last executing test programs:

13m50.073814918s ago: executing program 2 (id=1062):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc)

13m48.215350916s ago: executing program 2 (id=1066):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0xe, 0x2, 0x2, "c5b93f3e76e05d46ef86c5b6360db3e4bdf4298b0e10f8279049fcfd8ff3a71a", 0x38303553})

13m35.449157311s ago: executing program 2 (id=1091):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e25, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'ip_vti0\x00', 0x0})
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

13m34.235487578s ago: executing program 2 (id=1099):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x26, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x2c41, 0xe4)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x40000001, 0xa)

13m28.70544307s ago: executing program 2 (id=1113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x141a82, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r5, r4, 0x0, 0x4)

13m26.185434489s ago: executing program 2 (id=1117):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)

13m10.410875246s ago: executing program 32 (id=1117):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)

11m57.354827244s ago: executing program 1 (id=1282):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, 0x0)
unshare(0x28000600)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

11m56.270864936s ago: executing program 1 (id=1287):
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000200000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)

11m51.575484698s ago: executing program 1 (id=1299):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})

11m49.687195687s ago: executing program 1 (id=1312):
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x303000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
r2 = socket(0x2a, 0x2, 0x9)
ioctl$sock_inet6_SIOCADDRT(r2, 0x8915, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

11m46.419014432s ago: executing program 1 (id=1308):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004)
ioctl$TIOCPKT(r0, 0x5420, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)

11m39.853058402s ago: executing program 1 (id=1319):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
wait4(r0, &(0x7f0000000080), 0x80000000, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)

11m23.63969161s ago: executing program 33 (id=1319):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
wait4(r0, &(0x7f0000000080), 0x80000000, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)

7m16.023535011s ago: executing program 5 (id=1851):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x3e, &(0x7f00000000c0)=0x8, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)

7m9.559828807s ago: executing program 5 (id=1868):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

7m7.516916104s ago: executing program 5 (id=1870):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)

7m4.827880551s ago: executing program 5 (id=1878):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x3, 0x9, 0x600, 0x8}, 0x20)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000500)=ANY=[], 0xfc, 0x6071, &(0x7f0000001f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x17f)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
write(0xffffffffffffffff, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
shutdown(r3, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)

7m2.395724246s ago: executing program 5 (id=1882):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$inet6(0xa, 0x3, 0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000140)=0x8)

6m58.892392312s ago: executing program 5 (id=1892):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}})
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}})
r2 = semget$private(0x0, 0x2, 0x10)
semctl$SETVAL(r2, 0x1, 0x8, 0x0)
semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000200))
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096)
ptrace$setregset(0x4205, r3, 0x202, &(0x7f00000001c0)={0x0})
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})

6m57.66159008s ago: executing program 34 (id=1892):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}})
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}})
r2 = semget$private(0x0, 0x2, 0x10)
semctl$SETVAL(r2, 0x1, 0x8, 0x0)
semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000200))
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000013c0)=""/4096)
ptrace$setregset(0x4205, r3, 0x202, &(0x7f00000001c0)={0x0})
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})

20.91938616s ago: executing program 6 (id=2740):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140))
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
socket(0x1e, 0x4, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

19.744564576s ago: executing program 6 (id=2744):
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9)
mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x1c9082, 0x100)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x28)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000500)=""/102400, 0x19000)
write(r0, &(0x7f0000000200)='\\x01020304 2', 0xc)

17.792723378s ago: executing program 6 (id=2746):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x83, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000400)=0x19)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15.178888152s ago: executing program 0 (id=2751):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x10, 0x100000000002, 0x4)
listen(r0, 0xc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)

13.665567093s ago: executing program 0 (id=2752):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}], 0x1, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

13.665225283s ago: executing program 6 (id=2753):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x200, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0)
getdents64(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)

13.665018093s ago: executing program 7 (id=2754):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
fcntl$setstatus(r6, 0x4, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x4, 0x8112)

11.797198112s ago: executing program 7 (id=2756):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000340)={0x4, {"1b1b0f8ff5d2ab6993de03e5086dc4ac", "8b538a29ac7c640a211e00ffffdcf2d1", "acf4ab06fce0d088f9d45d1ef300"}, 0x51a})
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4})
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x5a}, 0x0, 0x0, &(0x7f00000004c0)=""/90)
listen(r0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

10.613640748s ago: executing program 0 (id=2757):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/n/attr_allow_any_host\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='1\n', 0x2)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f00000003c0)='rdma\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='127.0.0.1\n', 0xa)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0)
write(r3, &(0x7f00000004c0)='4420\n', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
close(r4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/n\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/n\x00')

9.983242167s ago: executing program 0 (id=2759):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080))
socket$tipc(0x1e, 0x5, 0x0)

9.662856753s ago: executing program 3 (id=2762):
syz_open_dev$media(0x0, 0x66, 0x180502)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0)
r3 = syz_ublk_setup_io_uring(0x10020, 0x0, 0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000004c0)=<r5=>0x0)
r6 = syz_ublk_add_dev(r3, 0x0, r4, r5, 0x0, 0x0)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0xe7, "94c492eb2665203d36bec70800890100000000e1100a0000005900", <r8=>0xffffffffffffffff})
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9])

9.317847439s ago: executing program 6 (id=2763):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x2070bd2c, 0x200, {0x0, 0x0, 0x12, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x100004, 0x19, 0x13, 0x8, 0x0, 0xfffffffe, {0x4, 0x521, 0x9, 0x2000009, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2400c040)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94)

8.775100125s ago: executing program 4 (id=2764):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, &(0x7f0000000000))

8.758008065s ago: executing program 7 (id=2765):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$inet(0xa, 0x801, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x921, 0x0, 0xfffffffc}, 0x18}}, 0x94)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)

8.654974541s ago: executing program 3 (id=2766):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x10, 0x100000000002, 0x4)
listen(r0, 0xc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)

6.76566377s ago: executing program 6 (id=2767):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = inotify_init()
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
write$binfmt_misc(r3, 0x0, 0x0)
openat$cgroup_int(r3, 0x0, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00011000000009"], 0x0)
r4 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.76495242s ago: executing program 4 (id=2768):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000001100))
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}})

5.659808572s ago: executing program 4 (id=2769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, 0x0, &(0x7f0000000380))

4.676717229s ago: executing program 4 (id=2770):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}], 0x1, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

4.675919459s ago: executing program 7 (id=2780):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, 0x0, &(0x7f0000000380))

4.675607119s ago: executing program 3 (id=2771):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

3.319772523s ago: executing program 7 (id=2772):
syz_open_dev$dvb_demux(0x0, 0x0, 0x40440)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000003c0))
close(0x3)

3.319450473s ago: executing program 3 (id=2773):
r0 = syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x2, 0x9], 0x2)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0}, 0xfe}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000180)=[0x6, 0x8001], 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

2.626060546s ago: executing program 4 (id=2774):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.250301451s ago: executing program 7 (id=2775):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket$inet6(0xa, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

427.64823ms ago: executing program 3 (id=2776):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000000030001c0000000a0004007770616e33000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000)

385.636082ms ago: executing program 0 (id=2777):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0)
listen(0xffffffffffffffff, 0xfff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2140)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000888}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0xf00, 0x0)
fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r3, 0x5, 0x4800003e, r4, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58)
read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020)

345.025804ms ago: executing program 4 (id=2778):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x8004)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

266.45µs ago: executing program 0 (id=2779):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r0 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = semget$private(0x0, 0x7, 0x180)
semop(r4, &(0x7f0000000100), 0x0)
semctl$SETVAL(r4, 0x0, 0x10, 0x0)
eventfd2(0x2, 0x801)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 3 (id=2781):
add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000000000000800000", @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x26, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
write(r2, &(0x7f0000000280)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x102, @tick=0x7, 0x4, {0x7, 0x6}, 0x2, 0x1, 0x7})
syz_open_dev$loop(&(0x7f0000000140), 0x440, 0x46080)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)

kernel console output (not intermixed with test programs):

