flags+0x158/0x300
[ 1100.755961][T23565]  ? __dev_change_flags+0x6a0/0x6a0
[ 1100.755982][T23565]  ? __dev_change_flags+0x4d0/0x6a0
[ 1100.756009][T23565]  ? dev_get_flags+0x1c0/0x1c0
[ 1100.756036][T23565]  ? __mutex_lock_common+0x155c/0x2400
[ 1100.756064][T23565]  dev_change_flags+0xe3/0x1a0
[ 1100.756092][T23565]  dev_ifsioc+0x130/0xd50
[ 1100.813789][   T26] audit: type=1326 audit(3924044349.570:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.814803][T23565]  ? dev_ioctl+0xe30/0xe30
[ 1100.835661][   T26] audit: type=1326 audit(3924044349.570:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.8.4710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f764571b819 code=0x7ffc0000
[ 1100.835791][T23565]  ? apparmor_capable+0x12c/0x190
[ 1100.954225][T23565]  ? full_name_hash+0x8e/0xe0
[ 1100.959233][T23565]  dev_ioctl+0x545/0xe30
[ 1100.963527][T23565]  ? _copy_from_user+0x111/0x170
[ 1100.968614][T23565]  sock_do_ioctl+0x245/0x320
[ 1100.973348][T23565]  ? sock_show_fdinfo+0xb0/0xb0
[ 1100.978270][T23565]  sock_ioctl+0x4d2/0x710
[ 1100.982692][T23565]  ? sock_poll+0x410/0x410
[ 1100.987243][T23565]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1100.992670][T23565]  ? security_file_ioctl+0x7c/0xa0
[ 1100.997930][T23565]  ? sock_poll+0x410/0x410
[ 1101.002476][T23565]  __se_sys_ioctl+0xfa/0x170
[ 1101.007270][T23565]  do_syscall_64+0x4c/0xa0
[ 1101.012347][T23565]  ? clear_bhb_loop+0x30/0x80
[ 1101.017161][T23565]  ? clear_bhb_loop+0x30/0x80
[ 1101.022136][T23565]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1101.028176][T23565] RIP: 0033:0x7f6aacc50819
[ 1101.032627][T23565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1101.052726][T23565] RSP: 002b:00007f6aaae89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1101.061186][T23565] RAX: ffffffffffffffda RBX: 00007f6aaceca090 RCX: 00007f6aacc50819
[ 1101.069474][T23565] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009
[ 1101.077486][T23565] RBP: 00007f6aacce6c91 R08: 0000000000000000 R09: 0000000000000000
[ 1101.085590][T23565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1101.093696][T23565] R13: 00007f6aaceca128 R14: 00007f6aaceca090 R15: 00007ffc159061c8
[ 1101.101829][T23565]  </TASK>
[ 1101.105042][T23565] 
[ 1101.107393][T23565] Allocated by task 4515:
[ 1101.111860][T23565]  __kasan_kmalloc+0xb5/0xf0
[ 1101.116495][T23565]  ax25_dev_device_up+0x50/0x580
[ 1101.121478][T23565]  ax25_device_event+0x483/0x4f0
[ 1101.126568][T23565]  raw_notifier_call_chain+0xcb/0x160
[ 1101.132063][T23565]  __dev_notify_flags+0x194/0x300
[ 1101.137131][T23565]  dev_change_flags+0xe3/0x1a0
[ 1101.141936][T23565]  dev_ifsioc+0x130/0xd50
[ 1101.146335][T23565]  dev_ioctl+0x545/0xe30
[ 1101.150883][T23565]  sock_do_ioctl+0x245/0x320
[ 1101.155702][T23565]  sock_ioctl+0x4d2/0x710
[ 1101.160231][T23565]  __se_sys_ioctl+0xfa/0x170
[ 1101.164971][T23565]  do_syscall_64+0x4c/0xa0
[ 1101.169770][T23565]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1101.176047][T23565] 
[ 1101.178399][T23565] Freed by task 23565:
[ 1101.182494][T23565]  kasan_set_track+0x4b/0x70
[ 1101.187115][T23565]  kasan_set_free_info+0x1f/0x40
[ 1101.192180][T23565]  ____kasan_slab_free+0xd5/0x110
[ 1101.197413][T23565]  slab_free_freelist_hook+0xea/0x170
[ 1101.202811][T23565]  kfree+0xef/0x2a0
