last executing test programs:

16m57.250289628s ago: executing program 32 (id=43):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100", @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
statx(r5, 0x0, 0x1000, 0x400, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5], 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

16m43.420476895s ago: executing program 33 (id=84):
open(&(0x7f0000000000)='./file0\x00', 0x10040, 0x12)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)

13m0.256435723s ago: executing program 34 (id=519):
socket(0x2, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
timer_settime(0x0, 0x0, 0x0, 0x0)
openat(r0, 0x0, 0x42, 0x50)
r2 = syz_open_procfs(0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000005c0), 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0)
recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

12m3.403638839s ago: executing program 0 (id=692):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$unix(r2, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0)

12m2.510293344s ago: executing program 0 (id=695):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={&(0x7f0000000180)=[0x3, 0x1ff, 0x1d0, 0x7c, 0x6, 0x5, 0x9, 0x6151, 0x45671d7f, 0x1, 0x55, 0x6, 0x5, 0x3, 0x7f, 0x8, 0x5, 0x7, 0xffff621e, 0x6, 0x80, 0xfffffff8, 0x9, 0x1, 0x7f, 0x2, 0x81, 0x400, 0x4, 0x400, 0x8000, 0x7, 0x2, 0x8e11, 0xa, 0x6, 0x40, 0x3, 0x4, 0xffff8000, 0xfffffffa, 0xe4, 0x6914, 0x1, 0x5, 0x6, 0x8f79, 0xff, 0x4, 0x9, 0x20000000, 0x3, 0x8, 0x80f9d7d, 0x5, 0x5, 0x54b, 0xdd, 0xfffffffc, 0x0, 0x7, 0x8, 0xfffffffc, 0x3, 0x4, 0x0, 0x7fff, 0x8001, 0x5, 0xa, 0x3, 0xffff, 0x703f, 0x8, 0x763d, 0x94c, 0x92, 0xce, 0xc, 0x7fff, 0x7, 0x3, 0x890e, 0xef4, 0x4, 0x8, 0xff, 0x3, 0x3, 0x9cbb, 0x5, 0x1, 0xd021, 0x3, 0x1000, 0x5, 0xff, 0x4, 0x3ff, 0x2, 0x3, 0x5, 0x81, 0x8001, 0x9, 0xd, 0x5f04, 0x6, 0x4, 0xe, 0x964, 0x5, 0xff, 0x8, 0xfffffffe, 0x4, 0xc, 0x40, 0x5, 0x5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x80000000, 0x7, 0x7, 0x101, 0x7b98, 0x3, 0x7f260000, 0x9, 0xff, 0x7, 0x9, 0xc, 0x9, 0x7fffffff, 0x5, 0x7, 0x4, 0x3, 0x8, 0x8, 0x4, 0x83e, 0x7fff, 0x7, 0x9, 0x3, 0xca5d, 0xffffffff, 0x1000, 0x1, 0x0, 0x3, 0x3, 0x79, 0x9, 0x51e6, 0x46, 0xb, 0x1, 0x10000, 0x6, 0x1e00, 0x6, 0x8, 0x1, 0x45495d9b, 0xba, 0x2, 0x2, 0x7, 0x8, 0x9, 0xfffffff7, 0x1, 0x2, 0x9, 0x80000001, 0xc613, 0x2, 0x2, 0x81, 0x3, 0x9, 0x8, 0x6, 0x9, 0x0, 0x5, 0x5, 0x349, 0x1, 0x1, 0x9, 0x6, 0x1, 0x9, 0x5, 0x8001, 0xe, 0x5, 0x10001, 0x8000, 0xf50a, 0x6, 0x85a, 0x4, 0xc3, 0x3, 0x5, 0x8, 0x10000, 0x10000, 0xa, 0x1ff, 0xf, 0x2, 0x101, 0x5d4, 0xf7c, 0x6, 0x8, 0x400, 0x1, 0xffffffff, 0x6, 0x0, 0x7, 0x8, 0x8, 0x1, 0x5, 0x3, 0x8, 0x0, 0x4, 0x70, 0x4, 0x8, 