  323.705507][ T4289] EXT4-fs (loop0): unmounting filesystem.
[  326.229917][ T7071] netlink: 'syz.3.753': attribute type 21 has an invalid length.
[  326.634676][ T7076] loop0: detected capacity change from 0 to 4096
[  326.636271][ T7068] Cannot find set identified by id 0 to match
[  327.900404][ T7089] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.563338][ T7115] netem: change failed
[  330.768565][ T7126] Bluetooth: MGMT ver 1.22
[  332.187643][ T7134] loop0: detected capacity change from 0 to 256
[  332.773401][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'.
[  332.786461][ T7134] netlink: 104 bytes leftover after parsing attributes in process `syz.0.770'.
[  332.988620][ T7137] netlink: 104 bytes leftover after parsing attributes in process `syz.0.770'.
[  334.143720][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  334.168012][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  334.209157][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  334.386171][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  334.453568][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  334.530210][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  334.596585][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  339.481633][ T7207] xt_hashlimit: overflow, try lower: 1125899906842624/134217732
[  339.525937][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'.
[  340.760716][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.800'.
[  341.961492][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  341.974192][ T7238] bridge2: port 1(erspan0) entered blocking state
[  341.982651][ T7238] bridge2: port 1(erspan0) entered disabled state
[  341.991039][ T7238] device erspan0 entered promiscuous mode
[  341.998977][ T7238] bridge2: port 1(erspan0) entered blocking state
[  342.005507][ T7238] bridge2: port 1(erspan0) entered forwarding state
[  343.152092][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready
[  343.218747][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  343.246764][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  343.303098][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  343.329083][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  343.352589][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  343.373442][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  343.400225][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  343.436354][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  343.444849][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  343.452186][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  343.459577][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  343.467087][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  343.474595][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  343.482063][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  343.492922][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  343.500345][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  343.509299][ T7269] device bridge_slave_0 left promiscuous mode
[  343.515674][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.535901][ T7269] device bridge_slave_1 left promiscuous mode
[  343.542103][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.550703][ T7269] device veth0_to_bond left promiscuous mode
[  343.556906][ T7269] bridge1: port 2(veth0_to_bond) entered disabled state
[  343.566431][ T7269] bond0: (slave bond_slave_0): Releasing backup interface
[  343.584258][ T7269] bond0: (slave bond_slave_1): Releasing backup interface
[  343.619009][ T7269] team0: Port device team_slave_0 removed
[  343.648242][ T7269] team0: Port device team_slave_1 removed
[  343.654669][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.662081][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.695514][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.703275][ T7269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.721252][ T7269] bond1: (slave geneve2): Releasing active interface
[  343.739551][ T7269] device veth3 left promiscuous mode
[  343.745487][ T7269] bridge1: port 1(veth3) entered disabled state
[  343.759360][ T7269] device veth5 left promiscuous mode
[  343.764906][ T7269] bridge1: port 3(veth5) entered disabled state
[  344.351925][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[  347.471506][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'.
[  352.549965][ T7373] device syzkaller0 left promiscuous mode
[  355.050822][ T7402] netlink: 'syz.3.840': attribute type 10 has an invalid length.
[  355.091460][ T7402] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  355.107562][ T7403] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  355.153742][ T7403] device bond4 entered promiscuous mode
[  355.159785][ T7403] 8021q: adding VLAN 0 to HW filter on device bond4
[  355.177087][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'.
[  355.217080][ T7402] bond0: (slave bridge0): Releasing backup interface
[  355.275550][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'.
[  355.313950][ T7412] bond4: (slave bridge1): making interface the new active one
[  355.321595][ T7412] device bridge1 entered promiscuous mode
[  355.336247][ T7412] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  355.381713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  360.198863][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'.
[  360.271613][ T7524] bridge1: port 1(erspan0) entered blocking state
[  360.279209][ T7524] bridge1: port 1(erspan0) entered disabled state
[  361.463191][ T7524] device erspan0 entered promiscuous mode
[  364.259943][ T7565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.298657][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.419868][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'.
[  365.752554][ T4383] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  365.946433][ T4383] usb 1-1: unable to get BOS descriptor or descriptor too short
[  365.960779][ T4383] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  365.973523][ T4383] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  365.986484][ T4383] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[  365.996934][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.005597][ T4383] usb 1-1: Product: syz
[  366.010432][ T4383] usb 1-1: Manufacturer: syz
[  366.016380][ T4383] usb 1-1: SerialNumber: syz
[  366.270419][ T4383] usb 1-1: cannot find UAC_HEADER
[  366.309593][ T4383] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  366.335717][ T4383] usb 1-1: USB disconnect, device number 7
[  368.294683][ T7023] udevd[7023]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  368.922825][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'.
[  369.554820][ T7638] fuse: Bad value for 'fd'
[  369.748365][ T7645] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  372.557088][ T7685] netlink: 276 bytes leftover after parsing attributes in process `syz.0.902'.
[  373.000097][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'.
[  373.146835][ T7696] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  377.657396][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  377.665869][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  377.673331][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  377.680597][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  377.688287][ T7741] device erspan0 left promiscuous mode
[  377.693951][ T7741] bridge2: port 1(erspan0) entered disabled state
[  377.878479][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  377.886186][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  377.893922][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  377.904957][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  377.912402][ T7741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  377.921457][ T7741] device bridge_slave_0 left promiscuous mode
[  377.927987][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.941096][ T7741] device bridge_slave_1 left promiscuous mode
[  377.947988][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.961245][ T7741] device veth0_to_bond left promiscuous mode
[  377.967530][ T7741] bridge1: port 1(veth0_to_bond) entered disabled state
[  377.977762][ T7741] bond0: (slave bond_slave_0): Releasing backup interface
[  377.985974][ T7741] device bond_slave_0 left promiscuous mode
[  378.002197][ T7741] bond0: (slave bond_slave_1): Releasing backup interface
[  378.044817][ T7741] device bond_slave_1 left promiscuous mode
[  378.070713][ T7741] team0: Port device team_slave_0 removed
[  378.115079][ T7741] team0: Port device team_slave_1 removed
[  378.121429][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.129070][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.170240][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.177806][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.192444][ T7741] device macvlan2 left promiscuous mode
[  378.198338][ T7741] bridge0: port 3(macvlan2) entered disabled state
[  378.211406][ T7741] bond1: (slave vlan2): Releasing active interface
[  378.228088][ T7741] bond2: (slave veth3): Releasing backup interface
[  378.266567][ T7741] bond4: (slave veth5): Releasing active interface
[  378.300103][ T7741] bond6: (slave veth7): Releasing active interface
[  378.306789][ T7741] bond6: (slave veth7): the permanent HWaddr of slave - 2e:99:3a:01:0b:f6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  378.443171][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.449592][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.481389][ T7741] bond6: (slave veth9): Releasing active interface
[  378.570781][ T7751] wg1 speed is unknown, defaulting to 1000
[  378.580354][ T7751] wg1 speed is unknown, defaulting to 1000
[  378.589105][ T7751] wg1 speed is unknown, defaulting to 1000
[  378.690698][ T7751] infiniband syz2: set active
[  378.695895][ T7751] infiniband syz2: added wg1
[  378.919761][ T7751] RDS/IB: syz2: added
[  378.926670][ T7751] smc: adding ib device syz2 with port count 1
[  378.933822][ T7751] smc:    ib device syz2 port 1 has pnetid 
[  379.282952][ T4679] wg1 speed is unknown, defaulting to 1000
[  379.291759][ T7751] wg1 speed is unknown, defaulting to 1000
[  379.488918][ T7756] device syz_tun left promiscuous mode
[  379.519941][ T4383] wg1 speed is unknown, defaulting to 1000
[  379.538743][ T7751] wg1 speed is unknown, defaulting to 1000
[  379.611001][ T7751] wg1 speed is unknown, defaulting to 1000
[  379.682046][ T7751] wg1 speed is unknown, defaulting to 1000
[  379.749962][ T7751] wg1 speed is unknown, defaulting to 1000
[  384.574671][   T26] audit: type=1326 audit(1789496092.658:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  384.672826][   T26] audit: type=1326 audit(1789496092.688:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  384.752839][   T26] audit: type=1326 audit(1789496092.688:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  384.825672][   T26] audit: type=1326 audit(1789496092.688:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  384.890635][   T26] audit: type=1326 audit(1789496092.688:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  384.966443][   T26] audit: type=1326 audit(1789496092.688:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  385.064668][   T26] audit: type=1326 audit(1789496092.688:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  385.146250][   T26] audit: type=1326 audit(1789496092.688:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  385.228344][   T26] audit: type=1326 audit(1789496092.688:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  385.293024][   T26] audit: type=1326 audit(1789496092.688:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.3.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x7ffc0000
[  387.338421][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  387.349904][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  387.359833][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  387.373545][ T7833] bond1: (slave veth0_to_bond): Releasing active interface
[  387.656235][ T7842] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  387.665143][ T7842] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  387.673991][ T7842] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  387.682812][ T7842] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  388.985195][ T7842] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  390.282780][ T4328] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  390.472885][ T4328] usb 1-1: Using ep0 maxpacket: 8
[  390.480669][ T4328] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  390.498293][ T4328] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  390.516335][ T4328] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  390.527614][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.539788][ T4328] usb 1-1: Product: syz
[  390.546799][ T4328] usb 1-1: Manufacturer: syz
[  390.552515][ T4328] usb 1-1: SerialNumber: syz
[  392.025510][ T4328] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  392.133400][ T4328] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  392.144885][ T4328] usb 1-1: USB disconnect, device number 8
[  392.198837][ T7865] udevd[7865]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  393.208141][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'.
[  393.286405][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'.
[  395.500239][ T7927] IPVS: Error connecting to the multicast addr
[  402.515771][ T7979] sctp: [Deprecated]: syz.3.983 (pid 7979) Use of struct sctp_assoc_value in delayed_ack socket option.
[  402.515771][ T7979] Use struct sctp_sack_info instead
[  403.331746][ T7984] netlink: 'syz.3.985': attribute type 1 has an invalid length.
[  403.511864][ T7990] netlink: 'syz.2.987': attribute type 12 has an invalid length.
[  404.353961][ T7988] xt_hashlimit: size too large, truncated to 1048576
[  404.360875][ T7988] xt_hashlimit: max too large, truncated to 1048576
[  405.179963][ T8015] ftl_cs: FTL header not found.
[  405.248056][ T8015] block2mtd: mtd1: [/dev/ram0] erase_size = 128KiB [131072]
[  408.651439][ T8065] netlink: 'syz.4.1001': attribute type 1 has an invalid length.
[  409.228844][ T8068] bond7: (slave veth15): Enslaving as an active interface with a down link
[  409.350038][ T8070] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  409.869203][ T8082] device bridge_slave_0 entered promiscuous mode
[  410.046983][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  410.208342][ T8082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  410.407439][ T8080] netlink: 'syz.3.1004': attribute type 9 has an invalid length.
[  411.390371][ T8093] device syzkaller0 entered promiscuous mode
[  412.139572][ T8098] device syzkaller0 left promiscuous mode
[  414.267957][ T8127] jffs2: notice: (8127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  416.214433][ T8153] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1024'.
[  416.999920][   T26] kauditd_printk_skb: 66 callbacks suppressed
[  417.000005][   T26] audit: type=1326 audit(1789496125.078:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.3.1025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3b579e159 code=0x0
[  418.624066][ T8164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  418.633343][ T8164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  418.640748][ T8164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  418.649815][ T8164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  422.463837][ T8225] overlayfs: conflicting lowerdir path
[  424.024862][ T8226] syz.0.1044 (8226) used greatest stack depth: 19184 bytes left
[  428.179987][ T8274] null_blk: disk nullb1 created
[  428.369244][ T8277] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) !
