last executing test programs:

10m17.530439922s ago: executing program 0 (id=449):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="150004000400000003030000918a76e1efa19e910500"], 0x44}}, 0x0)

10m9.409683852s ago: executing program 0 (id=458):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10, 0x1}, {0x7, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x5}}]}}, &(0x7f0000000280)=""/235, 0x4e, 0xeb, 0x1}, 0x28)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)

10m7.641211679s ago: executing program 0 (id=459):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

10m1.529211425s ago: executing program 0 (id=464):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540), 0x0, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

9m55.618436655s ago: executing program 0 (id=472):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10, 0x1}, {0x7, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x5}}]}}, &(0x7f0000000280)=""/235, 0x4e, 0xeb, 0x1}, 0x28)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10)

9m52.549358733s ago: executing program 0 (id=473):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9m37.246970234s ago: executing program 32 (id=473):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9m28.501474635s ago: executing program 1 (id=494):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

9m23.446239948s ago: executing program 1 (id=498):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)

9m17.284686175s ago: executing program 1 (id=503):
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x9})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00')
pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)

9m10.123620745s ago: executing program 1 (id=509):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_MCE_KILL(0x21, 0x1, 0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
iopl(0x3)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x41, 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={0x0}, 0x1)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x0)
sendmsg$nl_route(r2, 0x0, 0x20000080)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4cc", 0x75, 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc))
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})

9m9.111881588s ago: executing program 1 (id=510):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)

9m7.321404555s ago: executing program 1 (id=511):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2804c1a, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRES8=0x0], 0x2, 0xa13, &(0x7f0000000300)="$eJzs3U1sXOdaB/D/8UfiulWStqGUqG0mKUnd1ji2QxOiLiCxJ4mLP5DtSI1YNIU4KIqh0IKUVkikEmJFBRKIBewqVqwqdUM3qDvYwYoF6Kqru7xSdVe5K1+dM+NkbM94bNex0+T3s2bmfDznfZ8z5+PVjM+cN/y4rBxeM7ayUj12OH7t3/YgYx5jlya/+/KrL8rH5/dyIL15p/j3ZCBJLelL8nLSPzE5PzfTpaA7yY0k3yZFkoNpvG7JjRR/l+cejn+b4l/Kejs6sNWS6WaFp9p+738AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA4KiYmR0fHigOZmr32fq0hqW0wMTk/V2RlZeOc1WUavql6/S6+6VpvUpSPDAysdvX98tGHs19KUjuZVxpjr1Qdkmcgnz370pF3X+zrWV2+UzY/yMGtF/vJp5/d+XB5eenjR5LI4+9KfXZqYW5q5uKVem1qYa524dy50TNXLy/ULk9N1xeuLyzWZ2oT8/WLi3PztaGJN2tjFy6crdVHrs9dm70yOTJdX514/jfGR0fP1d4b+b36xfmFudkz740sTFydmp6emr1SxZSzy5jz5Y74u1OLtcX6xZla7dbt5aWz63Lqzbr9twwa23Q1+htB491Wd3x0fHxsbHx87PNm79kPJpx758I750dH+0bXyYaI5k57sLmj7+Rd5/H3TOctu7sncPgBehrtfzKdqczmWt5Pre3fRCYzn7nMdJjftNr+nzpTb63m3HPr6m1t/5utfF/L7GPl08m81hwd6ND+d8hl7/4+yaf57PCdfJjlLGcpH+97Rnv7dyX1zGYqC5nLVGZysZpSa06p5ULO5VxG80Gu5ngWUsvlTGU69SzkehaymHq1R01kPvVczGLmMp9ahjKRN1PLWC7kQs6mlnpGcj1zuZbZXMlkLlal3Mrt6n0/u0mOD4LGthI0vknQhsZ82+1/XZP/1HtEZ3LYvpVm+3+ge+jQxF4kBAAAAOy6X/uvHDr6wn/+JCnyavW9/OWp6fro6uyf/mx/0wMAAAB2QXW53ivlS3859GqKNZ//AQAAgCdAUf3GrkgymOONodVfQvkSAAAAAJ4Q1f//X0tx/OEEn/8BAADgCdP9HvtdI4rh1dv/1m42Xm82IxpjxeDlqen6yMTc9LtjOV3dZaD6pcGG0nqTor/6+cFbOdGIOjHYeB18WGJZ50AZNTby7ljeysnmigy9Xr68PtQmcrwR+UYj8o3WyN6siTxbRgLAk+7kJu3xVtv/tzLciBg+VjX5fcfatMGjWlYAeFw86GPnF80uzdq0/82I1zq1/7+5yef/MuKF3DreuKRgJDmSLOdmhtO84uB4u1JXeyNoXIYw3OXbgMHmJQv/c74nwxu+Dxh4sK6tsUsZz3DbbwRayi1WczjbiOt9NNsAAPbayU3b4a21/8NdPv8PuqQQAB4rD3qw7z5wdwsxbQf2ex0BgLW00gAAAAAAAAAAAAAAAAAAAAAAAAAAALD7tnQD//8+nSwvLyU7u///zgYGtpPh5gM92aOc932gN8l+1f7b2fZS5TbuHPP/zT1g39/Vp3JgH09KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Jki6W03vSc5mGQ0yZm9z+rRubffCeyW2s4WK+73lS+HdjkbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnXvP+/z1pvD7bmJS+nuRUkhtJfn+/c9xN9/c7gX3zx9VzcT/3c7e6/39P0p+VIn2NzZ6if2Jyfm6m3PzFwXL+d19+9UX56F72xl4VygLKGtZ0LtGsoWVK/9qlnq+WGpxc+uTOn3/0p7XJS9WOeWnx8vTkzJX533kY+FLxdaMLhNZuEFbz/ctT//H3LZMPNCv/On2d8l9f7+Wq3smN9f5qu6U71LsFt5eXxsuaFuvvL/7Fn9y+2zLrhZxIXh9KhtbW9Eflo0NNJ9a/n2sV3xd/UxzKP+VGtf3Ld6NYKcpNdLha/2du3V5eGvnDj5ZvPsjpr9bkdCTHk9xMBrae0/HqfNJWtdf19Je1jlZB5dPRLuVtqqXEsQ7v6/PVLjO4rXWodV6HSpf3vZnR2bYZ/cOfvZjT297Sp7vU2FbxffF/xdX8b/66pf+PnnL7n0rbo7NNEVVky57SOm/N4dXTiKzWfLx1xgfry+x4VPII/G3+IL/1YPv3tJz/m9vqB56PWo+UTY6LlhrbHxfJ9o+Lfz28oUV5qGqRjq5rkZpnn07LNPM82ojqkOev5O2k79i2zihvdzmj7Pj436x/o+L74p+Lofw89/T/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPP6KpLfd9J7kVJIjSQ6X47VkZX3MvR3U1zNY7CTNXbOTnH98io4rWtzP/dzNob3OCAAAAAAAAIBH49Lkd19+9UX5qP4f35tfT1YqtaQvyZHiH/snJufnZroU1J/cWP2X/sD2crhRPj33cPzbcuzlLgvt7+UDAPCj9ssAAAD//6hjcbE=")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_MCE_KILL(0x21, 0x1, 0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
iopl(0x3)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x41, 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={0x0}, 0x1)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4088005}, 0x20000080)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, 0x0)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})

8m51.206379992s ago: executing program 33 (id=511):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2804c1a, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRES8=0x0], 0x2, 0xa13, &(0x7f0000000300)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_MCE_KILL(0x21, 0x1, 0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
iopl(0x3)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x41, 0x0)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={0x0}, 0x1)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4088005}, 0x20000080)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, 0x0)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})

4m53.51741673s ago: executing program 2 (id=699):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)

4m53.21340039s ago: executing program 2 (id=700):
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_GET_IO_FLUSHER(0x3a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r1, 0x2000)

4m50.766493348s ago: executing program 2 (id=703):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

4m47.273058461s ago: executing program 2 (id=705):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="150004000400000003030000918a76e1efa19e910500"], 0x44}}, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc55e6ba4e", 0x6}], 0x2, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x44, 0x2}]}}}], 0x18}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, 0x0)

4m42.809777644s ago: executing program 2 (id=710):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="c21a038be9adfd4d4cd3cf577c94291ed2f50b41a2b23eda38d27a30ae6f8ee336e9b87e328958a94e4df5a2b1cf40c9deb5629bd01283301da5081397ec5caf86f7a0b01f", 0x45}, {&(0x7f0000000140)="1a87631d5c40a362", 0x8}, {&(0x7f0000001180)}, {&(0x7f0000003900)="29a362fdc40799", 0x7}], 0x4, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@iv={0x18}, @op={0x18}], 0x30, 0x480c4}], 0x2, 0x4040)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000002480)={0x4, 0x9, 0x1})
r4 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000606000/0x1000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f00000039c0)=""/204)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m40.813225278s ago: executing program 2 (id=711):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540), 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = fcntl$dupfd(r5, 0x0, r5)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000007}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b2"], 0xb4}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28)

4m24.925977497s ago: executing program 34 (id=711):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540), 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = fcntl$dupfd(r5, 0x0, r5)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000007}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b2"], 0xb4}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28)

4m8.375811399s ago: executing program 3 (id=735):
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000)
prctl$PR_GET_IO_FLUSHER(0x3a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r1, 0x2000)

4m4.120328965s ago: executing program 3 (id=739):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000340), 0x0, 0x8000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8)
r5 = io_uring_setup(0x7a98, &(0x7f0000000080)={0x0, 0x6d47, 0x0, 0x0, 0x35e})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x11, &(0x7f00000002c0)=[0x2, 0xffff], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0x7, 0x2)

4m2.712443601s ago: executing program 3 (id=740):
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x40f, 0x0)
cachestat(r2, 0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
socket$can_bcm(0x1d, 0x2, 0x2)
prctl$PR_GET_IO_FLUSHER(0x3a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8012, r1, 0x2000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

3m59.577333742s ago: executing program 3 (id=743):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000ac0)=""/102392, 0x18ff8)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

3m56.420235753s ago: executing program 3 (id=745):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="c21a038be9adfd4d4cd3cf577c94291ed2f50b41a2b23eda38d27a30ae6f8ee336e9b87e328958a94e4df5a2b1cf40c9deb5629bd01283301da5081397ec5caf86f7a0b01f", 0x45}, {&(0x7f0000000140)="1a87631d5c40a362", 0x8}, {&(0x7f0000000180)}, {&(0x7f0000001180)}, {&(0x7f0000003900)="29a362fdc40799", 0x7}], 0x5, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[@iv={0x18}, @op={0x18}], 0x30, 0x480c4}], 0x2, 0x4040)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000002480)={0x4, 0x9, 0x1})
r4 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000606000/0x1000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f00000039c0)=""/204)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m54.101332967s ago: executing program 3 (id=746):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8)

3m38.486523728s ago: executing program 35 (id=746):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8)

16.161874961s ago: executing program 4 (id=920):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004000, &(0x7f0000000240)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@user_subvol_rm}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x35, 0x39, 0x32, 0x38, 0x67, 0x2d, 0x2d, 0x37]}}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100), 0x0, 0x0, 0x0)

14.929420011s ago: executing program 7 (id=922):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, 0x0, 0x0, 0x1000000007})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d175", 0x2, 0x4d8000000000})

13.908966553s ago: executing program 7 (id=924):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r4, r4, 0x0, 0xe3aa6ea)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5b080e54332cd26f)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000640)=0x652, 0xfffffeca)
sched_setaffinity(0x0, 0xfffffffffffffe82, &(0x7f0000000280)=0x200006)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
truncate(&(0x7f0000000300)='./file1\x00', 0x591)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

13.676470911s ago: executing program 4 (id=925):
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12.811012329s ago: executing program 6 (id=926):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
unshare(0x26020480)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0x12)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)

11.786645141s ago: executing program 5 (id=927):
syz_open_pts(0xffffffffffffffff, 0x0)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20)

11.287137998s ago: executing program 6 (id=928):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2002b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x802, 0x1})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = io_uring_setup(0x2dfd, 0x0)
r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43ba, 0x80, 0x0, 0x34f})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1)
r4 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056f013d)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0)

9.96249154s ago: executing program 5 (id=929):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9.95998801s ago: executing program 7 (id=930):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{}], 0x1}, 0x0)
r1 = socket$kcm(0x23, 0x5, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
listen(r1, 0x800)
accept(r1, 0x0, &(0x7f00000000c0))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x240040c4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4   \x00'}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)