[ 1101.206659][T23565]  ax25_dev_device_down+0x1c0/0x520
[ 1101.212065][T23565]  ax25_device_event+0x4b4/0x4f0
[ 1101.217308][T23565]  raw_notifier_call_chain+0xcb/0x160
[ 1101.222740][T23565]  __dev_notify_flags+0x158/0x300
[ 1101.228036][T23565]  dev_change_flags+0xe3/0x1a0
[ 1101.233125][T23565]  dev_ifsioc+0x130/0xd50
[ 1101.237690][T23565]  dev_ioctl+0x545/0xe30
[ 1101.241994][T23565]  sock_do_ioctl+0x245/0x320
[ 1101.246791][T23565]  sock_ioctl+0x4d2/0x710
[ 1101.251466][T23565]  __se_sys_ioctl+0xfa/0x170
[ 1101.256361][T23565]  do_syscall_64+0x4c/0xa0
[ 1101.260907][T23565]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1101.267252][T23565] 
[ 1101.269781][T23565] Last potentially related work creation:
[ 1101.275865][T23565]  kasan_save_stack+0x35/0x60
[ 1101.280679][T23565]  kasan_record_aux_stack+0xb8/0x100
[ 1101.286277][T23565]  insert_work+0x54/0x3d0
[ 1101.290758][T23565]  __queue_work+0x9c5/0xd50
[ 1101.295606][T23565]  queue_work_on+0x124/0x1f0
[ 1101.300309][T23565]  netdevice_event+0x803/0x900
[ 1101.305211][T23565]  raw_notifier_call_chain+0xcb/0x160
[ 1101.310888][T23565]  register_netdevice+0x12a6/0x1710
[ 1101.316203][T23565]  veth_newlink+0x6bc/0xe30
[ 1101.320747][T23565]  rtnl_newlink+0x1359/0x1a50
[ 1101.325454][T23565]  rtnetlink_rcv_msg+0x844/0xf30
[ 1101.330825][T23565]  netlink_rcv_skb+0x1f5/0x440
[ 1101.335856][T23565]  netlink_unicast+0x774/0x920
[ 1101.340834][T23565]  netlink_sendmsg+0x8ba/0xbe0
[ 1101.345620][T23565]  __sys_sendto+0x46d/0x620
[ 1101.350157][T23565]  __x64_sys_sendto+0xda/0xf0
[ 1101.354874][T23565]  do_syscall_64+0x4c/0xa0
[ 1101.359757][T23565]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1101.365850][T23565] 
[ 1101.368212][T23565] Second to last potentially related work creation:
[ 1101.375076][T23565]  kasan_save_stack+0x35/0x60
[ 1101.379958][T23565]  kasan_record_aux_stack+0xb8/0x100
[ 1101.385442][T23565]  insert_work+0x54/0x3d0
[ 1101.389800][T23565]  __queue_work+0x9c5/0xd50
[ 1101.394619][T23565]  queue_work_on+0x124/0x1f0
[ 1101.399328][T23565]  call_usermodehelper_exec+0x2e3/0x520
[ 1101.405000][T23565]  kobject_uevent_env+0x681/0x890
[ 1101.410177][T23565]  device_add+0x91c/0xfb0
[ 1101.414621][T23565]  usb_set_configuration+0x1991/0x1fd0
[ 1101.420113][T23565]  usb_generic_driver_probe+0x89/0x150
[ 1101.426057][T23565]  usb_probe_device+0x139/0x270
[ 1101.430936][T23565]  really_probe+0x284/0xc80
[ 1101.435463][T23565]  __driver_probe_device+0x18c/0x330
[ 1101.440777][T23565]  driver_probe_device+0x4f/0x420
[ 1101.445924][T23565]  __device_attach_driver+0x2b0/0x500
[ 1101.451323][T23565]  bus_for_each_drv+0x184/0x210
[ 1101.456417][T23565]  __device_attach+0x2a8/0x480
[ 1101.461485][T23565]  bus_probe_device+0xbc/0x1e0
[ 1101.466976][T23565]  device_add+0xa00/0xfb0
[ 1101.471519][T23565]  usb_new_device+0xd65/0x1660
[ 1101.476947][T23565]  register_root_hub+0x278/0x580
[ 1101.482084][T23565]  usb_add_hcd+0xa88/0xef0
[ 1101.486636][T23565]  dummy_hcd_probe+0x130/0x260
[ 1101.491780][T23565]  platform_probe+0x137/0x1c0
[ 1101.496666][T23565]  really_probe+0x284/0xc80
[ 1101.501197][T23565]  __driver_probe_device+0x18c/0x330
[ 1101.506513][T23565]  driver_probe_device+0x4f/0x420
[ 1101.511828][T23565]  __device_attach_driver+0x2b0/0x500
[ 1101.517227][T23565]  bus_for_each_drv+0x184/0x210