[  428.472863][ T8277] device syzkaller0 entered promiscuous mode
[  428.485777][ T8277] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  434.623516][ T8326] device syzkaller0 left promiscuous mode
[  435.198185][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1073'.
[  435.254936][ T8330] binder: 8328:8330 ioctl c0306201 200000000080 returned -14
[  440.413138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.419741][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.718899][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  440.728526][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:3 Not tainted syzkaller #0
[  440.736114][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  440.746211][ T4286] Workqueue: hci4 hci_rx_work
[  440.751178][ T4286] Call Trace:
[  440.754543][ T4286]  <TASK>
[  440.757586][ T4286]  dump_stack_lvl+0x188/0x24e
[  440.762406][ T4286]  ? show_regs_print_info+0x12/0x12
[  440.767699][ T4286]  ? load_image+0x410/0x410
[  440.772290][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[  440.777515][ T4286]  ? __lock_acquire+0x7c40/0x7c40
[  440.782635][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[  440.787367][ T4286]  ? do_raw_spin_unlock+0x11d/0x230
[  440.792607][ T4286]  kobject_add_internal+0x617/0xca0
[  440.797886][ T4286]  kobject_add+0x160/0x230
[  440.802347][ T4286]  ? kobject_init+0x1c0/0x1c0
[  440.807073][ T4286]  ? __raw_spin_lock_init+0x41/0x100
[  440.812399][ T4286]  ? klist_children_get+0x50/0x50
[  440.817517][ T4286]  ? get_device_parent+0x121/0x3e0
[  440.822745][ T4286]  device_add+0x470/0x1050
[  440.827226][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[  440.832293][ T4286]  le_conn_complete_evt+0xf93/0x15c0
[  440.837656][ T4286]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  440.843960][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  440.849741][ T4286]  ? mutex_unlock+0x10/0x10
[  440.854311][ T4286]  ? skb_pull_data+0xec/0x1f0
[  440.859129][ T4286]  hci_le_enh_conn_complete_evt+0x185/0x460
[  440.865071][ T4286]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  440.871549][ T4286]  ? hci_remote_host_features_evt+0x230/0x230
[  440.877661][ T4286]  hci_event_packet+0x7b3/0x1290
[  440.882767][ T4286]  ? lock_chain_count+0x20/0x20
[  440.887703][ T4286]  ? bis_list+0x280/0x280
[  440.892068][ T4286]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  440.898087][ T4286]  ? kcov_remote_start+0x50f/0x810
[  440.903282][ T4286]  ? lockdep_hardirqs_on+0x94/0x140
[  440.908529][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[  440.913775][ T4286]  hci_rx_work+0x3eb/0xd40
[  440.918266][ T4286]  ? _raw_spin_unlock+0x40/0x40
[  440.923162][ T4286]  ? process_one_work+0x7b4/0x1160
[  440.928464][ T4286]  process_one_work+0x8ab/0x1160
[  440.933465][ T4286]  ? worker_detach_from_pool+0x240/0x240
[  440.939153][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[  440.944226][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[  440.949868][ T4286]  ? wq_worker_running+0x97/0x190
[  440.954940][ T4286]  worker_thread+0xaf5/0x12a0
[  440.959683][ T4286]  kthread+0x29d/0x330
[  440.963855][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[  440.968928][ T4286]  ? kthread_blkcg+0xd0/0xd0
[  440.973569][ T4286]  ret_from_fork+0x1f/0x30
[  440.978117][ T4286]  </TASK>
[  441.004251][ T4286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  441.017834][ T4286] Bluetooth: hci4: failed to register connection device
[  442.299629][ T8376] fuse: Bad value for 'fd'
[  443.329118][ T8389] jffs2: notice: (8389) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  444.290811][ T8404] futex_wake_op: syz.4.1095 tries to shift op by 144; fix this program
[  449.510220][   T26] audit: type=1326 audit(1789496157.588:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.563164][   T26] audit: type=1326 audit(1789496157.588:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.637309][   T26] audit: type=1326 audit(1789496157.588:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.727394][   T26] audit: type=1326 audit(1789496157.588:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.762723][   T26] audit: type=1326 audit(1789496157.618:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.792334][   T26] audit: type=1326 audit(1789496157.618:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.836765][   T26] audit: type=1326 audit(1789496157.618:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.899272][   T26] audit: type=1326 audit(1789496157.618:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  449.939104][ T8461] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  449.982268][   T26] audit: type=1326 audit(1789496157.618:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  450.025002][ T8453] device erspan0 left promiscuous mode
[  450.030667][ T8453] bridge1: port 1(erspan0) entered disabled state
[  450.085334][ T8453] device bridge_slave_0 left promiscuous mode
[  450.091595][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.193532][   T26] audit: type=1326 audit(1789496157.618:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.0.1110" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f900d39e159 code=0x7ffc0000
[  451.551788][ T8453] device bridge_slave_1 left promiscuous mode
[  451.651628][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.594376][ T8453] bond0: (slave bond_slave_0): Releasing backup interface
[  454.787666][ T8453] bond0: (slave bond_slave_1): Releasing backup interface
[  455.125107][ T8453] team0: Port device team_slave_0 removed
[  456.440087][ T8453] team0: Port device team_slave_1 removed
[  456.557631][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.197351][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.707746][ T8504] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  457.714287][ T8453] device macvlan2 left promiscuous mode
[  458.057739][ T8453] bridge0: port 3(macvlan2) entered disabled state
[  459.155787][ T8453] bond0: (slave vxlan0): Releasing backup interface
[  459.336288][ T8453] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.345278][ T8453] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.354320][ T8453] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.363273][ T8453] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.519292][ T8454] team0: Port device xfrm0 added
[  459.657265][ T8515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  459.681821][ T8518] device syzkaller0 entered promiscuous mode
[  459.703580][ T8523] syzkaller0: mtu less than device minimum
[  466.711409][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'.
[  470.662785][ T8594] nftables ruleset with unbound set
[  471.499255][ T4295] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  471.510928][ T4295] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  471.563019][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  471.571079][ T4295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  471.578886][ T4295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  471.586292][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  471.731743][ T8596] wg1 speed is unknown, defaulting to 1000
[  473.743049][ T4288] Bluetooth: hci5: command 0x0409 tx timeout
[  474.272136][ T8622] loop0: detected capacity change from 0 to 64
[  475.159231][ T8596] chnl_net:caif_netlink_parms(): no params data found
[  475.400285][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.411019][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.422100][ T8596] device bridge_slave_0 entered promiscuous mode
[  475.436193][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.447777][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.539573][ T8596] device bridge_slave_1 entered promiscuous mode
[  475.842951][ T4288] Bluetooth: hci5: command 0x041b tx timeout
[  476.174448][ T8596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.315685][ T8596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.340796][ T8596] team0: Port device team_slave_0 added
[  477.356421][ T8596] team0: Port device team_slave_1 added
[  477.416570][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.431110][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.500802][ T8596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.862881][ T4286] Bluetooth: hci5: command 0x040f tx timeout
[  478.501550][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.508702][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.552974][ T8596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.597249][ T8596] device hsr_slave_0 entered promiscuous mode
[  478.607157][ T8596] device hsr_slave_1 entered promiscuous mode
[  478.614808][ T8596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  478.622407][ T8596] Cannot create hsr debugfs directory
[  478.873027][ T4678] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  478.996210][ T4274] bridge0: port 3(syz_tun) entered disabled state
[  479.102856][ T4678] usb 1-1: Using ep0 maxpacket: 32
[  479.111499][ T4678] usb 1-1: config 0 has no interfaces?
[  479.137941][ T4678] usb 1-1: config 0 has no interfaces?
[  479.165669][ T4678] usb 1-1: config 0 has no interfaces?
[  479.177752][ T4678] usb 1-1: config 0 has no interfaces?
[  479.195358][ T4678] usb 1-1: config 0 has no interfaces?
[  479.212424][ T4678] usb 1-1: config 0 has no interfaces?
[  479.234251][ T4678] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  479.251672][ T4678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.264801][ T4678] usb 1-1: Product: syz
[  479.269015][ T4678] usb 1-1: Manufacturer: syz
[  479.280206][ T4678] usb 1-1: SerialNumber: syz
[  479.289563][ T4678] usb 1-1: config 0 descriptor??
[  479.400058][ T8596] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  479.417227][ T8596] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  479.439507][ T8596] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  479.667805][ T8596] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  479.943654][ T4286] Bluetooth: hci5: command 0x0419 tx timeout
[  481.097360][ T4328] usb 1-1: USB disconnect, device number 9
[  481.222022][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0
[  481.305428][ T8596] 8021q: adding VLAN 0 to HW filter on device team0
[  481.314641][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  481.333705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  481.393265][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  481.408429][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  481.435829][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.443008][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.482868][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  481.551271][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  481.581810][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  481.631288][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.638492][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.729746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  481.744329][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  481.811102][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  481.826226][ T8678] loop0: detected capacity change from 0 to 2048
[  481.845926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  482.818958][ T8678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  482.833427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  482.889347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  483.015290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  483.054328][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  483.092766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  483.143232][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  483.163776][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  483.261254][ T8691] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  483.277746][ T8691] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  483.290586][ T8691] EXT4-fs (loop0): This should not happen!! Data will be lost
[  483.290586][ T8691] 
[  483.300836][ T8691] EXT4-fs (loop0): Total free blocks count 0
[  483.307118][ T8691] EXT4-fs (loop0): Free/Dirty block details
[  483.313247][ T8691] EXT4-fs (loop0): free_blocks=2415919104
[  483.319170][ T8691] EXT4-fs (loop0): dirty_blocks=48
[  483.324433][ T8691] EXT4-fs (loop0): Block reservation details
[  483.330556][ T8691] EXT4-fs (loop0): i_reserved_data_blocks=3
[  483.734495][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  483.773486][ T4289] EXT4-fs (loop0): unmounting filesystem.
[  484.986803][   T26] kauditd_printk_skb: 50 callbacks suppressed
[  484.986819][   T26] audit: type=1800 audit(1789496193.068:438): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1169" name="bus" dev="ramfs" ino=46532 res=0 errno=0
[  486.634037][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  486.643511][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  486.653760][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  486.664887][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  486.674603][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  486.683119][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  486.692008][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  487.127440][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.160761][ T7474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  487.178763][ T7474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  487.246695][ T8722] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  487.391632][ T8726] xt_hashlimit: size too large, truncated to 1048576
[  487.398369][ T8726] xt_hashlimit: max too large, truncated to 1048576
[  493.269012][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.736528][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.790513][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.078174][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.094283][ T7461] bond4 (unregistering): (slave bridge1): Releasing backup interface
[  495.102570][ T7461] device bridge1 left promiscuous mode
[  497.194811][ T7461] bond4 (unregistering): Released all slaves
[  497.447408][ T7461] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  497.457507][ T7461] bond3 (unregistering): Released all slaves
[  497.472486][ T7461] bond2 (unregistering): Released all slaves
[  497.633916][ T7461] bond1 (unregistering): (slave bond0): Releasing active interface
[  497.644076][ T7461] bond1 (unregistering): Released all slaves
[  498.133055][ T7461] team0 (unregistering): Port device team_slave_1 removed
[  498.174861][ T7461] team0 (unregistering): Port device team_slave_0 removed
[  498.221177][ T7461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.264467][ T7461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.565449][ T7461] bond0 (unregistering): Released all slaves
[  498.743796][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  499.003346][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  499.021364][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  499.093469][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  499.107544][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  499.139477][ T8596] device veth0_vlan entered promiscuous mode
[  499.155027][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  499.173409][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  499.189666][ T8596] device veth1_vlan entered promiscuous mode
[  499.318751][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  499.353632][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  499.374335][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  499.416194][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  500.121723][ T8596] device veth0_macvtap entered promiscuous mode