9.365502179s ago: executing program 4 (id=931):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

9.325997731s ago: executing program 6 (id=932):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r4, r4, 0x0, 0xe3aa6ea)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5b080e54332cd26f)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000640)=0x652, 0xfffffeca)
sched_setaffinity(0x0, 0xfffffffffffffe82, &(0x7f0000000280)=0x200006)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
truncate(&(0x7f0000000300)='./file1\x00', 0x591)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

9.103873858s ago: executing program 4 (id=933):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10, 0x1}, {0x7, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x5}}]}}, &(0x7f0000000280)=""/235, 0x4e, 0xeb, 0x1}, 0x28)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10)

7.717365522s ago: executing program 4 (id=934):
syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(0xffffffffffffffff, 0xa1)
mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
timerfd_create(0x8, 0x800)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r3, 0xffffffffffffffff, 0x0)

7.239427267s ago: executing program 7 (id=935):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', 0x0, 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000480)='\x00', &(0x7f0000000540)="82", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG<v\xb8\x18\x80\xe1Kf\xf8R\xdd\x06\xe8\xfbl\v\xb0\xdd\x05\x05\xd8\xdb\xfd`\xf9\xf8\x915\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\x8f\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80!0\xe8\xc3\xce\xf8\x03\xde\x92s\xf9', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000740)='(\xed\xef(.(MS\xbf\x1bo\n\xbau\xe7\xb2\f^\xe3\xf4\xad<\xc8 7I\xf4K\xf8\x9d\x1f\xbd\xefA\x99`\x8f\xc2\x81g\x15\xc3\x82o\xf8!Tl9\xad\x01\x84P\x9d\"L\xed\x83\xf7\xa6\x14!\xde\xb3\x9e\x1b\xbdW\x18\xf3\x15+\xce\xd4g}~\xbd;\n\xe7>\xbf\x9b;\x8c\x14\n\x15\xa7\xbaH\x97*\x80+\xf3r\x11\xfa\xc1\xf33\xc0o\xe8\x89*\ai+\x84R\xb5\xf2\x1e\xc9L\v\xf8\x04\xa9`-4\x1d\xc2*\xaau\xedG\xca\xff\xc4#\xcfdq{\xac\x89\x96\xed\xf8\x15kDj6\xb3\xe5\xa7\x05X\xc4\bG#!\xdf\x81\"f\x9f\xdc\ni\x97\xaev\x11\xed\xc6\x12>\xd0s\x9d\xc3\x19\xe8', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\x00', &(0x7f0000000440)='!', 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x9, {}, {}, @raw32}], 0x1c)
syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7e747877a041e604000000097533387349422a215b110447ac5010a566c32c07364735ab5b32b06a04ad84e8448000e3a4fcd91716002c4b33048cf87400"/81], 0x1, 0x235, &(0x7f0000000300)="$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")
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000200000006110000000000000620000000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x94)

6.146952683s ago: executing program 7 (id=936):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x38}}], 0x1, 0x40000000)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

5.91533021s ago: executing program 5 (id=937):
syz_open_pts(0xffffffffffffffff, 0x0)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20)

4.077520009s ago: executing program 7 (id=938):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x0, 0x3}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.669789252s ago: executing program 6 (id=939):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.878779558s ago: executing program 5 (id=940):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2002b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x802, 0x1})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = io_uring_setup(0x2dfd, 0x0)
r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43ba, 0x80, 0x0, 0x34f})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1)
r4 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056f013d)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0)

1.362367087s ago: executing program 5 (id=941):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

1.361546267s ago: executing program 6 (id=942):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
unshare(0x26020480)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0x12)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)

207.073233ms ago: executing program 4 (id=943):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{}], 0x1}, 0x0)
r1 = socket$kcm(0x23, 0x5, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
listen(r1, 0x800)
accept(r1, 0x0, &(0x7f00000000c0))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, 0x0, 0x240040c4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4   \x00'}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)

149.450585ms ago: executing program 5 (id=944):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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")
truncate(&(0x7f0000000340)='./file1\x00', 0x75e)
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa)

0s ago: executing program 6 (id=945):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
shutdown(r4, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1a6}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x0]}}, 0x0, 0x5b}, 0x28)

kernel console output (not intermixed with test programs):