[ 1101.522298][T23565]  __device_attach+0x2a8/0x480
[ 1101.527374][T23565]  bus_probe_device+0xbc/0x1e0
[ 1101.532267][T23565]  device_add+0xa00/0xfb0
[ 1101.536727][T23565]  platform_device_add+0x4b9/0x820
[ 1101.541961][T23565]  init+0x2cb/0x10d0
[ 1101.545986][T23565]  do_one_initcall+0x272/0x730
[ 1101.550779][T23565]  do_initcall_level+0x137/0x1f0
[ 1101.556111][T23565]  do_initcalls+0x4b/0x90
[ 1101.560821][T23565]  kernel_init_freeable+0x3e9/0x570
[ 1101.566326][T23565]  kernel_init+0x19/0x1b0
[ 1101.570737][T23565]  ret_from_fork+0x1f/0x30
[ 1101.575364][T23565] 
[ 1101.577709][T23565] The buggy address belongs to the object at ffff888024842d00
[ 1101.577709][T23565]  which belongs to the cache kmalloc-192 of size 192
[ 1101.592197][T23565] The buggy address is located 184 bytes inside of
[ 1101.592197][T23565]  192-byte region [ffff888024842d00, ffff888024842dc0)
[ 1101.605777][T23565] The buggy address belongs to the page:
[ 1101.611575][T23565] page:ffffea0000921080 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024842900 pfn:0x24842
[ 1101.623291][T23565] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1101.631247][T23565] raw: 00fff00000000200 ffffea00008cfe08 ffffea00008343c8 ffff888016c41a00
[ 1101.640330][T23565] raw: ffff888024842900 000000000010000c 00000001ffffffff 0000000000000000
[ 1101.649263][T23565] page dumped because: kasan: bad access detected
[ 1101.656100][T23565] page_owner tracks the page as allocated
[ 1101.662021][T23565] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 11864943446, free_ts 0
[ 1101.677346][T23565]  get_page_from_freelist+0x1bbd/0x1ca0
[ 1101.682943][T23565]  __alloc_pages+0x1ee/0x480
[ 1101.687666][T23565]  alloc_page_interleave+0x24/0x1e0
[ 1101.693005][T23565]  new_slab+0xc0/0x4b0
[ 1101.697205][T23565]  ___slab_alloc+0x80a/0xdd0
[ 1101.701929][T23565]  kmem_cache_alloc_trace+0x1a5/0x2a0
[ 1101.707432][T23565]  __usb_create_hcd+0x5de/0x840
[ 1101.712331][T23565]  dummy_hcd_probe+0xf2/0x260
[ 1101.717050][T23565]  platform_probe+0x137/0x1c0
[ 1101.721766][T23565]  really_probe+0x284/0xc80
[ 1101.726486][T23565]  __driver_probe_device+0x18c/0x330
[ 1101.731984][T23565]  driver_probe_device+0x4f/0x420
[ 1101.737040][T23565]  __device_attach_driver+0x2b0/0x500
[ 1101.742527][T23565]  bus_for_each_drv+0x184/0x210
[ 1101.747513][T23565]  __device_attach+0x2a8/0x480
[ 1101.752398][T23565]  bus_probe_device+0xbc/0x1e0
[ 1101.757222][T23565] page_owner free stack trace missing
[ 1101.763079][T23565] 
[ 1101.766236][T23565] Memory state around the buggy address:
[ 1101.772238][T23565]  ffff888024842c80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 1101.780415][T23565]  ffff888024842d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1101.788597][T23565] >ffff888024842d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1101.797322][T23565]                                         ^
[ 1101.803682][T23565]  ffff888024842e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1101.811983][T23565]  ffff888024842e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1101.820350][T23565] ==================================================================
[ 1101.829151][T23565] Disabling lock debugging due to kernel taint