[  500.144682][ T8596] device veth1_macvtap entered promiscuous mode
[  500.163349][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.170702][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  500.215481][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  500.245505][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.256743][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  500.295748][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  500.448835][ T8596] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.402682][ T8596] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.411447][ T8596] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.453088][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.459417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.506891][ T8596] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.075525][ T8881] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  503.114567][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.122450][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.173410][ T8883] kvm: pic: non byte read
[  503.194771][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  503.208742][ T8883] kvm: pic: level sensitive irq not supported
[  503.210208][ T8883] kvm: pic: non byte read
[  503.262344][ T7451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.271668][ T7451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.281004][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  503.289421][ T8883] kvm: pic: level sensitive irq not supported
[  503.289484][ T8883] kvm: pic: non byte read
[  503.348553][ T8883] kvm: pic: level sensitive irq not supported
[  503.348631][ T8883] kvm: pic: non byte read
[  503.399064][ T8883] kvm: pic: level sensitive irq not supported
[  503.399444][ T8883] kvm: pic: non byte read
[  506.711918][ T8914] futex_wake_op: syz.0.1221 tries to shift op by 144; fix this program
[  507.334680][ T8919] loop5: detected capacity change from 0 to 8192
[  510.836157][ T8961] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            
[  519.269695][ T9050] ip_tables: iptables: counters copy to user failed while replacing table
[  520.221860][ T9060] Cannot find del_set index 4 as target
[  520.249922][ T9060] loop0: detected capacity change from 0 to 512
[  520.267217][ T9060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  520.350558][ T9060] EXT4-fs (loop0): 1 truncate cleaned up
[  520.356423][ T9060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  520.945196][ T4289] EXT4-fs (loop0): unmounting filesystem.
[  523.441282][ T9095] loop0: detected capacity change from 0 to 512
[  525.139611][ T9095] syz.0.1252 (9095): drop_caches: 3
[  526.853022][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'.
[  533.118743][ T9156] input: syz1 as /devices/virtual/input/input8
[  533.130653][ T9156] input: failed to attach handler leds to device input8, error: -6
[  540.591590][ T9228] jffs2: notice: (9228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  544.535679][ T9275] device bridge_slave_0 entered promiscuous mode
[  544.632978][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  544.641455][ T9275] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  544.731867][ T9277] netlink: 'syz.0.1288': attribute type 9 has an invalid length.
[  549.192837][ T4329] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  549.392782][ T4329] usb 6-1: Using ep0 maxpacket: 16
[  549.402575][ T4329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[  549.467219][ T4329] usb 6-1: New USB device found, idVendor=05ac, idProduct=021e, bcdDevice= 0.00
[  549.507056][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.581472][ T4329] usb 6-1: config 0 descriptor??
[  549.891867][ T9336] loop0: detected capacity change from 0 to 128
[  550.016044][ T4329] usbhid 6-1:0.0: can't add hid device: -71
[  550.022096][ T4329] usbhid: probe of 6-1:0.0 failed with error -71
[  550.149733][ T4329] usb 6-1: USB disconnect, device number 2
[  551.020749][ T9338] udevd[9338]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system
[  551.091214][ T9338] udevd[9338]: symlink '../../loop0' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:0' failed: Read-only file system
[  551.127961][ T9348] netlink: 'syz.0.1303': attribute type 1 has an invalid length.
[  551.297545][ T9152] udevd[9152]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system
[  551.340402][ T9152] udevd[9152]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system
[  552.331112][ T9152] udevd[9152]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system
[  553.118695][ T9353] bond2: (slave veth7): Enslaving as an active interface with a down link
[  553.195118][ T9357] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  553.228309][ T9152] udevd[9152]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system
[  553.366134][ T9152] udevd[9152]: symlink '../../loop0' '/dev/disk/by-diskseq/162.tmp-b7:0' failed: Read-only file system
[  553.985100][ T9376] overlayfs: conflicting lowerdir path
[  562.136247][ T9440] device syzkaller0 left promiscuous mode
[  562.983416][ T9443] overlayfs: failed to clone lowerpath
[  563.121706][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.129223][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  566.125479][ T9476] loop0: detected capacity change from 0 to 128
[  566.956007][ T9476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  566.987517][ T9476] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  568.543381][ T9493] wg1 speed is unknown, defaulting to 1000
[  568.834287][ T4289] EXT4-fs (loop0): unmounting filesystem.
[  573.392882][ T9532] fuse: Bad value for 'group_id'
[  574.136425][ T9541] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9542] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9541]
[  575.142699][ T4328] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  575.382687][ T4328] usb 6-1: Using ep0 maxpacket: 8
[  575.389551][ T4328] usb 6-1: config 2 has an invalid interface number: 241 but max is 0
[  575.571360][ T4328] usb 6-1: config 2 has no interface number 0
[  575.617366][ T4328] usb 6-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  575.758743][ T4328] usb 6-1: config 2 interface 241 has no altsetting 0
[  576.365314][ T4328] usb 6-1: string descriptor 0 read error: -71
[  576.371747][ T4328] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  577.420003][ T4328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.431868][ T4328] usb 6-1: can't set config #2, error -71
[  577.439780][ T4328] usb 6-1: USB disconnect, device number 3
[  578.578703][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  578.588967][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  578.804049][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  578.817828][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  578.829702][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  578.874009][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  579.653713][ T9562] wg1 speed is unknown, defaulting to 1000
[  581.303052][ T4295] Bluetooth: hci0: command 0x0409 tx timeout
[  583.424114][ T4295] Bluetooth: hci0: command 0x041b tx timeout
[  584.639314][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  585.264727][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  585.287118][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  585.296548][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  585.305426][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  585.313795][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  585.322430][ T9627] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  585.463461][ T4286] Bluetooth: hci0: command 0x040f tx timeout
[  587.398881][ T9562] chnl_net:caif_netlink_parms(): no params data found
[  587.602897][ T4286] Bluetooth: hci0: command 0x0419 tx timeout
[  588.152044][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.227505][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.268872][ T9562] device bridge_slave_0 entered promiscuous mode
[  588.293339][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.331050][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.540163][ T9562] device bridge_slave_1 entered promiscuous mode
[  588.964965][ T9657] virtio-fs: tag </dev/nullb0> not found
[  589.440885][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.548504][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.748877][ T9562] team0: Port device team_slave_0 added
[  589.774953][ T9562] team0: Port device team_slave_1 added
[  589.830138][ T9667] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  589.838799][ T9667] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  589.847156][ T9667] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  589.855409][ T9667] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  590.056679][ T9667] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  590.561970][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.607538][ T9673] loop5: detected capacity change from 0 to 2048
[  590.637339][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.666727][ T9673] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  590.682876][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.696958][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.704215][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.731742][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.966644][ T9562] device hsr_slave_0 entered promiscuous mode
[  591.004841][ T9562] device hsr_slave_1 entered promiscuous mode
[  591.270111][ T9562] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  592.266188][ T9562] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  592.525084][ T9562] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  592.576553][ T9562] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  595.543351][ T4286] Bluetooth: hci5: command 0x0406 tx timeout
[  596.024333][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.052514][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  596.063798][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  596.204426][ T9562] 8021q: adding VLAN 0 to HW filter on device team0
[  597.452759][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  597.493342][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  598.666542][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.673753][ T7461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.681909][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  598.695862][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  598.726726][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  598.748244][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.755449][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.834301][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  598.848890][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  598.882455][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'.
[  598.905424][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  598.958556][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  598.987737][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  599.062920][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  599.117334][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  599.158704][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  599.251889][ T9751] loop0: detected capacity change from 0 to 8
[  599.431719][ T9751] SQUASHFS error: zlib decompression failed, data probably corrupt
[  599.440206][ T9751] SQUASHFS error: Failed to read block 0x9b: -5
[  599.446607][ T9751] SQUASHFS error: Unable to read metadata cache entry [99]
[  599.453933][ T9751] SQUASHFS error: Unable to read inode 0x127
[  599.799642][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  599.858885][ T9562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  599.993813][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  600.119343][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  600.128756][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  600.767655][ T9759] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  604.686516][ T9815] loop0: detected capacity change from 0 to 8192
[  604.734292][ T9815] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  604.987697][ T7454] team0: Port device xfrm0 removed
[  605.084973][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  605.092547][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  605.356099][ T9562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.366397][ T9820] loop5: detected capacity change from 0 to 32768
[  605.373984][ T9820] XFS: noikeep mount option is deprecated.
[  605.642800][ T9820] XFS (loop5): Mounting V5 Filesystem
[  605.738977][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'.
[  606.593102][ T9820] XFS (loop5): Ending clean mount
[  606.611028][ T9820] XFS (loop5): Quotacheck needed: Please wait.
[  606.778187][ T9820] XFS (loop5): Quotacheck: Done.
[  607.988137][ T8596] XFS (loop5): Unmounting Filesystem
[  611.478604][ T7454] device hsr_slave_0 left promiscuous mode
[  611.592331][ T7454] device hsr_slave_1 left promiscuous mode
[  611.925652][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1424'.
[  615.454859][ T9950] loop0: detected capacity change from 0 to 512
[  616.753774][ T9950] EXT4-fs: Ignoring removed orlov option
[  616.759511][ T9950] ext4: Bad value for 'data'
[  621.287124][T10000] overlayfs: failed to clone lowerpath
[  624.190340][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.199233][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  626.715263][ T7454] bond0 (unregistering): Released all slaves
[  628.144117][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'.
[  628.832391][T10010] netlink: 'syz.4.1447': attribute type 1 has an invalid length.
[  628.950739][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  628.993739][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  629.162695][   T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  629.178209][   T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  629.225530][   T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  629.240588][   T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  630.184591][ T9562] device veth0_vlan entered promiscuous mode
[  630.310745][ T9562] device veth1_vlan entered promiscuous mode
[  630.792917][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  630.931315][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  631.218005][ T9562] device veth0_macvtap entered promiscuous mode
[  631.287421][ T9562] device veth1_macvtap entered promiscuous mode
[  631.361071][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  631.383603][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  631.458321][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  631.484154][T10072] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1457'.
[  631.519165][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.597470][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  631.665435][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  631.726881][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.855094][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  632.578169][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  632.595465][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  632.642087][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  632.682537][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  632.719575][ T9562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  632.749957][ T9562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  632.802916][ T9562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  632.832041][ T9562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.973583][T10101] overlayfs: failed to clone upperpath