fs: unable to parse mount options
[  138.675414][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  139.347194][ T5763] usb 1-1: USB disconnect, device number 2
[  139.545375][ T6115] netlink: 'syz.1.53': attribute type 11 has an invalid length.
[  139.553391][ T6115] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.53'.
[  140.008286][ T6115] iso9660: Corrupted directory entry in block 2 of inode 1920
[  140.137448][ T6120] loop0: detected capacity change from 0 to 1764
[  142.236472][ T6125] netlink: 'syz.0.56': attribute type 11 has an invalid length.
[  142.244472][ T6125] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.56'.
[  142.715181][ T6125] iso9660: Corrupted directory entry in block 2 of inode 1920
[  143.105780][ T6130] netlink: 'syz.1.57': attribute type 11 has an invalid length.
[  143.114100][ T6130] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.57'.
[  148.698457][ T6144] loop3: detected capacity change from 0 to 32768
[  148.925661][ T6144] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.186765][ T6144] XFS (loop3): Ending clean mount
[  150.112055][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[  150.304739][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  156.284755][ T6195] loop1: detected capacity change from 0 to 1764
[  156.605481][ T6196] netlink: 'syz.1.72': attribute type 11 has an invalid length.
[  156.613393][ T6196] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.72'.
[  156.941681][ T6196] iso9660: Corrupted directory entry in block 2 of inode 1920
[  159.605663][ T6205] loop2: detected capacity change from 0 to 16
[  159.613024][ T6205] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  166.274639][ T6239] warning: `syz.2.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  169.469371][ T6253] netlink: 'syz.1.86': attribute type 21 has an invalid length.
[  169.726201][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[  171.674537][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'.
[  171.940895][ T6270] loop2: detected capacity change from 0 to 16
[  171.981213][ T6270] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  175.141225][ T6299] loop3: detected capacity change from 0 to 16
[  175.184753][ T6299] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  175.544020][ T6302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'.
[  177.545545][ T6313] IPVS: length: 24 != 67608
[  177.619046][ T6295] loop0: detected capacity change from 0 to 32768
[  177.763534][ T6295] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  177.980738][ T6295] XFS (loop0): Ending clean mount
[  178.110343][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  178.129656][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[  186.296725][ T6365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.587783][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'.
[  188.722936][ T6392] IPVS: length: 24 != 67608
[  194.695562][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  194.701950][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  195.174281][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'.
[  205.563915][ T6510] IPVS: length: 24 != 67608
[  210.466687][ T6525] loop3: detected capacity change from 0 to 1764
[  210.998566][ T6528] netlink: 'syz.3.137': attribute type 11 has an invalid length.
[  211.007356][ T6528] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.137'.
[  211.231972][ T6528] iso9660: Corrupted directory entry in block 2 of inode 1920
[  213.335026][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  213.335232][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  213.341384][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[  213.353424][ T5084] Bluetooth: hci3: command 0x0406 tx timeout
[  214.007314][ T6537] loop0: detected capacity change from 0 to 1764
[  214.210194][ T5789] Bluetooth: hci0: unexpected event for opcode 0x007f
[  214.984467][ T6537] netlink: 'syz.0.136': attribute type 11 has an invalid length.
[  214.992341][ T6537] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.136'.
[  215.020148][ T6537] iso9660: Corrupted directory entry in block 2 of inode 1920
[  219.211094][ T6601] IPVS: length: 24 != 67608
[  220.653139][ T6613] loop0: detected capacity change from 0 to 1764
[  220.958294][ T6616] netlink: 'syz.0.147': attribute type 11 has an invalid length.
[  220.966381][ T6616] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.147'.
[  221.376500][ T6616] iso9660: Corrupted directory entry in block 2 of inode 1920
[  225.090041][ T6626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'.
[  227.402499][ T6636] loop1: detected capacity change from 0 to 128
[  227.426127][ T6636] =======================================================
[  227.426127][ T6636] WARNING: The mand mount option has been deprecated and
[  227.426127][ T6636]          and is ignored by this kernel. Remove the mand
[  227.426127][ T6636]          option from the mount to silence this warning.
[  227.426127][ T6636] =======================================================
[  227.570849][ T6636] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  227.614534][ T6636] hpfs: filesystem error: improperly stopped
[  227.652580][ T6636] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  229.627390][ T6636] hpfs: You really don't want any checks? You are crazy...
[  229.671785][ T6636] hpfs: hpfs_map_sector(): read error
[  229.701009][ T6636] hpfs: code page support is disabled
[  229.734655][ T6636] hpfs: hpfs_map_4sectors(): unaligned read
[  229.782770][ T6636] hpfs: hpfs_map_4sectors(): unaligned read
[  229.803090][ T6636] hpfs: filesystem error: unable to find root dir
[  234.495471][ T6686] Bluetooth: MGMT ver 1.22
[  234.500495][ T6686] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[  237.217954][ T6701] loop3: detected capacity change from 0 to 64
[  237.276454][ T6701] hfs: unable to parse mount options
[  247.644325][ T6733] loop0: detected capacity change from 0 to 1764
[  247.684766][ T6731] netlink: 'syz.1.171': attribute type 11 has an invalid length.
[  247.715723][ T6731] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.171'.
[  247.910598][ T6737] netlink: 'syz.0.172': attribute type 11 has an invalid length.
[  247.918629][ T6737] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.172'.
[  248.191661][ T6737] iso9660: Corrupted directory entry in block 2 of inode 1920
[  248.532839][ T6741] netlink: 'syz.2.164': attribute type 2 has an invalid length.
[  248.541299][ T6741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.164'.
[  254.521977][ T6767] loop3: detected capacity change from 0 to 16
[  254.566188][ T6767] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  254.669568][ T6769] loop0: detected capacity change from 0 to 1764
[  255.125472][ T6771] iso9660: Corrupted directory entry in block 2 of inode 1920
[  255.880422][ T6776] loop0: detected capacity change from 0 to 1764
[  256.240515][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  256.246929][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  256.346730][ T6777] iso9660: Corrupted directory entry in block 2 of inode 1920
[  257.097080][ T6782] netlink: 'syz.0.182': attribute type 11 has an invalid length.
[  257.105220][ T6782] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.182'.
[  262.311193][ T6798] loop3: detected capacity change from 0 to 1764
[  263.089346][ T6799] iso9660: Corrupted directory entry in block 2 of inode 1920
[  263.597086][ T6808] netlink: 'syz.1.187': attribute type 11 has an invalid length.
[  263.607662][ T6808] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.187'.
[  264.278766][ T6812] netlink: 'syz.0.185': attribute type 11 has an invalid length.
[  264.287293][ T6812] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.185'.
[  264.809191][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'.
[  270.037459][ T6831] loop2: detected capacity change from 0 to 64
[  270.086137][ T6831] hfs: unable to parse mount options
[  270.417330][ T6839] binder: BINDER_SET_CONTEXT_MGR already set
[  270.424134][ T6839] binder: 6838:6839 ioctl 4018620d 200000004a80 returned -16
[  273.778077][ T6857] loop2: detected capacity change from 0 to 1764
[  274.052529][ T6861] netlink: 'syz.1.202': attribute type 11 has an invalid length.
[  274.060926][ T6861] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.202'.
[  274.801000][ T6863] iso9660: Corrupted directory entry in block 2 of inode 1920
[  275.648952][ T6872] loop1: detected capacity change from 0 to 64
[  275.658119][ T6872] hfs: unable to parse mount options
[  277.802148][ T6802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  277.953232][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'.
[  285.713203][ T6914] loop3: detected capacity change from 0 to 64
[  285.739747][ T6914] hfs: unable to parse mount options
[  285.948461][ T6802] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  295.664514][ T6953] loop2: detected capacity change from 0 to 1764
[  296.318445][ T6960] iso9660: Corrupted directory entry in block 2 of inode 1920
[  301.661238][   T27] audit: type=1326 audit(1779674782.420:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.3.232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  301.763514][   T27] audit: type=1326 audit(1779674782.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.3.232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  301.789256][   T27] audit: type=1326 audit(1779674782.420:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.3.232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  301.814314][   T27] audit: type=1326 audit(1779674782.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.3.232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  304.476477][ T6999] loop0: detected capacity change from 0 to 1764
[  306.850851][ T7006] iso9660: Corrupted directory entry in block 2 of inode 1920
[  306.901954][ T7011] netlink: 'syz.2.238': attribute type 11 has an invalid length.
[  306.910000][ T7011] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.238'.
[  307.976161][   T27] audit: type=1326 audit(1779674788.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.1.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4379ce59 code=0x7ffc0000
[  308.032189][   T27] audit: type=1326 audit(1779674788.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.1.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4379ce59 code=0x7ffc0000
[  309.026266][ T5789] Bluetooth: hci0: unexpected event for opcode 0x007f
[  309.458256][ T7020] netlink: 'syz.0.243': attribute type 21 has an invalid length.
[  310.036402][ T7029] netlink: 'syz.0.245': attribute type 11 has an invalid length.
[  310.046899][ T7029] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.245'.
[  314.040220][   T27] audit: type=1326 audit(1779674794.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.1.249" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4379ce59 code=0x7ffc0000
[  314.125003][   T27] audit: type=1326 audit(1779674794.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.1.249" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4379ce59 code=0x7ffc0000
[  314.341208][ T7050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.240'.
[  316.620190][ T7056] loop2: detected capacity change from 0 to 1764
[  317.486558][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  317.493024][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  317.499028][ T7064] iso9660: Corrupted directory entry in block 2 of inode 1920
[  318.011136][ T5789] Bluetooth: hci3: unexpected event for opcode 0x007f
[  326.848277][ T7115] netlink: 'syz.2.267': attribute type 21 has an invalid length.
[  326.861080][ T7119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.259'.
[  327.322258][   T27] audit: type=1326 audit(1779674808.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.3.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  327.396499][   T27] audit: type=1326 audit(1779674808.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.3.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  327.421141][    C1] vkms_vblank_simulate: vblank timer overrun
[  334.534316][ T7154] input: syz0 as /devices/virtual/input/input5
[  334.631238][ T7153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.372393][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.3.280'.
[  340.254958][   T27] audit: type=1326 audit(1779674821.160:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f6d9ce59 code=0x7ffc0000
[  340.322787][   T27] audit: type=1326 audit(1779674821.160:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f6d9ce59 code=0x7ffc0000
[  342.035049][   T27] audit: type=1326 audit(1779674821.200:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f19f6d9ce59 code=0x7ffc0000
[  342.135378][   T27] audit: type=1326 audit(1779674821.200:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f6d9ce59 code=0x7ffc0000
[  342.235240][   T27] audit: type=1326 audit(1779674821.200:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f6d9ce59 code=0x7ffc0000
[  351.417700][ T5789] Bluetooth: hci1: unexpected event for opcode 0x007f
[  356.130593][ T7233] netlink: 'syz.2.296': attribute type 11 has an invalid length.
[  356.138665][ T7233] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.296'.
[  359.220988][ T7246] IPVS: length: 24 != 67608
[  379.553420][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  379.559883][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  384.223492][ T7330] netlink: 'syz.2.314': attribute type 11 has an invalid length.
[  384.234913][ T7330] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.314'.
[  393.585279][ T7361] input: syz0 as /devices/virtual/input/input6
[  395.479357][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.505103][ T5789] Bluetooth: hci1: unexpected event for opcode 0x007f
[  397.845275][ T7379] input: syz0 as /devices/virtual/input/input7
[  397.955694][ T7378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  405.126038][ T7410] netlink: 'syz.3.337': attribute type 11 has an invalid length.
[  405.134032][ T7410] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.337'.
[  409.945561][ T5789] Bluetooth: hci3: unexpected event for opcode 0x007f
[  410.915217][   T27] audit: type=1326 audit(1779674891.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.3.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  411.094996][   T27] audit: type=1326 audit(1779674891.770:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.3.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  419.575162][ T5789] Bluetooth: hci2: unexpected event for opcode 0x007f
[  420.038218][ T7471] loop3: detected capacity change from 0 to 1764
[  420.126303][ T7474] netlink: 'syz.2.349': attribute type 2 has an invalid length.
[  420.134173][ T7474] netlink: 224 bytes leftover after parsing attributes in process `syz.2.349'.
[  421.421892][ T7475] iso9660: Corrupted directory entry in block 2 of inode 1920
[  428.761776][ T7502] input: syz0 as /devices/virtual/input/input8
[  428.844526][ T7501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.881205][ T7321] udevd[7321]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  440.630942][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  440.674851][    C0] sched: RT throttling activated
[  440.687431][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  441.807219][ T7550] IPVS: length: 24 != 67608
[  452.300012][ T7586] loop2: detected capacity change from 0 to 1764
[  453.106220][ T7586] iso9660: Corrupted directory entry in block 2 of inode 1920
[  459.255556][ T7606] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[  459.934542][ T7610] IPVS: length: 24 != 67608
[  467.246894][ T7636] loop2: detected capacity change from 0 to 1764
[  468.012225][ T7636] iso9660: Corrupted directory entry in block 2 of inode 1920
[  472.997017][ T7651] netlink: 44 bytes leftover after parsing attributes in process `syz.3.393'.
[  473.186435][ T7653] Bluetooth: hci0: invalid length 0, exp 2 for type 19
[  478.681803][ T7672] loop1: detected capacity change from 0 to 1764
[  479.404621][ T7672] iso9660: Corrupted directory entry in block 2 of inode 1920
[  479.520358][ T7676] loop3: detected capacity change from 0 to 64
[  479.540942][ T7676] hfs: unable to parse mount options
[  497.328511][   T27] audit: type=1326 audit(1779674978.090:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  497.444965][   T27] audit: type=1326 audit(1779674978.090:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.3.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  497.762040][ T7745] IPVS: length: 24 != 67608
[  501.806171][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  501.818685][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  526.014420][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  526.246860][ T5820] usb 1-1: Using ep0 maxpacket: 16
[  526.322586][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.614943][ T5820] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  526.624085][ T5820] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  526.645274][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.680371][ T5820] usb 1-1: config 0 descriptor??
[  530.465007][  T966] usb 1-1: USB disconnect, device number 3
[  532.358935][ T7856] loop1: detected capacity change from 0 to 1764
[  532.585478][ T7863] netlink: 'syz.1.432': attribute type 11 has an invalid length.
[  532.593447][ T7863] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.432'.
[  533.532768][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[  548.129179][ T7906] loop1: detected capacity change from 0 to 1764
[  548.726786][ T7909] netlink: 'syz.1.450': attribute type 11 has an invalid length.
[  548.735045][ T7909] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.450'.
[  548.847776][ T7908] loop3: detected capacity change from 0 to 1764
[  549.084729][ T7910] netlink: 'syz.3.446': attribute type 11 has an invalid length.
[  549.092983][ T7910] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.446'.
[  549.362917][ T7906] iso9660: Corrupted directory entry in block 2 of inode 1920
[  549.531377][ T7910] iso9660: Corrupted directory entry in block 2 of inode 1920
[  554.236506][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'.
[  558.914924][  T966] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  559.149128][  T966] usb 2-1: Using ep0 maxpacket: 32
[  559.200404][  T966] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  559.242472][  T966] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  559.261869][  T966] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  559.290789][  T966] usb 2-1: Product: syz
[  559.300635][  T966] usb 2-1: Manufacturer: syz
[  560.983537][  T966] hub 2-1:4.0: bad descriptor, ignoring hub
[  560.990934][  T966] hub: probe of 2-1:4.0 failed with error -5
[  561.000471][  T966] usbhid 2-1:4.0: couldn't find an input interrupt endpoint
[  561.137326][ T7960] loop3: detected capacity change from 0 to 1764
[  561.346406][ T7961] netlink: 'syz.3.457': attribute type 11 has an invalid length.