0x2, 0xfa0, 0x80da, 0x5, 0x3, 0x5, 0x4e01e696, 0x3, 0xfffffffb, 0xd54, 0xb3, 0x4, 0xf7, 0xfff, 0x8, 0x1, 0x6c, 0xd9, 0x6, 0x6, 0xd0, 0x2d, 0xe, 0x542dbbe9, 0x9, 0x7a8, 0x9, 0x8, 0x9, 0x101, 0x7, 0x7fff, 0x0, 0x2, 0x7, 0x6, 0x7, 0xb59, 0x7, 0xa6ab, 0x7, 0x8000, 0x20, 0x2, 0xfd, 0x8817, 0x2, 0x9, 0x5a, 0x6, 0x80000001, 0x6, 0x3, 0x3, 0x17c7286c, 0x6, 0xffffffff, 0x0, 0x4, 0x8, 0x0, 0x401, 0x40, 0x0, 0x4b4, 0x40, 0x10, 0xf, 0x7, 0x8, 0xffff, 0x9, 0x10001, 0x3, 0x2, 0x5f6c, 0x5, 0x80000001, 0x2, 0x8, 0x2, 0x1, 0x0, 0x5, 0x4, 0x8001, 0x1, 0x7af0, 0x1, 0x0, 0x9, 0x3, 0x0, 0x3, 0x3, 0xfffffffa, 0x3ff, 0x5e9967dd, 0x4, 0x15, 0x0, 0x8, 0x3, 0xfa, 0xfffffffb, 0x2, 0x9, 0x9, 0xc25, 0x69d1, 0x4, 0x8, 0x4, 0x514c, 0x7aded2d2, 0xfffffffe, 0x400, 0x5, 0x6, 0xc48, 0xa, 0x2, 0x2, 0x0, 0x2, 0x101, 0xfffffff7, 0x1, 0x0, 0x100, 0x0, 0x8, 0x3, 0x2, 0xacf7, 0x18000, 0x5, 0x2, 0x6, 0x2, 0x2, 0x9, 0x8, 0x54, 0x81, 0xb8c, 0x10, 0x482b4b04, 0x2, 0x4, 0x7, 0x4, 0xffffa223, 0xcfb0000, 0x9, 0x8, 0x800, 0x5, 0x93, 0xe, 0x7, 0x3, 0x5, 0x4, 0xffff85f6, 0x3, 0xfffff8df, 0x8, 0x1000, 0x3f0000, 0x5, 0x3, 0x7, 0x8, 0xffffffff, 0x8001, 0x3, 0xf0b, 0xb, 0x167, 0x1, 0x8, 0x401, 0xb0c, 0x9, 0x3, 0xa9f1, 0x8, 0x0, 0x4, 0x6, 0x57, 0x2, 0x4, 0x3, 0xfffffffb, 0x7fffffff, 0x6, 0x6dc9, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0xc6, 0x4, 0x1, 0x40, 0x0, 0xa69, 0xffffe8f9, 0x43, 0x10, 0x80000000, 0x1, 0x35f, 0xc, 0xfffffffd, 0x3, 0x9, 0x7, 0x10001, 0x3, 0x80000001, 0x2, 0x6, 0x6, 0x6, 0x8, 0x3db, 0x2, 0x8, 0x5, 0xd, 0x26860260, 0x40, 0x0, 0x8000, 0x0, 0x101, 0x1, 0xffffa448, 0x3, 0xf11, 0x6, 0xfffffff9, 0x1, 0x0, 0x5, 0x8, 0x7, 0x9, 0xffff179d, 0x6, 0x0, 0x21, 0x279, 0x3, 0x7ff, 0xe4000000, 0xa, 0xfffffff7, 0x6, 0x0, 0xa, 0x5, 0x1, 0x7, 0x4, 0x3, 0xfffffffb, 0x3, 0x7, 0x5, 0x6, 0x9, 0x2, 0x1, 0x3, 0x10, 0x6d80000, 0x8, 0x1ff, 0x800, 0xa, 0x2, 0xffffffff, 0x3, 0xff, 0x1, 0x5, 0x2, 0x80000001, 0x4, 0x1, 0x2, 0x1, 0x85, 0xffffffff, 0x4b4, 0x80000001, 0x5, 0x67468d6c, 0x5, 0x1, 0x5, 0x9, 0x3, 0x5, 0x687, 0x3, 0x5, 0x5, 0x3, 0x3c, 0x3, 0xfe3e, 0x0, 0x5, 0x6, 0xfffffffc, 0x6, 0x7fffffff, 0x1, 0x0, 0x0, 0x8, 0x8, 0x5, 0xfffff3c2, 0x6, 0x3, 0x6, 0x2, 0x4, 0x5, 0x6, 0x7, 0xc8e, 0x8, 0xf, 0x3, 0x0, 0x9, 0x6, 0x0, 0x14c59023, 0x9, 0xffffff6d, 0x0, 0xf97, 0x2, 0x400, 0x7f, 0x7fff, 0x9, 0xfff, 0x9, 0x7, 0x1, 0x9, 0xb27a, 0x7, 0x7, 0x4, 0x4, 0x9, 0x0, 0x80000000, 0x8, 0x6, 0x2, 0x3, 0x6, 0x2, 0x9, 0x7, 0x10000, 0xa, 0x3, 0x6, 0x10000, 0x7f, 0x5, 0x3, 0x101, 0x0, 0x2, 0x4, 0xffffffff, 0x4, 0x5, 0x2, 0x9, 0xffffffff, 0x2, 0x3, 0x1, 0x53f, 0x0, 0x0, 0x10000, 0x7, 0x80, 0x0, 0xa, 0x8, 0x0, 0x2000, 0x572800, 0x6, 0x681, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0xffffff80, 0xfffffffb, 0xffffffff, 