[  634.460721][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.512208][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.561952][ T7451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  634.669806][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.685964][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.740887][   T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  635.967088][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'.
[  635.980202][T10156] device erspan1 entered promiscuous mode
[  636.741845][T10165] tipc: Started in network mode
[  636.747115][T10165] tipc: Node identity ac1414aa, cluster identity 4711
[  637.218054][T10169] ip_tables: iptables: counters copy to user failed while replacing table
[  637.287087][T10165] tipc: New replicast peer: 172.20.20.187
[  637.326903][T10165] tipc: Enabled bearer <udp:syz0>, priority 10
[  638.154127][T10191] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  638.390088][T10192] IPVS: stopping master sync thread 10191 ...
[  639.108512][ T4678] tipc: Node number set to 2886997162
[  639.632535][T10202] loop5: detected capacity change from 0 to 256
[  639.963967][T10202] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  639.990997][   T26] audit: type=1800 audit(1789496348.068:439): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1481" name="file1" dev="loop5" ino=1048615 res=0 errno=0
[  640.159619][T10212] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  640.297422][T10212] File: /52/file1/file1 PID: 10212 Comm: syz.5.1481
[  640.304440][ T4678] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  640.350220][T10212] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  640.403877][T10212] File: /52/file1/file1 PID: 10212 Comm: syz.5.1481
[  640.494289][ T4678] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  640.500517][T10219] wg1 speed is unknown, defaulting to 1000
[  640.512064][ T4678] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  640.545014][ T4678] usb 7-1: config 0 has no interface number 0
[  640.564576][ T4678] usb 7-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  640.607005][ T4678] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  640.626214][ T4678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.652322][ T4678] usb 7-1: Product: syz
[  640.678323][ T4678] usb 7-1: Manufacturer: syz
[  640.697424][ T4678] usb 7-1: SerialNumber: syz
[  640.720256][ T4678] usb 7-1: config 0 descriptor??
[  640.753065][ T4678] yurex 7-1:0.50: Could not find endpoints
[  641.291808][T10228] ip_tables: iptables: counters copy to user failed while replacing table
[  643.015030][   T27] usb 7-1: USB disconnect, device number 2
[  643.756157][T10242] loop6: detected capacity change from 0 to 1024
[  645.937150][T10251] device syzkaller0 entered promiscuous mode
[  647.515881][T10272] loop6: detected capacity change from 0 to 8
[  647.838233][T10272] SQUASHFS error: zlib decompression failed, data probably corrupt
[  647.846468][T10272] SQUASHFS error: Failed to read block 0x9b: -5
[  647.852859][T10272] SQUASHFS error: Unable to read metadata cache entry [99]
[  647.860086][T10272] SQUASHFS error: Unable to read inode 0x127
[  648.113537][T10276] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10276]
[  648.520139][T10278] loop5: detected capacity change from 0 to 512
[  648.670187][T10278] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  648.765650][T10278] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  649.580097][ T8596] EXT4-fs (loop5): unmounting filesystem.
[  649.858931][T10296] device syzkaller0 entered promiscuous mode
[  653.064285][T10326] ip_tables: iptables: counters copy to user failed while replacing table
[  654.005814][T10332] device syzkaller0 entered promiscuous mode
[  654.226001][T10332] tipc: Started in network mode
[  654.239118][T10332] tipc: Node identity f2417afd154c, cluster identity 4711
[  654.350555][T10332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.489604][T10331] tipc: Resetting bearer <eth:syzkaller0>
[  655.251015][T10331] tipc: Disabling bearer <eth:syzkaller0>
[  655.444599][T10354] xt_CT: You must specify a L4 protocol and not use inversions on it
[  657.749462][T10364] loop5: detected capacity change from 0 to 256
[  660.153454][T10394] ip_tables: iptables: counters copy to user failed while replacing table
[  660.830080][T10402] loop5: detected capacity change from 0 to 512
[  663.329060][   T26] audit: type=1326 audit(1789496371.408:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  663.567810][   T26] audit: type=1326 audit(1789496371.448:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  663.632830][ T8696] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  663.694323][   T26] audit: type=1326 audit(1789496371.448:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  665.034260][   T26] audit: type=1326 audit(1789496371.448:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  665.059568][   T26] audit: type=1326 audit(1789496371.448:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  665.152717][ T8696] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  665.172917][   T26] audit: type=1326 audit(1789496371.448:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe83a55e98e code=0x7ffc0000
[  665.214418][ T8696] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  665.242639][   T26] audit: type=1326 audit(1789496371.448:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe83a59ddeb code=0x7ffc0000
[  665.279381][ T8696] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  665.308911][ T8696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.332657][ T8696] usb 7-1: Product: syz
[  666.293451][ T8696] usb 7-1: Manufacturer: syz
[  666.298308][ T8696] usb 7-1: SerialNumber: syz
[  666.333486][   T26] audit: type=1326 audit(1789496371.448:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe83a59ddeb code=0x7ffc0000
[  666.426194][ T8696] usb 7-1: can't set config #1, error -71
[  666.459909][ T8696] usb 7-1: USB disconnect, device number 3
[  666.473236][   T26] audit: type=1326 audit(1789496371.568:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe83a59ddeb code=0x7ffc0000
[  666.554375][   T26] audit: type=1326 audit(1789496371.568:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.6.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe83a59ddeb code=0x7ffc0000
[  666.695762][T10440] loop0: detected capacity change from 0 to 4096
[  667.466202][T10440] ntfs3: loop0: failed to replay log file. Can't mount rw!
[  667.548035][T10018] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  676.569606][T10513] IPVS: set_ctl: invalid protocol: 137 172.30.0.5:20001
[  678.440965][T10539] loop5: detected capacity change from 0 to 1024
[  678.600712][ T4286] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  678.922622][ T4286] Bluetooth: hci3: Injecting HCI hardware error event
[  678.935265][ T4295] Bluetooth: hci3: hardware error 0x00
[  680.355408][T10553] jffs2: notice: (10553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  680.439959][T10554] wg1 speed is unknown, defaulting to 1000
[  680.858355][T10567] netlink: 'syz.0.1564': attribute type 1 has an invalid length.
[  681.183454][ T4295] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  681.595715][T10567] 8021q: adding VLAN 0 to HW filter on device bond3
[  681.743761][T10569] bond2: (slave veth0_to_bond): Releasing active interface
[  681.775299][T10573] device bridge2 entered promiscuous mode
[  685.257189][T10610] loop6: detected capacity change from 0 to 512
[  685.634850][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.641310][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.986727][T10631] sd 0:0:1:0: PR command failed: 1026
[  686.992341][T10631] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  687.000631][T10631] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  691.519391][T10673] ip_tables: iptables: counters copy to user failed while replacing table
[  693.764269][T10689] loop5: detected capacity change from 0 to 2048
[  693.862165][T10689] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  694.777106][T10695] ip_tables: iptables: counters copy to user failed while replacing table
[  695.132929][T10700] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  696.208977][T10688] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  696.237511][T10688] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  696.250105][T10688] EXT4-fs (loop5): This should not happen!! Data will be lost
[  696.250105][T10688] 
[  696.259827][T10688] EXT4-fs (loop5): Total free blocks count 0
[  696.343472][T10688] EXT4-fs (loop5): Free/Dirty block details
[  696.349537][T10688] EXT4-fs (loop5): free_blocks=4096
[  696.354824][T10688] EXT4-fs (loop5): dirty_blocks=64
[  696.359952][T10688] EXT4-fs (loop5): Block reservation details
[  696.366030][T10688] EXT4-fs (loop5): i_reserved_data_blocks=4
[  696.543755][   T69] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  696.936531][T10716] syz.0.1598 sent an empty control message without MSG_MORE.
[  697.893894][T10722] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.1600'.
[  698.841554][T10727] loop5: detected capacity change from 0 to 512
[  699.106874][T10736] overlayfs: missing 'lowerdir'
[  700.382225][T10745] loop6: detected capacity change from 0 to 2048
[  700.789336][T10745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  701.389549][T10727] EXT4-fs (loop5): Test dummy encryption mode enabled
[  702.385398][T10727] EXT4-fs: failed to create workqueue
[  702.390868][T10727] EXT4-fs (loop5): mount failed
[  702.495970][T10760] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  703.312757][ T4295] Bluetooth: hci0: command 0x0406 tx timeout
[  704.827558][T10802] jffs2: notice: (10802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  705.055632][T10811] ip_tables: iptables: counters copy to user failed while replacing table
[  706.286213][T10802] wg1 speed is unknown, defaulting to 1000
[  707.380468][T10835] loop6: detected capacity change from 0 to 1024
[  707.564346][T10835] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  708.233256][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  708.233645][   T26] audit: type=1800 audit(1789496416.058:466): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1625" name="file1" dev="loop6" ino=15 res=0 errno=0
[  708.555761][ T9562] EXT4-fs (loop6): unmounting filesystem.
[  721.314782][T10976] sctp: [Deprecated]: syz.0.1654 (pid 10976) Use of struct sctp_assoc_value in delayed_ack socket option.
[  721.314782][T10976] Use struct sctp_sack_info instead
[  724.083598][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  724.091447][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  724.098868][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  724.106217][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[  724.113368][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[  724.120492][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[  724.127622][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[  724.134742][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[  724.141875][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[  724.149072][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready
[  724.156870][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready
[  724.164274][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready
[  724.171956][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready
[  724.179380][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready
[  724.187522][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready
[  724.194899][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready
[  724.202582][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready
[  724.211344][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready
[  724.219152][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready
[  724.226545][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready
[  724.234021][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready
[  724.241465][T10995] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready
[  724.457966][T11003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  727.308952][T11029] futex_wake_op: syz.4.1656 tries to shift op by 144; fix this program
[  734.161927][T11086] wg1 speed is unknown, defaulting to 1000
[  735.970375][T11107] loop6: detected capacity change from 0 to 512
[  736.524727][T11107] EXT4-fs: inline encryption not supported
[  736.547030][T11107] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  736.717687][T11107] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.1684: corrupted in-inode xattr
[  736.789415][T11107] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1684: couldn't read orphan inode 15 (err -117)
[  736.915311][T11107] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  738.127723][T11138] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11138]
[  739.080534][T11151] overlayfs: failed to clone lowerpath
[  744.918239][ T9562] EXT4-fs (loop6): unmounting filesystem.
[  745.339842][T11196] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  746.105627][T11191] udevd[11191]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  747.067777][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.074171][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  750.741838][T11262] device syzkaller0 entered promiscuous mode
[  754.557999][T11298] sctp: [Deprecated]: syz.0.1720 (pid 11298) Use of struct sctp_assoc_value in delayed_ack socket option.
[  754.557999][T11298] Use struct sctp_sack_info instead
[  755.608520][T11307] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11307]
[  756.336737][T11291] udevd[11291]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  756.986279][T11317] xt_CONNSECMARK: invalid mode: 66
[  758.366767][T11291] udevd[11291]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  760.350612][T11338] wg1 speed is unknown, defaulting to 1000
[  761.057720][T11343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  761.297850][T11347] loop5: detected capacity change from 0 to 256
[  761.390629][T11347] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  761.457959][T11347] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  761.525984][T11347] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  761.545800][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system
[  761.609095][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system
[  761.674571][T11347] exFAT-fs (loop5): failed to load alloc-bitmap
[  761.696875][T11347] exFAT-fs (loop5): failed to recognize exfat type
[  761.874956][T11356] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  762.577472][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system
[  762.692270][T11359] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8596] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11359]
[  762.711425][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system
[  763.016098][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system
[  763.681960][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system
[  763.851913][T11291] udevd[11291]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  764.521106][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/205.tmp-b7:5' failed: Read-only file system
[  767.754359][T11390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  767.764981][T11390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  767.772487][T11390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  767.848238][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/205.tmp-b7:5' failed: Read-only file system