[  561.354415][ T7961] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.457'.
[  563.487316][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  563.493779][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  563.775483][  T966] usb 2-1: USB disconnect, device number 2
[  572.949529][   T27] audit: type=1326 audit(1779675053.860:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.3.467" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  572.973465][    C1] vkms_vblank_simulate: vblank timer overrun
[  573.177798][   T27] audit: type=1326 audit(1779675053.880:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.3.467" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  573.791330][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[  592.961704][ T8089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  593.100775][ T8089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  593.218322][ T8089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  593.230926][ T8089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  593.255296][ T8089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  593.265993][ T8089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  596.535228][ T5789] Bluetooth: hci4: command tx timeout
[  597.262680][ T8085] chnl_net:caif_netlink_parms(): no params data found
[  597.725634][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.784150][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.893057][ T8085] bridge_slave_0: entered allmulticast mode
[  597.929909][ T8085] bridge_slave_0: entered promiscuous mode
[  598.038205][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.088363][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.158977][ T8085] bridge_slave_1: entered allmulticast mode
[  598.220616][ T8085] bridge_slave_1: entered promiscuous mode
[  598.390274][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  598.448654][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.585587][ T5789] Bluetooth: hci4: command tx timeout
[  598.892342][ T8085] team0: Port device team_slave_0 added
[  598.939721][ T8085] team0: Port device team_slave_1 added
[  598.961572][   T27] audit: type=1326 audit(1779675079.870:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.2.496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bffd9ce59 code=0x7ffc0000
[  598.985531][    C1] vkms_vblank_simulate: vblank timer overrun
[  599.305365][   T27] audit: type=1326 audit(1779675079.900:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.2.496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bffd9ce59 code=0x7ffc0000
[  599.671381][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  599.685079][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.521349][ T5789] Bluetooth: hci4: command tx timeout
[  601.665270][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  601.747339][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  601.754408][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.933136][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  602.966927][ T8135] netlink: 'syz.2.499': attribute type 2 has an invalid length.
[  602.974627][ T8135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.499'.
[  603.115435][ T8085] hsr_slave_0: entered promiscuous mode
[  604.875591][ T5789] Bluetooth: hci4: command tx timeout
[  604.935166][ T8085] hsr_slave_1: entered promiscuous mode
[  604.979153][ T8085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  605.050044][ T8085] Cannot create hsr debugfs directory
[  605.172190][ T8143] loop3: detected capacity change from 0 to 1764
[  605.234025][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.997562][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.074467][ T8146] iso9660: Corrupted directory entry in block 2 of inode 1920
[  606.204989][ T8144] netlink: 'syz.3.500': attribute type 11 has an invalid length.
[  606.212814][ T8144] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.500'.
[  607.977310][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.170069][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.645652][ T8085] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  608.688512][ T8085] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  609.039974][ T8085] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  609.360666][ T8085] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  611.410321][ T8168] loop2: detected capacity change from 0 to 764
[  612.612161][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.127613][ T8085] 8021q: adding VLAN 0 to HW filter on device team0
[  615.779544][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.787313][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  615.889354][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.896607][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.674996][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.182848][ T8235] loop1: detected capacity change from 0 to 1764
[  622.640451][ T1146] hsr_slave_0: left promiscuous mode
[  622.665620][ T1146] hsr_slave_1: left promiscuous mode
[  622.901066][ T8238] iso9660: Corrupted directory entry in block 2 of inode 1920
[  622.986199][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  623.005033][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  623.053792][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  623.061686][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  623.144466][ T1146] bridge_slave_1: left allmulticast mode
[  623.164339][ T1146] bridge_slave_1: left promiscuous mode
[  623.171736][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.208239][ T1146] bridge_slave_0: left allmulticast mode
[  623.214080][ T1146] bridge_slave_0: left promiscuous mode
[  623.224451][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.310313][ T1146] veth1_macvtap: left promiscuous mode
[  623.345465][ T1146] veth0_macvtap: left promiscuous mode
[  625.338269][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  625.344811][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  625.491531][ T1146] bond3 (unregistering): Released all slaves
[  625.556951][ T1146] bond2 (unregistering): Released all slaves
[  625.606903][ T1146] bond1 (unregistering): Released all slaves
[  629.509444][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  631.427467][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  631.701762][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  632.111374][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.409134][ T8267] netlink: 'syz.2.517': attribute type 2 has an invalid length.
[  634.417082][ T8267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.517'.
[  636.466415][ T8089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  636.484587][ T8089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  636.505426][ T8089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  636.513700][ T8089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  636.537084][ T8089] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  636.547586][ T8089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  636.758383][ T1146] bond0 (unregistering): Released all slaves
[  636.962882][ T8237] netlink: 'syz.1.511': attribute type 11 has an invalid length.
[  636.974234][ T8237] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.511'.
[  638.672217][ T8089] Bluetooth: hci2: command tx timeout
[  638.900031][ T8085] veth0_vlan: entered promiscuous mode
[  638.957467][ T8085] veth1_vlan: entered promiscuous mode
[  639.245978][ T8085] veth0_macvtap: entered promiscuous mode
[  639.307154][ T8085] veth1_macvtap: entered promiscuous mode
[  639.467590][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  639.532483][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.584817][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  639.627078][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.637467][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  639.653080][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.693227][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.741258][ T8273] chnl_net:caif_netlink_parms(): no params data found
[  639.988261][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.019363][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.144792][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.174803][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.304866][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.315822][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.327823][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.748414][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'.
[  640.757510][ T8089] Bluetooth: hci2: command tx timeout
[  640.851312][ T8085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.899720][ T8085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.914080][ T8085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.928039][ T8085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.656655][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'.
[  643.398912][ T8089] Bluetooth: hci2: command tx timeout
[  643.561665][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.603789][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.635012][ T8273] bridge_slave_0: entered allmulticast mode
[  643.660738][ T8273] bridge_slave_0: entered promiscuous mode
[  643.758168][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.961023][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.139444][ T8273] bridge_slave_1: entered allmulticast mode
[  644.389555][ T8273] bridge_slave_1: entered promiscuous mode
[  644.759226][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.771408][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.924088][ T8325] loop3: detected capacity change from 0 to 1764
[  644.961156][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.119084][ T8327] iso9660: Corrupted directory entry in block 2 of inode 1920
[  645.436076][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  645.475991][ T8089] Bluetooth: hci2: command tx timeout
[  645.602354][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  645.693895][ T8326] netlink: 'syz.3.526': attribute type 11 has an invalid length.
[  645.703012][ T8326] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.526'.
[  645.745286][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.828489][ T8273] team0: Port device team_slave_0 added
[  645.876760][ T8273] team0: Port device team_slave_1 added
[  645.982274][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  645.991792][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  646.019129][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  646.170220][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.262585][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.270792][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.688233][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.757158][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  646.764208][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  648.534867][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  650.539777][ T8273] hsr_slave_0: entered promiscuous mode
[  650.677293][ T8273] hsr_slave_1: entered promiscuous mode
[  650.737078][ T8273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  650.785163][ T8273] Cannot create hsr debugfs directory
[  651.479127][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  651.488698][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  651.497708][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  651.556578][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  651.564516][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  651.574614][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  652.134052][ T8362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  654.054959][ T8089] Bluetooth: hci0: command tx timeout
[  654.191416][ T8273] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  654.249528][ T8273] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  654.286457][ T8273] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  654.376285][ T8273] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  656.220715][ T5789] Bluetooth: hci0: command tx timeout
[  656.494178][ T8356] chnl_net:caif_netlink_parms(): no params data found
[  656.892542][ T1146] hsr_slave_0: left promiscuous mode
[  656.901403][ T1146] hsr_slave_1: left promiscuous mode
[  656.955485][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  656.962993][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  656.995107][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  657.002602][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  657.036253][ T1146] bridge_slave_1: left allmulticast mode
[  657.042019][ T1146] bridge_slave_1: left promiscuous mode
[  657.065581][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.095682][ T1146] bridge_slave_0: left allmulticast mode
[  657.101439][ T1146] bridge_slave_0: left promiscuous mode
[  657.115343][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.192097][ T1146] veth1_macvtap: left promiscuous mode
[  657.197878][ T1146] veth0_macvtap: left promiscuous mode
[  657.991034][ T1146] bond2 (unregistering): Released all slaves
[  658.264957][ T5789] Bluetooth: hci0: command tx timeout
[  658.267718][ T1146] bond1 (unregistering): Released all slaves
[  661.454937][ T5789] Bluetooth: hci0: command tx timeout
[  661.791896][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  661.962030][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  662.112408][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  662.500936][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.158994][ T1146] bond0 (unregistering): Released all slaves
[  665.350726][   T27] audit: type=1326 audit(1779675146.260:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.3.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  665.483498][   T27] audit: type=1326 audit(1779675146.260:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.3.537" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  665.587329][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.605384][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.695224][ T8356] bridge_slave_0: entered allmulticast mode
[  665.704016][ T8356] bridge_slave_0: entered promiscuous mode
[  665.825552][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.847732][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.893054][ T8356] bridge_slave_1: entered allmulticast mode
[  665.924194][ T8356] bridge_slave_1: entered promiscuous mode
[  666.050594][ T8356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.099231][ T8356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.120569][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.978514][ T8356] team0: Port device team_slave_0 added
[  668.038837][ T8356] team0: Port device team_slave_1 added
[  668.095957][ T8273] 8021q: adding VLAN 0 to HW filter on device team0
[  668.212223][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.219457][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.252445][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.259710][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.275787][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.282800][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.326399][ T8356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.343150][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.352852][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.385045][ T8356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.587032][ T8356] hsr_slave_0: entered promiscuous mode
[  668.605883][ T8356] hsr_slave_1: entered promiscuous mode
[  668.631088][ T8356] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  668.639206][ T8356] Cannot create hsr debugfs directory
[  670.696632][ T1146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.888577][ T1146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.108804][ T1146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.065566][ T1146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.103029][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  676.171612][ T8273] veth0_vlan: entered promiscuous mode
[  677.906711][ T8273] veth1_vlan: entered promiscuous mode
[  678.383006][ T8273] veth0_macvtap: entered promiscuous mode
[  678.416831][ T8356] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  678.442266][ T8273] veth1_macvtap: entered promiscuous mode
[  678.576399][ T8356] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  678.615912][ T8356] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  678.678398][ T8356] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  678.769091][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.794883][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.815895][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.845387][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.864816][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.880504][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.897219][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.914953][ T6131] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  679.003563][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.015147][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.025719][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.036708][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.052733][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.069837][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.081584][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  679.096175][ T1146] hsr_slave_0: left promiscuous mode
[  679.102333][ T1146] hsr_slave_1: left promiscuous mode
[  679.108861][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  679.116523][ T6131] usb 3-1: Using ep0 maxpacket: 32
[  679.122455][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  679.134507][ T6131] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.146234][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  679.146275][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  679.163654][ T6131] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.167285][ T1146] bridge_slave_1: left allmulticast mode
[  679.184223][ T1146] bridge_slave_1: left promiscuous mode
[  679.188632][ T6131] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  679.191144][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.214072][ T6131] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  679.231293][ T1146] bridge_slave_0: left allmulticast mode
[  679.235210][ T6131] usb 3-1: Product: syz
[  679.237459][ T1146] bridge_slave_0: left promiscuous mode
[  679.241188][ T6131] usb 3-1: Manufacturer: syz
[  679.258348][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.305289][ T1146] veth1_macvtap: left promiscuous mode
[  679.307757][ T6131] hub 3-1:4.0: USB hub found
[  679.321103][ T1146] veth0_macvtap: left promiscuous mode