[ 1101.835503][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1101.862943][T23565] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1101.870222][T23565] CPU: 1 PID: 23565 Comm: syz.7.4713 Tainted: G    B             syzkaller #0
[ 1101.879751][T23565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1101.890268][T23565] Call Trace:
[ 1101.893763][T23565]  <TASK>
[ 1101.896898][T23565]  dump_stack_lvl+0x188/0x250
[ 1101.901990][T23565]  ? show_regs_print_info+0x20/0x20
[ 1101.907238][T23565]  ? load_image+0x400/0x400
[ 1101.911979][T23565]  panic+0x2e5/0x810
[ 1101.916026][T23565]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1101.922224][T23565]  ? bpf_jit_dump+0xd0/0xd0
[ 1101.926757][T23565]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1101.932840][T23565]  ? _raw_spin_unlock+0x40/0x40
[ 1101.938028][T23565]  ? ax25_dev_device_down+0x35e/0x520
[ 1101.943443][T23565]  check_panic_on_warn+0x80/0xa0
[ 1101.948513][T23565]  ? ax25_dev_device_down+0x35e/0x520
[ 1101.953977][T23565]  end_report+0x6d/0xf0
[ 1101.958138][T23565]  kasan_report+0x102/0x130
[ 1101.962644][T23565]  ? ax25_dev_device_down+0x35e/0x520
[ 1101.968039][T23565]  kasan_check_range+0x235/0x290
[ 1101.973089][T23565]  ax25_dev_device_down+0x35e/0x520
[ 1101.978809][T23565]  ax25_device_event+0x4b4/0x4f0
[ 1101.983748][T23565]  raw_notifier_call_chain+0xcb/0x160
[ 1101.989773][T23565]  __dev_notify_flags+0x158/0x300
[ 1101.994935][T23565]  ? __dev_change_flags+0x6a0/0x6a0
[ 1102.000339][T23565]  ? __dev_change_flags+0x4d0/0x6a0
[ 1102.005658][T23565]  ? dev_get_flags+0x1c0/0x1c0
[ 1102.010432][T23565]  ? __mutex_lock_common+0x155c/0x2400
[ 1102.015925][T23565]  dev_change_flags+0xe3/0x1a0
[ 1102.020710][T23565]  dev_ifsioc+0x130/0xd50
[ 1102.025046][T23565]  ? dev_ioctl+0xe30/0xe30
[ 1102.029547][T23565]  ? apparmor_capable+0x12c/0x190
[ 1102.034831][T23565]  ? full_name_hash+0x8e/0xe0
[ 1102.039686][T23565]  dev_ioctl+0x545/0xe30
[ 1102.044025][T23565]  ? _copy_from_user+0x111/0x170
[ 1102.049109][T23565]  sock_do_ioctl+0x245/0x320
[ 1102.053889][T23565]  ? sock_show_fdinfo+0xb0/0xb0
[ 1102.058849][T23565]  sock_ioctl+0x4d2/0x710
[ 1102.063204][T23565]  ? sock_poll+0x410/0x410
[ 1102.067642][T23565]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1102.072591][T23565]  ? security_file_ioctl+0x7c/0xa0
[ 1102.077970][T23565]  ? sock_poll+0x410/0x410
[ 1102.082403][T23565]  __se_sys_ioctl+0xfa/0x170
[ 1102.087011][T23565]  do_syscall_64+0x4c/0xa0
[ 1102.091529][T23565]  ? clear_bhb_loop+0x30/0x80
[ 1102.096199][T23565]  ? clear_bhb_loop+0x30/0x80
[ 1102.100984][T23565]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1102.106899][T23565] RIP: 0033:0x7f6aacc50819
[ 1102.111319][T23565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1102.133291][T23565] RSP: 002b:00007f6aaae89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1102.141860][T23565] RAX: ffffffffffffffda RBX: 00007f6aaceca090 RCX: 00007f6aacc50819
[ 1102.149840][T23565] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009
[ 1102.157846][T23565] RBP: 00007f6aacce6c91 R08: 0000000000000000 R09: 0000000000000000
[ 1102.165959][T23565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1102.174272][T23565] R13: 00007f6aaceca128 R14: 00007f6aaceca090 R15: 00007ffc159061c8
[ 1102.182544][T23565]  </TASK>
[ 1102.186036][T23565] Kernel Offset: disabled
[ 1102.190366][T23565] Rebooting in 86400 seconds..