[  767.966239][T11291] udevd[11291]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  769.208308][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/205.tmp-b7:5' failed: Read-only file system
[  770.491146][T11409] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  770.513604][T11291] udevd[11291]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  772.656631][T11291] udevd[11291]: symlink '../../loop5' '/dev/disk/by-diskseq/205.tmp-b7:5' failed: Read-only file system
[  772.745536][T11291] udevd[11291]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  775.322461][T11452] overlayfs: failed to clone lowerpath
[  777.446683][T11464] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  779.148682][T11486] xt_policy: output policy not valid in PREROUTING and INPUT
[  784.047322][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  784.059616][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  784.067891][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  784.076099][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  784.085864][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  784.094301][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  784.102756][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  784.130973][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  784.139378][T11523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  785.074623][T11524] udevd[11524]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  786.141880][T11524] udevd[11524]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  787.392250][T11524] udevd[11524]: symlink '../../loop5' '/dev/disk/by-diskseq/205.tmp-b7:5' failed: Read-only file system
[  788.566747][T11564] udevd[11564]: symlink '../../loop6' '/dev/disk/by-diskseq/203.tmp-b7:6' failed: Read-only file system
[  798.916713][T11648] capability: warning: `syz.0.1801' uses 32-bit capabilities (legacy support in use)
[  804.825059][T11715] sctp: [Deprecated]: syz.6.1814 (pid 11715) Use of int in max_burst socket option.
[  804.825059][T11715] Use struct sctp_assoc_value instead
[  807.515073][T11750] loop5: detected capacity change from 0 to 128
[  808.504634][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.510988][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  818.383692][T11867] FAULT_INJECTION: forcing a failure.
[  818.383692][T11867] name failslab, interval 1, probability 0, space 0, times 0
[  818.427344][T11867] CPU: 0 PID: 11867 Comm: syz.6.1843 Not tainted syzkaller #0
[  818.434916][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  818.445013][T11867] Call Trace:
[  818.448319][T11867]  <TASK>
[  818.451283][T11867]  dump_stack_lvl+0x188/0x24e
[  818.456022][T11867]  ? show_regs_print_info+0x12/0x12
[  818.461270][T11867]  ? load_image+0x410/0x410
[  818.465919][T11867]  ? __might_sleep+0xd0/0xd0
[  818.470633][T11867]  ? __lock_acquire+0x7c40/0x7c40
[  818.475723][T11867]  should_fail_ex+0x390/0x4c0
[  818.480542][T11867]  should_failslab+0x5/0x20
[  818.485118][T11867]  slab_pre_alloc_hook+0x59/0x300
[  818.490325][T11867]  kmem_cache_alloc+0x56/0x2f0
[  818.495140][T11867]  ? __pmd_alloc+0x116/0x760
[  818.499938][T11867]  __pmd_alloc+0x116/0x760
[  818.504396][T11867]  ? __lock_acquire+0x7c40/0x7c40
[  818.509461][T11867]  ? do_raw_spin_lock+0x128/0x2f0
[  818.514526][T11867]  ? __pud_alloc+0x150/0x150
[  818.519152][T11867]  ? __rwlock_init+0x140/0x140
[  818.523962][T11867]  ? hugepage_vma_check+0x461/0x540
[  818.529276][T11867]  handle_mm_fault+0xa06/0x3d40
[  818.534199][T11867]  ? numa_migrate_prep+0x250/0x250
[  818.539356][T11867]  ? vma_is_secretmem+0x9/0x40
[  818.544239][T11867]  ? check_vma_flags+0x340/0x4c0
[  818.549217][T11867]  __get_user_pages+0x40d/0xec0
[  818.554102][T11867]  ? populate_vma_page_range+0x2b0/0x2b0
[  818.559857][T11867]  ? __might_sleep+0xd0/0xd0
[  818.564474][T11867]  ? read_lock_is_recursive+0x10/0x10
[  818.569870][T11867]  ? lockdep_hardirqs_on+0x94/0x140
[  818.575096][T11867]  __get_user_pages_remote+0x1c2/0x730
[  818.580599][T11867]  ? get_user_pages_remote+0x55/0xa0
[  818.585951][T11867]  get_arg_page+0x1ca/0x410
[  818.590537][T11867]  ? copy_string_kernel+0x220/0x220
[  818.595768][T11867]  ? up_write+0x1b6/0x410
[  818.600118][T11867]  ? alloc_bprm+0x37a/0x710
[  818.604680][T11867]  copy_string_kernel+0x161/0x220
[  818.609741][T11867]  do_execveat_common+0x35d/0x6b0
[  818.614794][T11867]  __x64_sys_execve+0x8e/0xa0
[  818.619495][T11867]  do_syscall_64+0x4c/0xa0
[  818.623943][T11867]  ? clear_bhb_loop+0x60/0xb0
[  818.628640][T11867]  ? clear_bhb_loop+0x60/0xb0
[  818.633336][T11867]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  818.639270][T11867] RIP: 0033:0x7fe83a59e159
[  818.643850][T11867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  818.663543][T11867] RSP: 002b:00007fe83b470028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  818.671980][T11867] RAX: ffffffffffffffda RBX: 00007fe83a825fa0 RCX: 00007fe83a59e159
[  818.679961][T11867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240
[  818.687947][T11867] RBP: 00007fe83a63506b R08: 0000000000000000 R09: 0000000000000000
[  818.695943][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.703937][T11867] R13: 00007fe83a826038 R14: 00007fe83a825fa0 R15: 00007ffdfa5fa078
[  818.711937][T11867]  </TASK>
[  820.166057][T11881] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  822.862143][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  822.869646][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  822.877067][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  822.884411][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[  822.891537][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[  822.898746][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[  822.905928][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[  822.913085][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[  822.920210][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[  822.927445][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready
[  822.934743][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready
[  822.942088][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready
[  822.949488][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready
[  822.956855][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready
[  822.964813][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready
[  822.972748][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready
[  822.980089][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb8: link becomes ready
[  822.987460][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb9: link becomes ready
[  822.995337][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb10: link becomes ready
[  823.002868][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb11: link becomes ready
[  823.010347][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb12: link becomes ready
[  823.017862][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): lapb13: link becomes ready
[  823.029879][T11904] device syzkaller0 entered promiscuous mode
[  823.047661][T11904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  823.066789][T11904] tipc: Resetting bearer <eth:syzkaller0>
[  823.115813][T11903] tipc: Resetting bearer <eth:syzkaller0>
[  823.237099][T11903] tipc: Disabling bearer <eth:syzkaller0>
[  823.347117][T11914] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  831.687530][T11998] loop5: detected capacity change from 0 to 1024
[  832.209505][T11998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  832.487014][T11998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  832.685777][T11998] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  832.712652][T11998] System zones: 0-1, 3-36
[  832.754785][T11998] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  832.788556][   T26] audit: type=1800 audit(1789496540.868:467): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1870" name="file1" dev="loop5" ino=15 res=0 errno=0
[  833.918303][ T8596] EXT4-fs (loop5): unmounting filesystem.
[  834.927699][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888029908800: rx timeout, send abort
[  835.436226][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888029908800: abort rx timeout. Force session deactivation
[  835.467815][T12036] using random self ethernet address
[  835.475807][T12036] using random host ethernet address
[  835.607536][T12035] ISOFS: Unable to identify CD-ROM format.
[  835.724062][T12037] loop5: detected capacity change from 0 to 32768
[  835.799343][   T26] audit: type=1800 audit(1789496543.878:468): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1878" name="file1" dev="loop5" ino=4 res=0 errno=0
[  835.960790][T12041] netlink: 'syz.3.1881': attribute type 4 has an invalid length.
[  836.370197][T12045] CIFS: Attempting to mount \\127.0.0.1\share
[  836.666068][T12050] Option 'dnserror' to dns_resolver key: bad/missing value
[  837.521702][T12045] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  837.531773][T12045] CIFS: VFS: cifs_mount failed w/return code = -512
[  838.235162][ T4359] libceph: connect (1)[c::]:6789 error -101
[  838.264585][ T4359] libceph: mon0 (1)[c::]:6789 connect error
[  838.283971][T12071] ceph: No mds server is up or the cluster is laggy
[  840.308849][ T7454] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.779884][ T7454] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.977518][ T7454] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.130260][ T7454] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.267074][T12124] loop6: detected capacity change from 0 to 4096
[  842.318967][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  842.330483][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  842.339110][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  842.349073][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  842.356883][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  842.364261][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  842.463596][T12126] wg1 speed is unknown, defaulting to 1000
[  842.481934][T12132] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  842.560685][   T26] audit: type=1800 audit(1789496550.638:469): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1898" name="file1" dev="loop6" ino=15 res=0 errno=0
[  843.089477][   T26] audit: type=1800 audit(1789496550.898:470): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1898" name="file1" dev="loop6" ino=15 res=0 errno=0
[  844.427144][ T4286] Bluetooth: hci1: command 0x0409 tx timeout
[  845.478057][T12163] loop6: detected capacity change from 0 to 128
[  845.562073][T12163] FAT-fs (loop6): invalid media value (0x07)
[  845.573231][T12126] chnl_net:caif_netlink_parms(): no params data found
[  845.597747][T12163] FAT-fs (loop6): Can't find a valid FAT filesystem
[  847.077016][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  848.895697][ T3935] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  849.105660][ T3935] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  849.117324][ T3935] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  849.212234][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  849.317012][T12213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1913'.
[  849.537110][ T3935] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  850.198373][ T3935] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  850.263326][ T3935] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  850.291134][ T3935] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  850.318087][ T3935] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  850.340878][ T3935] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  850.387888][ T3935] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  850.396296][ T3935] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  850.404812][ T3935] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  850.454996][T12126] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.583438][T12126] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.591788][T12126] device bridge_slave_0 entered promiscuous mode
[  850.611783][T12223] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  850.660205][T12126] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.704186][T12126] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.719389][T12213] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  850.728817][T12213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  850.738437][T12213] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  850.743702][   T26] audit: type=1800 audit(1789496558.798:471): pid=12213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1913" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  850.832284][T12213] syz.0.1913 (12213) used greatest stack depth: 18512 bytes left
[  850.880630][T12126] device bridge_slave_1 entered promiscuous mode
[  851.937163][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  853.477998][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'.
[  853.715929][T12274] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  854.723199][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  854.735966][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  854.873538][T12126] team0: Port device team_slave_0 added
[  855.390963][T12292] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1922'.
[  856.450955][T12126] team0: Port device team_slave_1 added
[  856.921447][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  858.052686][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  858.125877][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  858.151713][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  858.161862][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  858.198626][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  858.313773][ T7454] device hsr_slave_0 left promiscuous mode
[  858.351368][ T7454] device hsr_slave_1 left promiscuous mode
[  858.485446][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  858.499607][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  858.589057][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  858.622646][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  858.697323][ T7454] device bridge_slave_1 left promiscuous mode
[  858.712769][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.830134][ T7454] device bridge_slave_0 left promiscuous mode
[  858.873186][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.168298][ T7454] device veth1_macvtap left promiscuous mode
[  859.181507][ T7454] device veth0_macvtap left promiscuous mode
[  859.264695][ T7454] device veth1_vlan left promiscuous mode
[  859.270906][ T7454] device veth0_vlan left promiscuous mode
[  861.111457][ T7454] team0 (unregistering): Port device team_slave_1 removed
[  861.168091][ T7454] team0 (unregistering): Port device team_slave_0 removed
[  861.216342][ T7454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  861.268598][ T7454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  861.815179][ T7454] bond0 (unregistering): Released all slaves
[  861.982262][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'.
[  862.011814][T12325] wg1 speed is unknown, defaulting to 1000
[  862.203299][T12337] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  862.286610][T12126] device hsr_slave_0 entered promiscuous mode
[  862.293761][T12126] device hsr_slave_1 entered promiscuous mode
[  862.300491][T12126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  862.308820][T12126] Cannot create hsr debugfs directory
[  862.602135][T12350] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1935'.