[  679.330171][ T1146] veth1_vlan: left promiscuous mode
[  679.341228][ T1146] veth0_vlan: left promiscuous mode
[  681.672155][ T6131] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[  681.745956][ T6131] usb 3-1: USB disconnect, device number 2
[  682.920588][ T8502] Bluetooth: MGMT ver 1.22
[  682.965098][   T27] audit: type=1326 audit(1779675163.840:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.3.547" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  682.991134][   T27] audit: type=1326 audit(1779675163.840:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.3.547" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  683.231654][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  683.336332][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  685.115016][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  685.181573][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  685.649416][ T1146] bond0 (unregistering): Released all slaves
[  685.823835][ T8273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.835285][ T8273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.844054][ T8273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.855594][ T8273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.958116][ T8511] binder_alloc: 8508: binder_alloc_buf, no vma
[  686.081299][ T8513] loop2: detected capacity change from 0 to 1764
[  686.110131][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  686.116771][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  686.227595][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.257689][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.802083][ T8515] netlink: 'syz.2.551': attribute type 11 has an invalid length.
[  686.812390][ T8515] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.551'.
[  686.916161][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.931397][ T8513] iso9660: Corrupted directory entry in block 2 of inode 1920
[  686.970241][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.988805][ T8356] 8021q: adding VLAN 0 to HW filter on device team0
[  687.031192][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.038414][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  687.045782][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.097989][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.105302][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  689.485717][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  689.685040][   T23] usb 3-1: Using ep0 maxpacket: 16
[  689.721801][   T23] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  689.738620][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.781763][   T23] usb 3-1: config 0 descriptor??
[  689.818870][   T23] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  689.850627][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  692.147745][   T23] usb 3-1: Detected FT232A
[  692.175690][   T23] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  692.960446][ T8356] veth0_vlan: entered promiscuous mode
[  692.993311][ T8356] veth1_vlan: entered promiscuous mode
[  694.686499][ T8356] veth0_macvtap: entered promiscuous mode
[  694.792464][ T8356] veth1_macvtap: entered promiscuous mode
[  694.838033][ T5821] usb 3-1: USB disconnect, device number 3
[  694.868521][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  694.899863][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.924885][ T5821] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  694.944119][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  694.965346][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.978266][ T5821] ftdi_sio 3-1:0.0: device disconnected
[  695.009350][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.065228][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.167093][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.545035][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.719987][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.866835][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.984979][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.995150][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.005772][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.017475][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.029504][ T8356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  696.039170][ T8356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  696.048026][ T8356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  696.057030][ T8356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.342348][ T6022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.374009][ T6022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.770516][ T6022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.916883][ T6022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  697.015277][   T27] audit: type=1326 audit(1779675177.920:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.2.559" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bffd9ce59 code=0x7ffc0000
[  697.135368][   T27] audit: type=1326 audit(1779675178.050:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.2.559" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bffd9ce59 code=0x7ffc0000
[  697.875134][ T8588] loop4: detected capacity change from 0 to 1764
[  698.272810][ T8590] netlink: 'syz.4.487': attribute type 11 has an invalid length.
[  698.280916][ T8590] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.487'.
[  698.552706][ T8590] iso9660: Corrupted directory entry in block 2 of inode 1920
[  706.024614][ T8617] netlink: 'syz.4.565': attribute type 11 has an invalid length.
[  706.032672][ T8617] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.565'.
[  706.444526][ T8618] netlink: 'syz.3.557': attribute type 11 has an invalid length.
[  706.454255][ T8618] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.557'.
[  720.317668][   T27] audit: type=1326 audit(1779675201.090:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[  720.423582][   T27] audit: type=1326 audit(1779675201.090:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[  730.254810][   T27] audit: type=1326 audit(1779675211.020:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[  730.364982][   T27] audit: type=1326 audit(1779675211.020:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.5.577" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[  731.602391][ T8749] netlink: 'syz.4.580': attribute type 11 has an invalid length.
[  731.610633][ T8749] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.580'.
[  736.291991][ T8768] netlink: 'syz.4.585': attribute type 11 has an invalid length.
[  736.305052][ T8768] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.585'.
[  743.594926][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  743.794953][ T5821] usb 4-1: Using ep0 maxpacket: 32
[  743.813576][ T5821] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.845024][ T5821] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  745.641413][ T5821] usb 4-1: string descriptor 0 read error: -71
[  745.647778][ T5821] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  745.669847][ T5821] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  745.736372][ T5821] usb 4-1: can't set config #4, error -71
[  745.783434][ T5821] usb 4-1: USB disconnect, device number 2
[  748.743820][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  748.750280][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  749.818393][ T8841] netlink: 'syz.3.597': attribute type 11 has an invalid length.
[  749.826542][ T8841] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.597'.
[  753.005325][ T8858] netlink: 'syz.3.600': attribute type 11 has an invalid length.
[  753.013364][ T8858] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.600'.
[  758.126830][ T8869] loop3: detected capacity change from 0 to 32768
[  758.224182][ T8869] (syz.3.602,8869,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  758.271305][ T8869] (syz.3.602,8869,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  759.947921][ T8089] Bluetooth: hci2: command 0x0406 tx timeout
[  760.142126][ T8869] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  760.143247][ T8869] (syz.3.602,8869,0):ocfs2_initialize_super:2285 ERROR: status = -12
[  760.206560][ T8869] (syz.3.602,8869,0):ocfs2_fill_super:1178 ERROR: status = -12
[  767.856917][ T8930] loop2: detected capacity change from 0 to 764
[  775.225773][ T8089] Bluetooth: hci0: command 0x0406 tx timeout
[  775.286213][ T8971] netlink: 'syz.5.615': attribute type 11 has an invalid length.
[  775.306508][ T8971] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.615'.
[  777.374447][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'.
[  780.849945][ T8999] loop4: detected capacity change from 0 to 32768
[  780.929724][ T8999] (syz.4.621,8999,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  780.999604][ T8999] (syz.4.621,8999,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  781.167583][ T9016] IPVS: length: 24 != 67608
[  782.038327][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'.
[  782.056283][ T8999] JBD2: Ignoring recovery information on journal
[  782.510101][ T8999] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  782.707612][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'.
[  782.791188][ T5820] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  783.215152][ T5820] usb 4-1: Using ep0 maxpacket: 16
[  783.262517][ T8356] ocfs2: Unmounting device (7,4) on (node local)
[  783.322544][ T5820] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  783.354522][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.388340][ T5820] usb 4-1: config 0 descriptor??
[  783.426716][ T5820] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  783.646617][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'.
[  784.216671][ T5820] usb 4-1: Detected FT232A
[  784.255910][ T5820] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  785.639973][ T6131] usb 4-1: USB disconnect, device number 3
[  786.032082][ T6131] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  786.085423][ T6131] ftdi_sio 4-1:0.0: device disconnected
[  786.573411][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'.
[  788.676625][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.631'.
[  800.179790][ T6131] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  800.425551][ T6131] usb 6-1: Using ep0 maxpacket: 32
[  800.455387][ T6131] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  800.484872][ T6131] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  800.577152][ T6131] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  800.604977][ T6131] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  800.613364][ T6131] usb 6-1: Product: syz
[  800.664919][ T6131] usb 6-1: Manufacturer: syz
[  800.698409][ T6131] hub 6-1:4.0: USB hub found
[  800.972760][ T6131] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[  802.686802][ T6131] usb 6-1: USB disconnect, device number 2
[  802.909116][ T9155] loop5: detected capacity change from 0 to 764
[  809.167792][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  809.174159][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  811.094925][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'.
[  816.461088][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'.
[  828.520386][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'.
[  833.925846][ T5852] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  834.145584][ T5852] usb 5-1: Using ep0 maxpacket: 32
[  834.157457][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  834.162504][ T5852] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  834.279432][ T5852] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.351199][ T5852] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  834.364819][ T5852] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  834.373945][ T5852] usb 5-1: Product: syz
[  834.378407][ T5852] usb 5-1: Manufacturer: syz
[  834.438340][ T5852] hub 5-1:4.0: USB hub found
[  834.879127][ T5852] hub 5-1:4.0: config failed, can't read hub descriptor (err -22)
[  836.019243][ T5820] usb 5-1: USB disconnect, device number 2
[  836.263905][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'.
[  845.008298][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[  852.390121][   T27] audit: type=1326 audit(1779675331.560:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  852.513810][   T27] audit: type=1326 audit(1779675333.140:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  852.995496][ T5852] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  853.225151][ T5852] usb 5-1: Using ep0 maxpacket: 16
[  853.271648][ T5852] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  853.313633][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.356789][ T5852] usb 5-1: config 0 descriptor??
[  853.365914][ T5852] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  853.615350][ T5852] usb 5-1: Detected FT232B
[  853.828110][ T5852] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  853.854554][ T9449] loop2: detected capacity change from 0 to 764
[  853.875087][ T5852] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  854.397302][ T5820] usb 5-1: USB disconnect, device number 3
[  854.571961][ T5820] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  854.645499][ T5820] ftdi_sio 5-1:0.0: device disconnected
[  859.386917][ T9486] loop3: detected capacity change from 0 to 764
[  867.517304][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'.
[  869.426978][   T27] audit: type=1326 audit(1779675350.340:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bffd9ce59 code=0x7ffc0000
[  869.502866][   T27] audit: type=1326 audit(1779675350.360:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9534 comm="syz.2.690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bffd9ce59 code=0x7ffc0000
[  870.097502][ T9545] netlink: 80 bytes leftover after parsing attributes in process `syz.4.697'.
[  871.130308][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  871.137050][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  878.980441][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'.
[  879.699052][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'.
[  882.449823][ T9613] netlink: 'syz.5.709': attribute type 2 has an invalid length.
[  898.995613][ T9689] netlink: 80 bytes leftover after parsing attributes in process `syz.2.711'.
[  903.320233][   T27] audit: type=1326 audit(1779675384.230:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.3.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  903.446307][   T27] audit: type=1326 audit(1779675384.230:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.3.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  907.129380][ T8089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  907.139711][ T8089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  907.149517][ T8089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  907.158797][ T8089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  907.166773][ T8089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  907.174267][ T8089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  909.235457][ T8089] Bluetooth: hci4: command tx timeout
[  909.419611][ T9724] chnl_net:caif_netlink_parms(): no params data found
[  911.475744][ T8089] Bluetooth: hci4: command tx timeout
[  911.575378][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.764992][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.772406][ T9724] bridge_slave_0: entered allmulticast mode
[  911.790389][ T9724] bridge_slave_0: entered promiscuous mode
[  911.862815][ T9747] IPVS: length: 24 != 792
[  912.555866][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.563346][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.794960][ T9724] bridge_slave_1: entered allmulticast mode
[  912.816791][ T9724] bridge_slave_1: entered promiscuous mode
[  913.030334][ T9724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.119022][ T9724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  913.340140][ T9724] team0: Port device team_slave_0 added
[  913.436801][ T9724] team0: Port device team_slave_1 added
[  913.545399][ T8089] Bluetooth: hci4: command tx timeout
[  913.782344][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  913.789739][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  913.816534][ T9724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.816904][   T27] audit: type=1326 audit(1779675394.710:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.4.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  913.875096][ T9724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  913.882440][ T9724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  914.180738][ T9724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  914.185471][   T27] audit: type=1326 audit(1779675394.710:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9757 comm="syz.4.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  915.298217][ T9724] hsr_slave_0: entered promiscuous mode
[  915.389393][ T9724] hsr_slave_1: entered promiscuous mode
[  915.409606][ T9724] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  915.417580][ T9724] Cannot create hsr debugfs directory
[  915.829305][ T8089] Bluetooth: hci4: command tx timeout
[  917.086795][ T9732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.810512][ T9732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.204125][ T9732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.607598][ T9732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.639503][ T9724] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  920.776869][ T9724] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  920.920165][ T9724] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  921.025511][ T9724] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  923.631539][ T9724] 8021q: adding VLAN 0 to HW filter on device bond0
[  923.644880][   T27] audit: type=1326 audit(1779675404.450:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.3.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  925.064793][   T27] audit: type=1326 audit(1779675404.540:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9810 comm="syz.3.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8190f9ce59 code=0x7ffc0000
[  925.289269][ T9724] 8021q: adding VLAN 0 to HW filter on device team0
[  927.407180][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  927.414515][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  927.698317][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state
[  927.705627][ T8145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  928.787719][ T9724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  931.879419][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  931.886418][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  934.033089][ T9732] hsr_slave_0: left promiscuous mode
[  935.361201][ T9732] hsr_slave_1: left promiscuous mode