[  862.948313][T12126] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  863.047005][T12126] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  864.492619][   T26] audit: type=1326 audit(1789496571.688:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  864.584543][T12126] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  864.603562][T12126] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  864.737761][   T26] audit: type=1326 audit(1789496571.688:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  864.879699][   T26] audit: type=1326 audit(1789496571.728:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  864.960284][   T26] audit: type=1326 audit(1789496571.738:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  865.090385][T12386] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  865.149854][   T26] audit: type=1326 audit(1789496571.738:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  865.177788][T12126] 8021q: adding VLAN 0 to HW filter on device bond0
[  865.271569][   T26] audit: type=1326 audit(1789496571.768:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  865.309850][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  865.329755][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  865.378374][T12126] 8021q: adding VLAN 0 to HW filter on device team0
[  865.430430][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  865.453095][   T26] audit: type=1326 audit(1789496571.778:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  865.465277][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  865.607641][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  865.614858][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  865.631787][   T26] audit: type=1326 audit(1789496571.778:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.6.1939" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83a59e159 code=0x7ffc0000
[  865.725062][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  865.803239][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  865.867348][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  865.920407][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  865.927634][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  866.060253][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  866.106474][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  866.126433][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  866.183782][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  866.221797][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  866.312415][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  866.349179][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  866.416352][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  866.469086][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  866.503982][T12415] netlink: 'syz.3.1952': attribute type 10 has an invalid length.
[  866.511944][T12126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  866.556002][T12126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  866.577077][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  866.602130][ T7447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  868.292877][T12436] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  869.818676][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  869.833002][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  869.878617][T12126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  869.955832][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  869.962242][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  873.272290][T12503] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1969'.
[  874.856919][T12510] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1970'.
[  874.896236][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1970'.
[  875.123338][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1970'.
[  875.158864][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1970'.
[  877.739417][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  877.751048][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  877.815092][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  878.233200][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  878.265028][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  878.303614][   T64] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  878.350998][T12126] device veth0_vlan entered promiscuous mode
[  878.440669][T12126] device veth1_vlan entered promiscuous mode
[  879.573240][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  879.599392][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  879.758918][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  879.783338][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  879.808568][T12126] device veth0_macvtap entered promiscuous mode
[  880.297295][T12126] device veth1_macvtap entered promiscuous mode
[  880.650607][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  880.723421][T12569] device syzkaller0 entered promiscuous mode
[  880.783487][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  880.831109][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  880.877556][T12126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  881.824469][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  881.874426][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  881.968598][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  882.035411][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  882.093151][T12126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  882.123957][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  882.165402][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  882.311295][T12126] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  882.320741][T12126] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  882.334937][T12126] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  882.360050][T12126] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  883.619151][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  884.437072][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  884.485107][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  885.434808][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  885.443304][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  885.454331][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  887.792561][ T2170] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  888.922574][ T2170] usb 7-1: Using ep0 maxpacket: 16
[  889.017134][ T2170] usb 7-1: device descriptor read/all, error -71
[  893.998292][T12691] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  894.032600][ T2170] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  894.252693][ T2170] usb 7-1: Using ep0 maxpacket: 8
[  894.259340][ T2170] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  894.322523][ T2170] usb 7-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config
[  894.363825][ T2170] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  895.342606][ T2170] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  895.432546][ T2170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.485675][ T2170] usbtmc 7-1:16.0: bulk endpoints not found
[  896.837097][T12716] device syzkaller0 entered promiscuous mode
[  899.151608][ T2170] usb 7-1: USB disconnect, device number 6
[  903.099505][   T12] rcu_tasks_wait_gp: rcu_tasks grace period 9 is 1057 jiffies old.
[  906.222429][T12785] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2034'.
[  906.425760][T12785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2034'.
[  906.526741][T12785] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2034'.
[  907.079603][T12785] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2034'.
[  909.758837][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'.
[  912.124785][T12845] device syzkaller0 entered promiscuous mode
[  914.866823][T12867] wg1 speed is unknown, defaulting to 1000
[  919.137092][T12912] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  919.962288][T12921] i2c i2c-0: new_device: Extra parameters
[  920.112100][T12921] tcpci: probe of 0-0002 failed with error -5
[  920.192357][T12921] i2c i2c-0: new_device: Instantiated device tcpci at 0x02
[  922.318523][T12962] loop6: detected capacity change from 0 to 512
[  923.611682][T12962] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  923.797558][T12962] EXT4-fs (loop6): 1 truncate cleaned up
[  923.806170][T12962] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  925.163788][ T9562] EXT4-fs (loop6): unmounting filesystem.
[  925.497529][T13010] loop6: detected capacity change from 0 to 512
[  925.546927][T13010] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.2085: Unrecognised inode hash code 255
[  925.907282][T13010] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2085: Corrupt directory, running e2fsck is recommended
[  926.323433][T13010] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  926.453886][T13010] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.2085: corrupted in-inode xattr
[  926.507045][T13010] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2085: couldn't read orphan inode 15 (err -117)
[  926.608030][T13010] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  927.423185][ T9562] EXT4-fs (loop6): unmounting filesystem.
[  932.025157][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  932.032194][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  938.795692][T13121] loop6: detected capacity change from 0 to 512
[  946.231298][T13208] loop7: detected capacity change from 0 to 16
[  946.262827][T13208] erofs: (device loop7): mounted with root inode @ nid 36.
[  947.085385][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2125'.
[  948.648629][T13225] loop7: detected capacity change from 0 to 512
[  949.974840][   T26] audit: type=1800 audit(1789496658.058:480): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2132" name="addr_trtype" dev="configfs" ino=60754 res=0 errno=0
[  950.043308][   T26] audit: type=1800 audit(1789496658.088:481): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2132" name="addr_adrfam" dev="configfs" ino=60755 res=0 errno=0
[  950.201243][   T26] audit: type=1800 audit(1789496658.088:482): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2132" name="addr_traddr" dev="configfs" ino=60756 res=0 errno=0
[  955.893170][T13302] overlayfs: failed to clone lowerpath
[  962.929429][T13371] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  962.936539][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  962.977798][T13372] vhci_hcd: connection closed
[  963.029263][T13371] vhci_hcd vhci_hcd.0: Device attached
[  963.070817][ T4650] vhci_hcd: stop threads
[  963.078199][ T4650] vhci_hcd: release socket
[  963.094443][ T4650] vhci_hcd: disconnect device
[  969.916072][ T4295] Bluetooth: hci1: command 0x0406 tx timeout
[  972.841489][T13488] loop6: detected capacity change from 0 to 2048
[  973.054021][T13488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  978.631408][T13526] loop7: detected capacity change from 0 to 32768
[  978.739855][T13526] XFS (loop7): Mounting V5 Filesystem
[  978.864431][T13526] XFS (loop7): Ending clean mount
[  979.445840][T12126] XFS (loop7): Unmounting Filesystem
[  992.839604][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  992.847314][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  995.887444][T13717] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2227'.
[  996.762794][T13719] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2228'.
[  996.981455][T13717] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  997.095401][T13727] loop7: detected capacity change from 0 to 512
[  997.290580][T13727] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  998.434042][T13753] binder: 13748:13753 ioctl c0306201 0 returned -14
[ 1007.590210][T13852] 0x7073726500000000-0x7073726500306e61 : ""
[ 1007.596846][T13852] mtd: partition "" is out of reach -- disabled
[ 1007.628820][T13852] ftl_cs: FTL header not found.
[ 1008.660371][T13848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1011.654412][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2262'.
[ 1013.678648][T13914] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1016.362976][T13945] loop6: detected capacity change from 0 to 16
[ 1016.393263][T13945] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1017.919567][T13860] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1019.785438][T13970] device syzkaller0 entered promiscuous mode
[ 1019.818644][T13970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1019.869201][T13970] tipc: Resetting bearer <eth:syzkaller0>
[ 1020.047976][T13969] tipc: Resetting bearer <eth:syzkaller0>
[ 1021.305203][T13969] tipc: Disabling bearer <eth:syzkaller0>
[ 1021.340816][ T4333] tipc: Node number set to 3876420349
[ 1027.849278][T14072] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2304'.
[ 1030.387674][T14122] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2312'.
[ 1030.396903][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'.
[ 1030.406171][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2312'.
[ 1030.415228][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2312'.
[ 1034.657665][T14172] futex_wake_op: syz.0.2324 tries to shift op by 144; fix this program
[ 1041.302953][T14236] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1042.392052][T14244] Device name cannot be null; rc = [-22]
[ 1042.613402][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2341'.
[ 1042.926611][ T4328] infiniband syz1: ib_query_port failed (-19)
[ 1042.939705][T14248] infiniband syz1: set down
[ 1042.961821][T14248] infiniband syz1: added syz_tun
[ 1043.080654][T14248] RDS/IB: syz1: added
[ 1043.129821][T14248] smc: adding ib device syz1 with port count 1
[ 1043.188052][T14248] smc:    ib device syz1 port 1 has pnetid 
[ 1043.269465][T14248] smc: removing ib device syz1
[ 1044.236251][T14248] rdma_rxe: rxe_register_device failed with error -19
[ 1044.308934][T14248] rdma_rxe: failed to add syz_tun
[ 1044.633339][T14266] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1047.553315][T14283] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1048.605910][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'.
[ 1054.312871][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.319273][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1057.935684][T14376] sctp: [Deprecated]: syz.6.2368 (pid 14376) Use of int in max_burst socket option.
[ 1057.935684][T14376] Use struct sctp_assoc_value instead
[ 1068.174166][T14505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2396'.
[ 1077.803467][T14570] loop7: detected capacity change from 0 to 512
[ 1077.881645][T14570] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.2416: bg 0: block 7: invalid block bitmap
[ 1078.075251][T14570] EXT4-fs (loop7): Remounting filesystem read-only
[ 1078.081982][T14570] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem
[ 1078.093141][T14570] EXT4-fs (loop7): Remounting filesystem read-only
[ 1078.103722][T14570] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2921: inode #11: comm syz.7.2416: corrupted xattr block 95
[ 1078.117582][T14570] EXT4-fs (loop7): Remounting filesystem read-only
[ 1078.659847][T14570] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117)
[ 1078.735254][T14570] EXT4-fs (loop7): 1 orphan inode deleted
[ 1078.755447][T14570] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1079.187578][T14590] __vm_enough_memory: pid: 14590, comm: syz.7.2416, no enough memory for the allocation
[ 1079.555167][T12126] EXT4-fs (loop7): unmounting filesystem.
[ 1085.633679][T14628] fuse: Bad value for 'fd'
[ 1086.389756][T14631] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1089.542307][T14660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2433'.