[  935.395086][ T9732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  935.427093][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  935.546191][ T9732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  935.554157][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  937.255903][ T9732] bridge_slave_1: left allmulticast mode
[  937.261639][ T9732] bridge_slave_1: left promiscuous mode
[  937.284961][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.460803][ T9732] bridge_slave_0: left allmulticast mode
[  937.484683][ T9732] bridge_slave_0: left promiscuous mode
[  937.501719][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.905026][ T9732] veth1_macvtap: left promiscuous mode
[  937.911705][ T9732] veth0_macvtap: left promiscuous mode
[  939.722781][ T9732] bond3 (unregistering): Released all slaves
[  939.830919][ T9732] bond2 (unregistering): Released all slaves
[  941.470455][ T9732] bond1 (unregistering): Released all slaves
[  949.473070][ T9732] team0 (unregistering): Port device team_slave_1 removed
[  949.833305][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  949.844167][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  949.854732][ T9732] team0 (unregistering): Port device team_slave_0 removed
[  949.854767][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  949.888216][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  949.914897][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  949.923100][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  952.020927][ T9732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  952.034933][ T5789] Bluetooth: hci1: command tx timeout
[  952.291536][ T9732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  954.104863][ T5789] Bluetooth: hci1: command tx timeout
[  955.156341][   T27] audit: type=1326 audit(1779675435.920:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[  955.294873][   T27] audit: type=1326 audit(1779675435.920:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[  957.252098][ T5789] Bluetooth: hci1: command tx timeout
[  957.673678][ T9732] bond0 (unregistering): Released all slaves
[  960.284688][ T8089] Bluetooth: hci1: command tx timeout
[  960.564119][ T9724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.128573][ T9919] chnl_net:caif_netlink_parms(): no params data found
[  963.358541][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  963.431624][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  963.440981][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  963.450218][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  963.463433][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  963.475044][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  963.692281][ T9732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.085064][ T9732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.806274][ T8089] Bluetooth: hci3: command tx timeout
[  966.049386][ T9732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.103817][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.139054][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state
[  966.171010][ T9919] bridge_slave_0: entered allmulticast mode
[  966.201377][ T9919] bridge_slave_0: entered promiscuous mode
[  966.226577][ T9919] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.233785][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.265139][ T9919] bridge_slave_1: entered allmulticast mode
[  966.286099][ T9919] bridge_slave_1: entered promiscuous mode
[  968.025561][ T8089] Bluetooth: hci3: command tx timeout
[  968.036051][ T9732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.256078][ T9919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  968.317589][ T9919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  968.449539][ T9919] team0: Port device team_slave_0 added
[  968.579924][ T9919] team0: Port device team_slave_1 added
[  968.773869][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  968.790688][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  968.844806][ T9919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  968.882205][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  968.909494][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  968.995150][ T9919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  969.311600][   T27] audit: type=1326 audit(1779675450.070:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.4.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  969.436325][   T27] audit: type=1326 audit(1779675450.070:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.4.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  969.883354][ T9919] hsr_slave_0: entered promiscuous mode
[  969.906580][ T9919] hsr_slave_1: entered promiscuous mode
[  969.913294][ T9919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  969.939278][ T9919] Cannot create hsr debugfs directory
[  970.154303][ T8089] Bluetooth: hci3: command tx timeout
[  970.176556][   T27] audit: type=1326 audit(1779675450.910:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.4.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  970.244832][   T27] audit: type=1326 audit(1779675450.910:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.4.770" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[  971.369172][ T9970] chnl_net:caif_netlink_parms(): no params data found
[  972.141771][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'.
[  972.422928][ T8089] Bluetooth: hci3: command tx timeout
[  974.716266][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.723617][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.755144][ T9970] bridge_slave_0: entered allmulticast mode
[  974.770828][ T9970] bridge_slave_0: entered promiscuous mode
[  974.787868][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.804920][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.812247][ T9970] bridge_slave_1: entered allmulticast mode
[  974.836669][ T9970] bridge_slave_1: entered promiscuous mode
[  974.997135][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.158101][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  975.313761][ T9732] hsr_slave_0: left promiscuous mode
[  975.530876][ T9732] hsr_slave_1: left promiscuous mode
[  975.573037][ T9732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  975.582346][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  975.781765][ T9732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  975.802113][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  975.856433][ T9732] bridge_slave_1: left allmulticast mode
[  975.864986][ T9732] bridge_slave_1: left promiscuous mode
[  975.878267][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.916095][ T9732] bridge_slave_0: left allmulticast mode
[  975.927993][ T9732] bridge_slave_0: left promiscuous mode
[  975.933929][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.687757][ T9732] veth1_macvtap: left promiscuous mode
[  977.693398][ T9732] veth0_macvtap: left promiscuous mode
[  977.717819][ T9732] veth1_vlan: left promiscuous mode
[  977.723293][ T9732] veth0_vlan: left promiscuous mode
[  978.031584][ T9732] bond2 (unregistering): Released all slaves
[  978.069416][ T9732] bond1 (unregistering): Released all slaves
[  979.411633][ T9732] team0 (unregistering): Port device team_slave_1 removed
[  979.492905][ T9732] team0 (unregistering): Port device team_slave_0 removed
[  979.569355][ T9732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  979.630791][ T9732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  980.972158][ T9732] bond0 (unregistering): Released all slaves
[  981.181999][ T9970] team0: Port device team_slave_0 added
[  981.234963][ T9970] team0: Port device team_slave_1 added
[  981.453762][ T9919] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  983.258133][ T9919] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  983.305750][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  983.330606][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.754715][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  984.787068][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  984.794524][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.842759][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  984.895946][ T9919] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  984.919705][ T9919] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  985.232164][ T9970] hsr_slave_0: entered promiscuous mode
[  985.265217][ T9970] hsr_slave_1: entered promiscuous mode
[  985.771821][ T9919] 8021q: adding VLAN 0 to HW filter on device bond0
[  987.736977][ T9919] 8021q: adding VLAN 0 to HW filter on device team0
[  988.277777][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  988.285056][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  988.399442][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[  988.407164][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  991.137234][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'.
[  993.142809][ T9919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  993.309704][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  993.346946][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  994.737544][ T9970] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  995.355307][ T9970] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  995.390268][ T9970] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  995.430319][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'.
[  995.475498][ T9732] hsr_slave_0: left promiscuous mode
[  995.522925][ T9732] hsr_slave_1: left promiscuous mode
[  995.545596][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  995.553407][ T9732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  995.641204][ T9732] bridge_slave_1: left allmulticast mode
[  995.657469][ T9732] bridge_slave_1: left promiscuous mode
[  995.663687][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.776783][ T9732] bridge_slave_0: left allmulticast mode
[  995.782515][ T9732] bridge_slave_0: left promiscuous mode
[  995.804873][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.676172][ T9732] team0 (unregistering): Port device team_slave_1 removed
[ 1001.895464][ T9732] team0 (unregistering): Port device team_slave_0 removed
[ 1002.055987][ T9732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1002.345649][ T9732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1004.318439][ T9732] bond0 (unregistering): Released all slaves
[ 1006.555330][ T9970] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1006.635842][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.797'.
[ 1006.918974][ T9919] veth0_vlan: entered promiscuous mode
[ 1008.561404][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1008.861343][ T9970] 8021q: adding VLAN 0 to HW filter on device team0
[ 1009.045835][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.053227][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1009.106741][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.113953][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1009.828547][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1009.844418][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1009.854911][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1009.863139][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1009.871446][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1009.878883][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1011.721513][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'.
[ 1012.006195][ T8089] Bluetooth: hci1: command tx timeout
[ 1013.234466][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1014.057240][ T8089] Bluetooth: hci1: command tx timeout
[ 1014.128130][T10239] chnl_net:caif_netlink_parms(): no params data found
[ 1016.124683][ T8089] Bluetooth: hci1: command tx timeout
[ 1017.839344][T10239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1017.885369][T10239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1017.892698][T10239] bridge_slave_0: entered allmulticast mode
[ 1018.135948][T10239] bridge_slave_0: entered promiscuous mode
[ 1018.185302][ T8089] Bluetooth: hci1: command tx timeout
[ 1018.191677][T10239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.267431][T10239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1018.551741][T10239] bridge_slave_1: entered allmulticast mode
[ 1018.796283][T10239] bridge_slave_1: entered promiscuous mode
[ 1021.768141][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1021.847243][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1022.733811][T10239] team0: Port device team_slave_0 added
[ 1022.817734][T10239] team0: Port device team_slave_1 added
[ 1025.015853][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1025.051669][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1025.061119][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1025.085249][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1025.093323][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1025.101109][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1025.967542][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1025.995756][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.165974][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.257105][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1026.264154][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.505232][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1027.225590][ T5789] Bluetooth: hci4: command tx timeout
[ 1029.193538][T10239] hsr_slave_0: entered promiscuous mode
[ 1029.279584][T10239] hsr_slave_1: entered promiscuous mode
[ 1029.304784][ T5789] Bluetooth: hci4: command tx timeout
[ 1029.374956][T10239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1029.382640][T10239] Cannot create hsr debugfs directory
[ 1029.854932][ T6022] hsr_slave_0: left promiscuous mode
[ 1029.886689][ T6022] hsr_slave_1: left promiscuous mode
[ 1031.895934][ T5789] Bluetooth: hci4: command tx timeout
[ 1031.964848][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1032.050132][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1032.295330][ T6022] bridge_slave_1: left allmulticast mode
[ 1032.301127][ T6022] bridge_slave_1: left promiscuous mode
[ 1032.350187][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.705802][ T6022] bridge_slave_0: left allmulticast mode
[ 1032.711855][ T6022] bridge_slave_0: left promiscuous mode
[ 1032.720098][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.081599][ T6022] veth0_vlan: left promiscuous mode
[ 1035.115316][ T5789] Bluetooth: hci4: command tx timeout
[ 1037.831960][ T6022] team0 (unregistering): Port device team_slave_1 removed
[ 1039.624391][ T6022] team0 (unregistering): Port device team_slave_0 removed
[ 1039.816304][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1039.991613][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1041.009140][ T6022] bond0 (unregistering): Released all slaves
[ 1043.936347][T10324] chnl_net:caif_netlink_parms(): no params data found
[ 1044.010016][   T27] audit: type=1326 audit(1779675524.890:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[ 1044.350405][   T27] audit: type=1326 audit(1779675524.890:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10399 comm="syz.4.821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85b3d9ce59 code=0x7ffc0000
[ 1044.830232][T10324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1044.847114][T10324] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1044.854433][T10324] bridge_slave_0: entered allmulticast mode
[ 1044.866914][T10324] bridge_slave_0: entered promiscuous mode
[ 1044.879020][T10324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1044.886466][T10324] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.893949][T10324] bridge_slave_1: entered allmulticast mode
[ 1044.915295][T10324] bridge_slave_1: entered promiscuous mode
[ 1045.877804][T10324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1045.923479][T10324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1046.190735][T10324] team0: Port device team_slave_0 added
[ 1046.290528][T10324] team0: Port device team_slave_1 added
[ 1046.387359][T10239] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1046.448936][T10239] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1046.510700][T10324] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1046.535055][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1046.789102][T10324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1047.748929][T10324] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1047.782119][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1047.941171][T10324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1047.980617][T10239] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1048.045247][T10239] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1048.753073][T10324] hsr_slave_0: entered promiscuous mode
[ 1048.834373][T10324] hsr_slave_1: entered promiscuous mode
[ 1048.874332][T10324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1048.915696][T10324] Cannot create hsr debugfs directory
[ 1053.165041][T10239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1053.333388][ T6022] hsr_slave_0: left promiscuous mode
[ 1053.349521][ T6022] hsr_slave_1: left promiscuous mode
[ 1053.385276][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1053.402071][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1053.436415][ T6022] bridge_slave_1: left allmulticast mode
[ 1053.442142][ T6022] bridge_slave_1: left promiscuous mode
[ 1053.474846][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.525865][ T6022] bridge_slave_0: left allmulticast mode
[ 1053.531622][ T6022] bridge_slave_0: left promiscuous mode
[ 1053.560796][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.280110][ T6022] team0 (unregistering): Port device team_slave_1 removed
[ 1054.333227][ T6022] team0 (unregistering): Port device team_slave_0 removed
[ 1054.752595][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.759298][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.976115][ T6022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1055.126036][ T6022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1055.578135][ T6022] bond0 (unregistering): Released all slaves
[ 1055.692336][T10239] 8021q: adding VLAN 0 to HW filter on device team0
[ 1055.820515][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.827815][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1055.943301][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.950742][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1058.181132][T10239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1059.855374][T10324] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1059.899982][T10324] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1059.936075][T10324] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1059.969474][T10324] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1060.293929][T10324] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.383132][T10324] 8021q: adding VLAN 0 to HW filter on device team0
[ 1060.442085][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.449361][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.509435][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.516886][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.649076][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1060.691058][T10324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1062.839262][T10324] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1063.252767][T10239] veth0_vlan: entered promiscuous mode
[ 1063.305224][T10239] veth1_vlan: entered promiscuous mode
[ 1063.437866][T10239] veth0_macvtap: entered promiscuous mode
[ 1063.497848][T10239] veth1_macvtap: entered promiscuous mode
[ 1063.607551][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.618482][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.629892][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.651064][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.663520][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1063.815204][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.892683][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.931685][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.983136][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.009311][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1064.080309][T10239] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.107186][T10239] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.129909][T10239] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.146960][T10239] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.435967][T10324] veth0_vlan: entered promiscuous mode
[ 1065.342598][T10324] veth1_vlan: entered promiscuous mode
[ 1066.899642][ T6504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1066.919239][ T6504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.696793][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1068.728759][T10324] veth0_macvtap: entered promiscuous mode
[ 1068.735040][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.790233][T10324] veth1_macvtap: entered promiscuous mode
[ 1068.881374][T10324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.935334][T10324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.984669][T10324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.023077][T10324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.054904][T10324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.094799][T10324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.136947][T10324] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1069.221057][T10324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.264632][T10324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.294654][T10324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.333621][T10324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.365329][T10324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1069.434633][T10324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.476316][T10324] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1069.547049][T10324] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.584889][T10324] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.594224][T10324] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.654889][T10324] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.748446][ T8089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1069.806363][ T8089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1069.815352][ T8089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1069.828874][ T8089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1069.845077][ T8089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1069.852625][ T8089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1070.393902][   T27] audit: type=1326 audit(1779675551.290:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.5.846" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[ 1070.420117][   T27] audit: type=1326 audit(1779675551.290:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10598 comm="syz.5.846" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834b99ce59 code=0x7ffc0000
[ 1070.711381][ T6003] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.364709][ T8089] Bluetooth: hci3: command tx timeout
[ 1072.665843][ T6504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1072.705945][ T6504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1072.790084][ T6003] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.269087][ T6003] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.322192][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1074.346491][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1074.426012][ T8089] Bluetooth: hci3: command tx timeout
[ 1074.527306][ T6003] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1075.382034][T10634] netlink: 'syz.6.721': attribute type 2 has an invalid length.
[ 1076.319638][T10593] chnl_net:caif_netlink_parms(): no params data found
[ 1076.506846][ T8089] Bluetooth: hci3: command tx timeout
[ 1076.865362][T10647] loop6: detected capacity change from 0 to 16
[ 1076.922274][T10647] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1077.802340][T10647] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1077.859675][T10647] erofs: (device loop6): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1077.896529][T10647] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1077.909714][T10647] erofs: (device loop6): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1077.922051][T10647] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1077.941164][T10647] erofs: (device loop6): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1077.952114][T10647] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1077.979394][T10647] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1078.004057][T10647] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1078.029892][   T27] audit: type=1800 audit(1779675558.940:55): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.852" name="file3" dev="loop6" ino=89 res=0 errno=0
[ 1079.688861][ T8089] Bluetooth: hci3: command tx timeout
[ 1083.605652][T10593] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.612892][T10593] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.644886][T10593] bridge_slave_0: entered allmulticast mode
[ 1083.652159][T10593] bridge_slave_0: entered promiscuous mode
[ 1083.837594][T10593] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.874775][T10593] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.882188][T10593] bridge_slave_1: entered allmulticast mode
[ 1083.918729][T10593] bridge_slave_1: entered promiscuous mode
[ 1084.358074][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.399618][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.937659][T10593] team0: Port device team_slave_0 added
[ 1085.048414][T10593] team0: Port device team_slave_1 added
[ 1085.410577][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1085.456406][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1085.535492][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1086.904378][ T6003] hsr_slave_0: left promiscuous mode
[ 1086.996916][ T6003] hsr_slave_1: left promiscuous mode
[ 1087.113069][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1087.131267][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1087.180478][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1087.204786][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1088.925469][ T6003] bridge_slave_1: left allmulticast mode
[ 1088.931213][ T6003] bridge_slave_1: left promiscuous mode
[ 1089.024870][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.089390][ T6003] bridge_slave_0: left allmulticast mode
[ 1089.108609][ T6003] bridge_slave_0: left promiscuous mode
[ 1089.128925][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.387518][ T6003] veth1_macvtap: left promiscuous mode
[ 1089.455330][ T6003] veth0_macvtap: left promiscuous mode
[ 1089.461321][ T6003] veth1_vlan: left promiscuous mode
[ 1089.484973][ T6003] veth0_vlan: left promiscuous mode
[ 1095.129508][ T6003] team0 (unregistering): Port device team_slave_1 removed
[ 1095.220179][T10724] loop4: detected capacity change from 0 to 16
[ 1095.228503][ T6003] team0 (unregistering): Port device team_slave_0 removed
[ 1096.927988][T10724] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1097.111667][T10729] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1097.122933][T10729] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1097.132506][T10729] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1097.144848][T10729] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1097.154139][T10729] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1097.165566][T10729] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1097.174974][T10729] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1097.186389][T10729] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1097.197532][T10729] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1097.574163][   T27] audit: type=1800 audit(1779675578.120:56): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.863" name="file3" dev="loop4" ino=89 res=0 errno=0
[ 1097.735026][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1099.437231][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1100.274856][T10735] loop6: detected capacity change from 0 to 512
[ 1100.424178][T10735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1100.483445][T10735] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1100.660147][ T6003] bond0 (unregistering): Released all slaves
[ 1100.806882][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1100.813921][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1100.841923][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1100.853715][T10699] netlink: 'syz.5.859': attribute type 2 has an invalid length.
[ 1101.040117][T10593] hsr_slave_0: entered promiscuous mode
[ 1101.085167][T10593] hsr_slave_1: entered promiscuous mode
[ 1101.153363][T10750] loop4: detected capacity change from 0 to 764
[ 1101.241286][T10675] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1101.771830][ T6009] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1101.894403][ T6009] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28
[ 1101.936570][ T6009] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1101.936570][ T6009] 
[ 1101.946635][ T6009] EXT4-fs (loop6): Total free blocks count 0
[ 1101.999204][ T6009] EXT4-fs (loop6): Free/Dirty block details
[ 1102.035603][ T6009] EXT4-fs (loop6): free_blocks=65280
[ 1102.052722][ T6009] EXT4-fs (loop6): dirty_blocks=3200
[ 1102.246787][ T6009] EXT4-fs (loop6): Block reservation details
[ 1102.252869][ T6009] EXT4-fs (loop6): i_reserved_data_blocks=3200
[ 1102.271254][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'.
[ 1102.686047][ T6009] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1150 with error 28
[ 1107.878223][T10593] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1107.928646][T10593] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1107.963499][T10593] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1107.990114][T10593] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1108.280350][T10593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1108.364289][T10593] 8021q: adding VLAN 0 to HW filter on device team0
[ 1108.404468][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.411877][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1108.496206][ T6504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.503501][ T6504] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1109.440151][T10593] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1109.526657][T10807] netlink: 'syz.6.876': attribute type 2 has an invalid length.
[ 1112.148568][T10829] loop6: detected capacity change from 0 to 764
[ 1113.083978][T10593] veth0_vlan: entered promiscuous mode
[ 1113.139158][T10593] veth1_vlan: entered promiscuous mode
[ 1114.593713][T10593] veth0_macvtap: entered promiscuous mode
[ 1114.747058][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.882'.
[ 1115.035212][T10593] veth1_macvtap: entered promiscuous mode
[ 1115.056301][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.070109][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.083250][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.105633][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.154712][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.204655][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.256159][T10593] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1115.347542][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.389310][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.430729][T10850] loop6: detected capacity change from 0 to 16
[ 1115.434777][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.458965][T10850] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1115.467253][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.509911][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.556868][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.646869][T10853] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1115.658353][T10853] erofs: (device loop6): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1115.667988][T10853] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1115.679982][T10853] erofs: (device loop6): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1115.689411][T10853] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1115.700770][T10853] erofs: (device loop6): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1115.710093][T10853] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1115.721808][T10853] erofs: (device loop6): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1115.733096][T10853] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1115.820883][T10593] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1115.821002][   T27] audit: type=1800 audit(1779675596.650:57): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.884" name="file3" dev="loop6" ino=89 res=0 errno=0
[ 1116.190645][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.230025][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.277362][T10593] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.398878][T10593] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.407777][T10593] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.416571][T10593] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.867015][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1118.590942][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1120.351123][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1120.384147][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1123.876003][T10904] netlink: 'syz.4.887': attribute type 2 has an invalid length.
[ 1130.675421][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[ 1131.369477][T10956] loop7: detected capacity change from 0 to 512
[ 1131.529460][T10956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1131.645300][T10956] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1133.990643][ T8145] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1134.166804][ T8145] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28
[ 1134.230468][ T8145] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1134.230468][ T8145] 
[ 1134.328910][ T8145] EXT4-fs (loop7): Total free blocks count 0
[ 1134.478325][ T8145] EXT4-fs (loop7): Free/Dirty block details
[ 1134.563618][ T8145] EXT4-fs (loop7): free_blocks=65280
[ 1134.678856][ T8145] EXT4-fs (loop7): dirty_blocks=2204
[ 1134.781435][ T8145] EXT4-fs (loop7): Block reservation details
[ 1134.934589][ T8145] EXT4-fs (loop7): i_reserved_data_blocks=2204
[ 1135.246462][ T8145] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 154 with error 28
[ 1137.956328][T10593] EXT4-fs: 7 callbacks suppressed
[ 1137.956343][T10593] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1140.411507][T11011] netlink: 'syz.7.902': attribute type 2 has an invalid length.
[ 1141.391765][T11021] loop7: detected capacity change from 0 to 16
[ 1141.460787][T11021] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1141.648154][T11024] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1141.659588][T11024] erofs: (device loop7): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1141.668818][T11024] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1141.680007][T11024] erofs: (device loop7): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1141.689671][T11024] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1141.701086][T11024] erofs: (device loop7): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1141.710470][T11024] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1141.721830][T11024] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1141.733304][T11024] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1141.794836][   T27] audit: type=1800 audit(1779675622.660:58): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.909" name="file3" dev="loop7" ino=89 res=0 errno=0
[ 1142.767951][T11029] loop7: detected capacity change from 0 to 16
[ 1142.825063][T11029] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1142.992065][T11032] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1143.003528][T11032] erofs: (device loop7): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1143.013100][T11032] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1143.026362][T11032] erofs: (device loop7): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1143.035867][T11032] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1143.047786][T11032] erofs: (device loop7): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1143.058294][T11032] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1143.070172][T11032] erofs: (device loop7): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1143.081880][T11032] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1143.091515][   T27] audit: type=1800 audit(1779675624.000:59): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.910" name="file3" dev="loop7" ino=89 res=0 errno=0
[ 1143.382504][T11034] loop4: detected capacity change from 0 to 16
[ 1143.498647][T11036] loop5: detected capacity change from 0 to 16
[ 1143.721666][T11034] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1143.790181][T11036] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1143.979726][T11038] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1143.992100][T11038] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1144.002481][T11038] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.013767][T11038] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1144.023122][T11038] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.034434][T11038] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1144.045892][T11038] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.057128][T11038] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.068737][T11038] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1144.406348][   T27] audit: type=1800 audit(1779675624.990:60): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.908" name="file3" dev="loop4" ino=89 res=0 errno=0