[ 1092.990961][T14687] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1093.027046][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'.
[ 1093.462076][T14700] IPVS: rr: TCP 172.20.20.170:20000 - no destination available
[ 1094.801141][T14710] tipc: Started in network mode
[ 1094.816391][T14710] tipc: Node identity 4, cluster identity 4711
[ 1094.826904][T14710] tipc: Node number set to 4
[ 1094.878328][T14710] tipc: Enabled bearer <eth:syz_tun>, priority 0
[ 1094.956662][T14715] tipc: Resetting bearer <eth:syz_tun>
[ 1095.860345][T14715] tipc: Disabling bearer <eth:syz_tun>
[ 1097.040218][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2453'.
[ 1097.547858][T14737] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9562] was attempted by ""[14737]
[ 1098.241427][T14740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1098.260054][T14740] tipc: Resetting bearer <eth:syzkaller0>
[ 1098.406298][T14743] Cannot find del_set index 4 as target
[ 1098.441446][T14739] tipc: Disabling bearer <eth:syzkaller0>
[ 1099.488374][T14750] loop6: detected capacity change from 0 to 512
[ 1099.499016][T14750] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1099.610818][T14750] EXT4-fs (loop6): 1 truncate cleaned up
[ 1099.616936][T14750] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1101.811824][ T9562] EXT4-fs (loop6): unmounting filesystem.
[ 1107.450626][T14810] loop6: detected capacity change from 0 to 512
[ 1107.877888][T14810] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1107.949215][T14810] EXT4-fs (loop6): 1 truncate cleaned up
[ 1107.956461][T14810] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1108.745428][ T9562] EXT4-fs (loop6): unmounting filesystem.
[ 1114.544137][T14869] loop7: detected capacity change from 0 to 512
[ 1114.714031][T14869] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1115.518168][T14869] EXT4-fs (loop7): 1 truncate cleaned up
[ 1115.574826][T14869] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1115.714727][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.721225][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.427351][T12126] EXT4-fs (loop7): unmounting filesystem.
[ 1121.493227][T14904] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1123.911923][T14915] "syz.0.2501" (14915) uses obsolete ecb(arc4) skcipher
[ 1124.483559][T14924] device syzkaller0 entered promiscuous mode
[ 1124.541743][T14925] batman_adv: batadv0: Adding interface: dummy0
[ 1124.581041][T14925] batman_adv: batadv0: The MTU of interface dummy0 is too small (1540) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1124.739178][T14925] batman_adv: batadv0: Interface activated: dummy0
[ 1124.830324][T14927] batadv0: mtu less than device minimum
[ 1124.863486][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.876463][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.888530][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.899958][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.911792][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.923438][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.934868][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.946424][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1124.957829][T14927] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1129.001368][T14960] futex_wake_op: syz.7.2511 tries to shift op by 144; fix this program
[ 1129.048647][T14960] loop7: detected capacity change from 0 to 256
[ 1129.892129][T14960] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1129.953427][   T26] audit: type=1800 audit(1789496838.018:483): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2511" name="file1" dev="loop7" ino=1048704 res=0 errno=0
[ 1129.978516][T14959] syz.7.2511: attempt to access beyond end of device
[ 1129.978516][T14959] loop7: rw=0, sector=184, nr_sectors = 120 limit=256
[ 1132.322843][T14981] "syz.7.2516" (14981) uses obsolete ecb(arc4) skcipher
[ 1138.285240][T15021] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1140.045997][T15035] "syz.6.2530" (15035) uses obsolete ecb(arc4) skcipher
[ 1142.222723][T15044] tc_dump_action: action bad kind
[ 1145.149920][T15071] tipc: Started in network mode
[ 1145.154876][T15071] tipc: Node identity 4, cluster identity 4711
[ 1145.161060][T15071] tipc: Node number set to 4
[ 1147.794756][T15083] "syz.3.2545" (15083) uses obsolete ecb(arc4) skcipher
[ 1149.658287][T15103] loop6: detected capacity change from 0 to 512
[ 1149.709289][T15103] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1149.716568][T15103] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1150.172002][T15103] EXT4-fs (loop6): 1 truncate cleaned up
[ 1150.177808][T15103] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1150.522141][ T9562] EXT4-fs (loop6): unmounting filesystem.
[ 1153.595515][T15141] loop7: detected capacity change from 0 to 512
[ 1154.563565][T15141] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #15: comm syz.7.2559: inode has both inline data and extents flags
[ 1154.624446][T15141] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.2559: couldn't read orphan inode 15 (err -117)
[ 1155.057801][T15141] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1155.790762][T12126] EXT4-fs (loop7): unmounting filesystem.
[ 1159.598324][T15197] device syzkaller0 entered promiscuous mode
[ 1160.617907][T15197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1160.679313][T15197] tipc: Resetting bearer <eth:syzkaller0>
[ 1160.752718][T15196] tipc: Resetting bearer <eth:syzkaller0>
[ 1160.873259][T15196] tipc: Disabling bearer <eth:syzkaller0>
[ 1161.308328][T15210] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1161.363148][T15212] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1168.836047][T15276] loop7: detected capacity change from 0 to 16
[ 1169.685461][T15280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2591'.
[ 1169.694728][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'.
[ 1169.703892][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2591'.
[ 1169.712978][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2591'.
[ 1170.171707][T15276] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1170.881337][T15283] loop6: detected capacity change from 0 to 64
[ 1173.739926][T15308] futex_wake_op: syz.4.2599 tries to shift op by 144; fix this program
[ 1176.711823][T15322] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2602'.
[ 1177.298297][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.304745][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1181.463446][T15370] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1182.701158][T15382] loop7: detected capacity change from 0 to 4096
[ 1182.719890][T15386] loop6: detected capacity change from 0 to 2048
[ 1182.789513][T15386] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[ 1182.807951][T15391] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1182.870061][T15386] UDF-fs: warning (device loop6): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[ 1186.199224][T15407] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2617'.
[ 1187.525912][T15424] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1188.741302][T15439] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1188.821943][T15438] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1189.626378][T15443] Device name cannot be null; rc = [-22]
[ 1192.632545][ T4680] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1192.687139][T15484] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1193.524294][ T4680] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.682554][ T4680] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1193.751393][ T4680] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1193.889252][ T4680] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1193.912415][ T4680] usb 8-1: Product: syz
[ 1193.916678][ T4680] usb 8-1: Manufacturer: syz
[ 1193.921311][ T4680] usb 8-1: SerialNumber: syz
[ 1194.186985][ T4680] usb 8-1: config 0 descriptor??
[ 1194.542845][ T4680] usb 8-1: USB disconnect, device number 2
[ 1194.861741][T15492] loop7: detected capacity change from 0 to 1024
[ 1195.833396][T15492] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1196.342969][   T26] audit: type=1800 audit(1789496904.238:484): pid=15505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2645" name="file1" dev="loop7" ino=15 res=0 errno=0
[ 1196.554879][T12126] EXT4-fs (loop7): unmounting filesystem.
[ 1196.660029][T15509] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1203.358658][T15568] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1204.239074][T15583] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1205.530019][T15599] loop7: detected capacity change from 0 to 64
[ 1210.457613][T15635] sctp: [Deprecated]: syz.7.2676 (pid 15635) Use of int in max_burst socket option.
[ 1210.457613][T15635] Use struct sctp_assoc_value instead
[ 1216.625382][T15683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1219.210891][T15698] usb0: HOST MAC de:24:28:50:e6:3b
[ 1219.270182][T15698] usb0: MAC 9a:5b:65:9f:5c:c1
[ 1221.485916][T15737] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2712'.
[ 1227.366558][T15794] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2713'.
[ 1228.020795][T15799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2716'.
[ 1229.862253][T15810] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1236.085373][T15885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2731'.
[ 1236.524038][T15886] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary
[ 1237.557320][T15900] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1238.584960][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.591363][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.316923][T15964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2747'.
[ 1247.239425][T15977] loop6: detected capacity change from 0 to 512
[ 1247.752244][T15977] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1248.166814][T15977] EXT4-fs (loop6): 1 truncate cleaned up
[ 1248.251506][T15977] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1249.825991][ T9562] EXT4-fs (loop6): unmounting filesystem.
[ 1252.024364][T16022] MPTCP: kernel_bind error, err=-99
[ 1257.638864][T16059] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1258.520936][T16078] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1258.842543][   T27] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1259.042482][   T27] usb 7-1: Using ep0 maxpacket: 8
[ 1259.054746][T12255] ------------[ cut here ]------------
[ 1259.060836][T12255] WARNING: CPU: 1 PID: 12255 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760
[ 1259.070743][T12255] Modules linked in:
[ 1259.074756][T12255] CPU: 1 PID: 12255 Comm: kworker/u4:1 Not tainted syzkaller #0
[ 1259.082573][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1259.092896][T12255] Workqueue: events_unbound io_ring_exit_work
[ 1259.099068][T12255] RIP: 0010:io_ring_exit_work+0x329/0x760
[ 1259.104861][T12255] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 ae 2e 11 00 48 85 c0 75 40 e8 44 11 58 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 35 11 58 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[ 1259.124610][T12255] RSP: 0018:ffffc90003767ac0 EFLAGS: 00010293
[ 1259.130719][T12255] RAX: ffffffff8a2a21ab RBX: 1ffff1100bb50003 RCX: ffff88807b8bda00
[ 1259.138759][T12255] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[ 1259.146799][T12255] RBP: ffffc90003767c30 R08: ffffc90003767a47 R09: 1ffff920006ecf48
[ 1259.154839][T12255] R10: dffffc0000000000 R11: fffff520006ecf49 R12: dffffc0000000000
[ 1259.162876][T12255] R13: 00000001000175fe R14: 00000001000175ff R15: ffff88805da80018
[ 1259.170882][T12255] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1259.179970][T12255] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1259.186640][T12255] CR2: 00007ff58c5872d0 CR3: 000000002ea5c000 CR4: 00000000003506e0
[ 1259.194697][T12255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1259.202853][T12255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1259.210857][T12255] Call Trace:
[ 1259.214207][T12255]  <TASK>
[ 1259.217194][T12255]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[ 1259.223093][T12255]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1259.228357][T12255]  ? process_one_work+0x7b4/0x1160
[ 1259.233542][T12255]  process_one_work+0x8ab/0x1160
[ 1259.238532][T12255]  ? worker_detach_from_pool+0x240/0x240
[ 1259.244310][T12255]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1259.249363][T12255]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1259.254980][T12255]  ? wq_worker_running+0x97/0x190
[ 1259.260034][T12255]  worker_thread+0xaf5/0x12a0
[ 1259.264795][T12255]  kthread+0x29d/0x330
[ 1259.268879][T12255]  ? worker_clr_flags+0x1a0/0x1a0
[ 1259.273955][T12255]  ? kthread_blkcg+0xd0/0xd0
[ 1259.278600][T12255]  ret_from_fork+0x1f/0x30
[ 1259.283128][T12255]  </TASK>
[ 1259.286213][T12255] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1259.293507][T12255] CPU: 1 PID: 12255 Comm: kworker/u4:1 Not tainted syzkaller #0
[ 1259.301163][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1259.311250][T12255] Workqueue: events_unbound io_ring_exit_work
[ 1259.317363][T12255] Call Trace:
[ 1259.320667][T12255]  <TASK>
[ 1259.323622][T12255]  dump_stack_lvl+0x188/0x24e
[ 1259.328327][T12255]  ? memcpy+0x3c/0x60
[ 1259.332335][T12255]  ? show_regs_print_info+0x12/0x12
[ 1259.337570][T12255]  ? load_image+0x410/0x410
[ 1259.342114][T12255]  panic+0x2d3/0x710
[ 1259.346046][T12255]  ? bpf_jit_dump+0xd0/0xd0
[ 1259.350610][T12255]  ? ret_from_fork+0x1f/0x30
[ 1259.355259][T12255]  __warn+0x2f8/0x4f0
[ 1259.359282][T12255]  ? io_ring_exit_work+0x329/0x760
[ 1259.364432][T12255]  ? io_ring_exit_work+0x329/0x760
[ 1259.369578][T12255]  report_bug+0x2ba/0x4f0
[ 1259.374016][T12255]  ? io_ring_exit_work+0x329/0x760
[ 1259.379158][T12255]  handle_bug+0x3a/0x70
[ 1259.383338][T12255]  exc_invalid_op+0x16/0x40
[ 1259.387870][T12255]  asm_exc_invalid_op+0x16/0x20
[ 1259.392767][T12255] RIP: 0010:io_ring_exit_work+0x329/0x760
[ 1259.398515][T12255] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 ae 2e 11 00 48 85 c0 75 40 e8 44 11 58 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 35 11 58 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1
[ 1259.418142][T12255] RSP: 0018:ffffc90003767ac0 EFLAGS: 00010293
[ 1259.424238][T12255] RAX: ffffffff8a2a21ab RBX: 1ffff1100bb50003 RCX: ffff88807b8bda00
[ 1259.432232][T12255] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[ 1259.440219][T12255] RBP: ffffc90003767c30 R08: ffffc90003767a47 R09: 1ffff920006ecf48
[ 1259.448210][T12255] R10: dffffc0000000000 R11: fffff520006ecf49 R12: dffffc0000000000
[ 1259.456207][T12255] R13: 00000001000175fe R14: 00000001000175ff R15: ffff88805da80018
[ 1259.464208][T12255]  ? io_ring_exit_work+0x329/0x760
[ 1259.469366][T12255]  ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0
[ 1259.475227][T12255]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1259.480480][T12255]  ? process_one_work+0x7b4/0x1160
[ 1259.485629][T12255]  process_one_work+0x8ab/0x1160
[ 1259.490642][T12255]  ? worker_detach_from_pool+0x240/0x240
[ 1259.496318][T12255]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1259.501384][T12255]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1259.507060][T12255]  ? wq_worker_running+0x97/0x190
[ 1259.512128][T12255]  worker_thread+0xaf5/0x12a0
[ 1259.516887][T12255]  kthread+0x29d/0x330
[ 1259.520979][T12255]  ? worker_clr_flags+0x1a0/0x1a0
[ 1259.526039][T12255]  ? kthread_blkcg+0xd0/0xd0
[ 1259.530667][T12255]  ret_from_fork+0x1f/0x30
[ 1259.535138][T12255]  </TASK>
[ 1259.538735][T12255] Kernel Offset: disabled
[ 1259.543163][T12255] Rebooting in 86400 seconds..