[ 1144.440952][T11039] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.453614][T11039] erofs: (device loop5): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1144.463456][T11039] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.475327][T11039] erofs: (device loop5): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1144.484729][T11039] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.495975][T11039] erofs: (device loop5): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1144.506021][T11039] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.519297][T11039] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1144.530643][T11039] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1144.835573][   T27] audit: type=1800 audit(1779675625.460:61): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.905" name="file3" dev="loop5" ino=89 res=0 errno=0
[ 1144.948507][T11043] loop6: detected capacity change from 0 to 764
[ 1145.107814][T11048] loop4: detected capacity change from 0 to 16
[ 1145.166072][T11048] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1145.184839][ T5818] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1145.376150][ T5818] usb 8-1: Using ep0 maxpacket: 8
[ 1145.427417][ T5818] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1145.524233][ T5818] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1146.304667][T11056] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1146.314909][ T5818] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1146.326123][T11056] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1146.335525][T11056] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1146.347639][T11056] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1146.357166][T11056] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1146.369089][T11056] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1146.379135][T11056] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1146.391015][T11056] erofs: (device loop4): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1146.402629][ T5818] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1146.402697][ T5818] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1146.402724][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.436520][T11056] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1146.509723][   T27] audit: type=1800 audit(1779675627.360:62): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.912" name="file3" dev="loop4" ino=89 res=0 errno=0
[ 1146.804868][ T5818] usb 8-1: GET_CAPABILITIES returned 0
[ 1147.912683][ T5818] usbtmc 8-1:16.0: can't read capabilities
[ 1147.967614][ T6131] usb 8-1: USB disconnect, device number 2
[ 1148.195768][T11067] netlink: 'syz.7.917': attribute type 2 has an invalid length.
[ 1148.263681][T11068] loop4: detected capacity change from 0 to 764
[ 1149.951625][ T8089] Bluetooth: hci4: command 0x0406 tx timeout
[ 1150.016152][T11082] loop4: detected capacity change from 0 to 32768
[ 1150.041418][T11082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.920 (11082)
[ 1150.263225][T11082] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1150.274488][T11082] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[ 1150.283736][T11082] BTRFS info (device loop4): force clearing of disk cache
[ 1150.292439][T11082] BTRFS info (device loop4): enabling auto defrag
[ 1150.299491][T11082] BTRFS info (device loop4): max_inline at 0
[ 1150.305876][T11082] BTRFS info (device loop4): enabling ssd optimizations
[ 1150.313391][T11082] BTRFS info (device loop4): using spread ssd allocation scheme
[ 1150.322010][T11082] BTRFS info (device loop4): using free space tree
[ 1150.901156][T11082] BTRFS info (device loop4): rebuilding free space tree
[ 1151.412253][T11113] loop7: detected capacity change from 0 to 512
[ 1151.545018][T11113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1151.951916][T11113] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1152.009140][ T8356] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1153.231471][T11113] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1155.360501][ T6030] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1155.447670][ T6030] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1155.447670][ T6030] 
[ 1155.458260][ T6030] EXT4-fs (loop7): Total free blocks count 0
[ 1155.464304][ T6030] EXT4-fs (loop7): Free/Dirty block details
[ 1155.471519][ T6030] EXT4-fs (loop7): free_blocks=65281
[ 1155.477614][ T6030] EXT4-fs (loop7): dirty_blocks=33
[ 1155.482890][ T6030] EXT4-fs (loop7): Block reservation details
[ 1155.490143][ T6030] EXT4-fs (loop7): i_reserved_data_blocks=33
[ 1155.520420][ T6003] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 32 with error 28
[ 1157.517267][T11162] loop6: detected capacity change from 0 to 512
[ 1157.701904][T11162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1157.785044][T11162] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1158.072078][T11184] loop7: detected capacity change from 0 to 64
[ 1158.113916][T11184] hfs: unable to parse mount options
[ 1158.815249][T11186] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1161.376265][ T6028] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1161.583622][ T6028] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1161.583622][ T6028] 
[ 1161.801561][ T6028] EXT4-fs (loop6): Total free blocks count 0
[ 1161.922321][ T6028] EXT4-fs (loop6): Free/Dirty block details
[ 1162.054861][ T6028] EXT4-fs (loop6): free_blocks=65281
[ 1162.092390][ T6028] EXT4-fs (loop6): dirty_blocks=1
[ 1162.122916][ T6028] EXT4-fs (loop6): Block reservation details
[ 1162.153396][ T6028] EXT4-fs (loop6): i_reserved_data_blocks=1
[ 1162.326575][T10324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1165.101292][T11231] 
[ 1165.103708][T11231] ================================
[ 1165.108856][T11231] WARNING: inconsistent lock state
[ 1165.114019][T11231] syzkaller #0 Not tainted
[ 1165.118484][T11231] --------------------------------
[ 1165.123618][T11231] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage.
[ 1165.130579][T11231] syz.4.943/11231 [HC0[0]:SC0[0]:HE1:SE1] takes:
[ 1165.137032][T11231] ffff88807e05c570 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x180/0x990
[ 1165.146779][T11231] {IN-SOFTIRQ-W} state was registered at:
[ 1165.152526][T11231]   lock_acquire+0x19e/0x420
[ 1165.157197][T11231]   _raw_spin_lock_nested+0x32/0x50
[ 1165.162596][T11231]   __sk_receive_skb+0x180/0x990
[ 1165.167599][T11231]   pep_do_rcv+0x682/0xa90
[ 1165.172087][T11231]   __sk_receive_skb+0x436/0x990
[ 1165.177051][T11231]   phonet_rcv+0x78f/0xc80
[ 1165.181502][T11231]   __netif_receive_skb+0xcc/0x290
[ 1165.186637][T11231]   process_backlog+0x391/0x6f0
[ 1165.191511][T11231]   __napi_poll+0xc0/0x460
[ 1165.195945][T11231]   net_rx_action+0x616/0xc40
[ 1165.200643][T11231]   handle_softirqs+0x280/0x820
[ 1165.205516][T11231]   do_softirq+0xfa/0x1a0
[ 1165.209864][T11231]   __local_bh_enable_ip+0x184/0x1c0
[ 1165.215175][T11231]   netif_rx+0x83/0x90
[ 1165.219303][T11231]   pn_send+0x553/0x7f0
[ 1165.223479][T11231]   pn_skb_send+0x218/0x510
[ 1165.228008][T11231]   pipe_handler_do_rcv+0x15c0/0x1d90
[ 1165.233410][T11231]   pep_do_rcv+0x5d4/0xa90
[ 1165.237857][T11231]   __release_sock+0x1e5/0x460
[ 1165.242650][T11231]   release_sock+0x5f/0x1c0
[ 1165.247183][T11231]   pn_socket_connect+0x715/0xba0
[ 1165.252236][T11231]   __sys_connect+0x3da/0x470
[ 1165.257024][T11231]   __x64_sys_connect+0x7a/0x90
[ 1165.262004][T11231]   do_syscall_64+0x55/0xb0
[ 1165.266706][T11231]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1165.272754][T11231] irq event stamp: 1007
[ 1165.276939][T11231] hardirqs last  enabled at (1007): [<ffffffff81526baa>] __local_bh_enable_ip+0x13a/0x1c0
[ 1165.286981][T11231] hardirqs last disabled at (1005): [<ffffffff81526b4b>] __local_bh_enable_ip+0xdb/0x1c0
[ 1165.296917][T11231] softirqs last  enabled at (1006): [<ffffffff88730e7c>] __release_sock+0xac/0x460
[ 1165.306278][T11231] softirqs last disabled at (1004): [<ffffffff8872063f>] release_sock+0x2f/0x1c0
[ 1165.315434][T11231] 
[ 1165.315434][T11231] other info that might help us debug this:
[ 1165.323522][T11231]  Possible unsafe locking scenario:
[ 1165.323522][T11231] 
[ 1165.331000][T11231]        CPU0
[ 1165.334376][T11231]        ----
[ 1165.337763][T11231]   lock(slock-AF_PHONET/1);
[ 1165.342387][T11231]   <Interrupt>
[ 1165.345864][T11231]     lock(slock-AF_PHONET/1);
[ 1165.350921][T11231] 
[ 1165.350921][T11231]  *** DEADLOCK ***
[ 1165.350921][T11231] 
[ 1165.359100][T11231] 1 lock held by syz.4.943/11231:
[ 1165.364169][T11231]  #0: ffff88807e05a6b0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_accept+0xfe/0x12d0
[ 1165.374058][T11231] 
[ 1165.374058][T11231] stack backtrace:
[ 1165.379981][T11231] CPU: 1 PID: 11231 Comm: syz.4.943 Not tainted syzkaller #0
[ 1165.387371][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1165.397565][T11231] Call Trace:
[ 1165.400953][T11231]  <TASK>
[ 1165.403972][T11231]  dump_stack_lvl+0x18c/0x250
[ 1165.408753][T11231]  ? show_regs_print_info+0x20/0x20
[ 1165.414032][T11231]  ? __kernel_text_address+0xd/0x30
[ 1165.419611][T11231]  ? unwind_get_return_address+0x91/0xc0
[ 1165.425366][T11231]  valid_state+0x13b/0x1d0
[ 1165.429838][T11231]  mark_lock_irq+0xad/0x900
[ 1165.434573][T11231]  ? stack_trace_save+0xaa/0x100
[ 1165.439565][T11231]  ? save_trace+0xcd0/0xcd0
[ 1165.444130][T11231]  ? mark_lock+0x94/0x320
[ 1165.448494][T11231]  ? save_trace+0x5d/0xcd0
[ 1165.452948][T11231]  mark_lock+0x208/0x320
[ 1165.457222][T11231]  __lock_acquire+0x11c7/0x7d40
[ 1165.462192][T11231]  ? verify_lock_unused+0x140/0x140
[ 1165.467428][T11231]  ? mark_lock+0x94/0x320
[ 1165.471786][T11231]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1165.477795][T11231]  ? verify_lock_unused+0x140/0x140
[ 1165.483025][T11231]  ? sk_filter_trim_cap+0x18a/0x900
[ 1165.488249][T11231]  ? __lock_acquire+0x7d40/0x7d40
[ 1165.493311][T11231]  lock_acquire+0x19e/0x420
[ 1165.497847][T11231]  ? __sk_receive_skb+0x180/0x990
[ 1165.502902][T11231]  ? read_lock_is_recursive+0x20/0x20
[ 1165.508314][T11231]  ? sk_filter_trim_cap+0x18a/0x900
[ 1165.513546][T11231]  ? copy_bpf_fprog_from_user+0x2d0/0x2d0
[ 1165.519297][T11231]  ? ref_tracker_free+0x690/0x840
[ 1165.524407][T11231]  ? mark_lock+0x94/0x320
[ 1165.528763][T11231]  _raw_spin_lock_nested+0x32/0x50
[ 1165.533911][T11231]  ? __sk_receive_skb+0x180/0x990
[ 1165.538962][T11231]  __sk_receive_skb+0x180/0x990
[ 1165.543847][T11231]  pep_do_rcv+0x682/0xa90
[ 1165.548210][T11231]  ? pep_recvmsg+0x600/0x600
[ 1165.552832][T11231]  ? do_raw_spin_unlock+0x121/0x230
[ 1165.558096][T11231]  __release_sock+0x1e5/0x460
[ 1165.562812][T11231]  release_sock+0x5f/0x1c0
[ 1165.567257][T11231]  pep_sock_accept+0xd58/0x12d0
[ 1165.572141][T11231]  ? __might_sleep+0xe0/0xe0
[ 1165.576773][T11231]  ? __asan_memcpy+0x40/0x70
[ 1165.581607][T11231]  ? pep_sock_connect+0x470/0x470
[ 1165.586748][T11231]  ? aa_sk_perm+0x83c/0x970
[ 1165.591310][T11231]  pn_socket_accept+0x12a/0x370
[ 1165.596196][T11231]  ? pn_socket_connect+0xba0/0xba0
[ 1165.601339][T11231]  ? bpf_lsm_socket_accept+0x9/0x10
[ 1165.606581][T11231]  do_accept+0x4d8/0x6c0
[ 1165.610851][T11231]  ? __ia32_sys_listen+0x70/0x70
[ 1165.615816][T11231]  __sys_accept4+0x9b/0x100
[ 1165.620778][T11231]  __x64_sys_accept+0x7d/0x90
[ 1165.625483][T11231]  do_syscall_64+0x55/0xb0
[ 1165.629936][T11231]  ? clear_bhb_loop+0x40/0x90
[ 1165.634696][T11231]  ? clear_bhb_loop+0x40/0x90
[ 1165.639411][T11231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1165.645361][T11231] RIP: 0033:0x7f85b3d9ce59
[ 1165.649882][T11231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1165.669935][T11231] RSP: 002b:00007f85b4b80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[ 1165.678475][T11231] RAX: ffffffffffffffda RBX: 00007f85b4015fa0 RCX: 00007f85b3d9ce59
[ 1165.686486][T11231] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000004
[ 1165.694502][T11231] RBP: 00007f85b3e32d6f R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1165.702704][T11231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1165.710717][T11231] R13: 00007f85b4016038 R14: 00007f85b4015fa0 R15: 00007ffe1404a5f8
[ 1165.718812][T11231]  </TASK>
[ 1165.741873][T11233] gprs0: attached
[ 1166.772911][T11236] loop5: detected capacity change from 0 to 1024
[ 1167.309699][T11230] gprs0: detached
[ 1167.547150][ T5821] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1168.011015][ T6015] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.150533][ T6015] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.248132][ T6015] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.393508][ T6015] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1169.334432][ T6015] hsr_slave_0: left promiscuous mode
[ 1169.341236][ T6015] hsr_slave_1: left promiscuous mode
[ 1169.353606][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1169.361764][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1169.371241][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1169.379699][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1169.392754][ T6015] bridge_slave_1: left allmulticast mode
[ 1169.398928][ T6015] bridge_slave_1: left promiscuous mode
[ 1169.405103][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1169.414397][ T6015] bridge_slave_0: left allmulticast mode
[ 1169.420687][ T6015] bridge_slave_0: left promiscuous mode
[ 1169.427149][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1169.448511][ T6015] veth1_macvtap: left promiscuous mode
[ 1169.454126][ T6015] veth0_macvtap: left promiscuous mode
[ 1169.461790][ T6015] veth1_vlan: left promiscuous mode
[ 1169.468096][ T6015] veth0_vlan: left promiscuous mode
[ 1169.759044][ T6015] team0 (unregistering): Port device team_slave_1 removed
[ 1169.793524][ T6015] team0 (unregistering): Port device team_slave_0 removed
[ 1169.825501][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1169.858007][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1169.960299][ T6015] bond0 (unregistering): Released all slaves
[ 1170.470365][ T6504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.531992][ T6504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.593985][ T6504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.651813][ T6504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.796199][ T6504] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.840805][ T6504] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.892744][ T6504] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.953345][ T6504] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.112853][ T6504] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.153866][ T6504] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.192554][ T6504] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.262357][ T6504] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.641014][ T6504] hsr_slave_0: left promiscuous mode
[ 1172.649544][ T6504] hsr_slave_1: left promiscuous mode
[ 1172.655860][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1172.663313][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1172.674627][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1172.682180][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1172.690381][ T6504] bridge_slave_1: left allmulticast mode
[ 1172.696221][ T6504] bridge_slave_1: left promiscuous mode
[ 1172.702184][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.711537][ T6504] bridge_slave_0: left allmulticast mode
[ 1172.719870][ T6504] bridge_slave_0: left promiscuous mode
[ 1172.727329][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.740767][ T6504] hsr_slave_0: left promiscuous mode
[ 1172.748902][ T6504] hsr_slave_1: left promiscuous mode
[ 1172.755686][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1172.763150][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1172.774080][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1172.781989][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1172.791191][ T6504] bridge_slave_1: left allmulticast mode
[ 1172.797680][ T6504] bridge_slave_1: left promiscuous mode
[ 1172.803463][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.813826][ T6504] bridge_slave_0: left allmulticast mode
[ 1172.820580][ T6504] bridge_slave_0: left promiscuous mode
[ 1172.830522][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.844181][ T6504] hsr_slave_0: left promiscuous mode
[ 1172.851559][ T6504] hsr_slave_1: left promiscuous mode
[ 1172.858475][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1172.867304][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1172.877147][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1172.885888][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1172.893741][ T6504] bridge_slave_1: left allmulticast mode
[ 1172.899849][ T6504] bridge_slave_1: left promiscuous mode
[ 1172.907678][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.917535][ T6504] bridge_slave_0: left allmulticast mode
[ 1172.923232][ T6504] bridge_slave_0: left promiscuous mode
[ 1172.931340][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.951665][ T6504] veth1_macvtap: left promiscuous mode
[ 1172.957424][ T6504] veth0_macvtap: left promiscuous mode
[ 1172.963075][ T6504] veth1_vlan: left promiscuous mode
[ 1172.971746][ T6504] veth0_vlan: left promiscuous mode
[ 1172.978876][ T6504] veth1_macvtap: left promiscuous mode
[ 1172.984461][ T6504] veth0_macvtap: left promiscuous mode
[ 1172.991564][ T6504] veth1_vlan: left promiscuous mode
[ 1172.997040][ T6504] veth0_vlan: left promiscuous mode
[ 1173.004230][ T6504] veth1_macvtap: left promiscuous mode
[ 1173.011809][ T6504] veth0_macvtap: left promiscuous mode
[ 1173.018246][ T6504] veth1_vlan: left promiscuous mode
[ 1173.023583][ T6504] veth0_vlan: left promiscuous mode
[ 1173.451338][ T6504] team0 (unregistering): Port device team_slave_1 removed
[ 1173.483355][ T6504] team0 (unregistering): Port device team_slave_0 removed
[ 1173.518117][ T6504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1173.551051][ T6504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1173.639374][ T6504] bond0 (unregistering): Released all slaves
[ 1173.839884][ T6504] team0 (unregistering): Port device team_slave_1 removed
[ 1173.853485][ T6504] team0 (unregistering): Port device team_slave_0 removed
[ 1173.894611][ T6504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1173.930413][ T6504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1174.010022][ T6504] bond0 (unregistering): Released all slaves
[ 1174.195465][ T6504] team0 (unregistering): Port device team_slave_1 removed
[ 1174.230284][ T6504] team0 (unregistering): Port device team_slave_0 removed
[ 1174.260889][ T6504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1174.293726][ T6504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1174.381936][ T6504] bond0 (unregistering): Released all slaves