0x4, 0x4, 0x6, 0x8, 0x4, 0x3, 0xa, 0x80000000, 0x1, 0x8, 0x7fffffff, 0x5668, 0x1, 0x9, 0x7, 0x2, 0x9, 0x2, 0x2, 0x8, 0x925e, 0x6, 0x2, 0x9c, 0x4, 0x8000, 0xa, 0x9, 0x4, 0x8, 0x80000000, 0xfffffebf, 0x23, 0x57a, 0x8, 0x4, 0xaf, 0x2, 0x5, 0x0, 0x9, 0xffff, 0x0, 0x8000, 0x7, 0x2, 0x7, 0x7, 0x5f4, 0x5, 0xdbdb, 0x7000, 0x0, 0x27a, 0x7fff, 0xae, 0x2, 0x8, 0xfffffffe, 0x5, 0x3, 0x9, 0x10001, 0x6, 0x5, 0x7fff, 0x9, 0x4, 0xfffffff9, 0x7, 0x6, 0x9d5e, 0x7665eb43, 0x3, 0x200, 0x8, 0x5, 0x4, 0x0, 0x6, 0x401, 0x6, 0x1, 0x4, 0x3, 0x0, 0x7, 0x2, 0xe62, 0x9, 0x20000, 0x7, 0xd5e, 0x551d, 0x200, 0x2, 0xc66, 0xfffffff8, 0x5, 0x3, 0xa, 0x7, 0x9, 0x100, 0x6, 0x1, 0x4, 0x27023543, 0x1, 0x81, 0x9, 0x4, 0x1, 0xe, 0x8, 0x6, 0xe, 0x3ff, 0x3ff, 0xb6, 0xff, 0x2, 0x6, 0x5, 0x7, 0x1, 0x5, 0x9, 0x6, 0x80000001, 0xa, 0x7fffffff, 0x6, 0x0, 0x2, 0x9, 0x400, 0xa92, 0x9, 0x40, 0x0, 0x6, 0x7, 0xb, 0x40, 0x0, 0xb4, 0x40, 0x5, 0x1, 0x1010000, 0x8, 0x82c, 0x8000, 0x10, 0x2, 0xd, 0xd, 0x6, 0x3, 0xa, 0x6, 0x1000, 0xb, 0x9, 0x40, 0xffff, 0x1, 0x40, 0x6, 0xd, 0x400, 0xd56c, 0x9, 0x8, 0x4, 0x9, 0xddb, 0x9, 0x2, 0x66, 0x10000, 0x0, 0x0, 0x4, 0x4, 0x2, 0x3, 0x7fff, 0xa73, 0x9, 0xfffffffe, 0x7, 0x2, 0xbf3, 0xa0a6, 0x5, 0xb, 0x9, 0xfffffb0a, 0x8, 0x8001, 0x4, 0x5, 0xe, 0x6, 0x7, 0x1, 0x3, 0x6, 0x1, 0x58, 0xf, 0x80000, 0x100, 0x0, 0xa59f, 0xd, 0x6f6, 0x2, 0x5, 0xff, 0x80000000, 0xdfb0, 0x47ad, 0x9, 0xfffffdab, 0x5, 0x5, 0x99, 0x7, 0xffffff4d, 0xffe, 0x5f25, 0x93, 0x8, 0xe, 0x100, 0x6, 0x8001, 0x2, 0x8, 0x4, 0x4, 0x9, 0x80000001, 0x5e, 0x5, 0x6, 0x1, 0x8, 0xffff, 0x0, 0x5, 0x7f, 0x4, 0x40, 0x4000e, 0xffffffff, 0x1ff, 0x3, 0x8, 0x6277, 0x5, 0x3, 0x8, 0x0, 0x2, 0x9, 0xa, 0x8, 0x1, 0x4, 0x7f, 0x200, 0xfffffff7, 0x7, 0x6, 0xe9df, 0xff, 0x6, 0x0, 0x3ff, 0x6, 0x7fff, 0xf4, 0x9, 0xa, 0x6, 0x6, 0x7, 0x8b14, 0x3, 0x9, 0x2000000, 0x5, 0xff, 0x7, 0x80000, 0x3, 0xfffffffc, 0x5, 0x1, 0x6, 0x2, 0x2, 0xd3, 0x1, 0x3a5, 0x0, 0x99d1, 0x7, 0x7, 0x5, 0x4, 0x0, 0x2, 0x3ff, 0x0, 0x4, 0x1, 0x9bc, 0xd, 0x9, 0x200, 0x0, 0x0, 0x2, 0xd, 0x10001, 0x0, 0xfff, 0x6, 0x56b6fc16, 0x30dfc00, 0x7, 0xf, 0x380000, 0x1, 0x2, 0x9, 0x80, 0x0, 0x2, 0x8, 0x6, 0x6, 0x3, 0xd, 0x4, 0x6, 0x1b1, 0x1, 0x1, 0xfffffff9], 0x1, 0x400, 0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
socket(0x10, 0x803, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
fanotify_mark(0xffffffffffffffff, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
pipe(&(0x7f0000000180))
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='vfat\x00', 0x81, &(0x7f0000000100)='nfs\x00')
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000300)='\x00', &(0x7f0000000340)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0xa, 0x5, 0x7}}, &(0x7f00000003c0), 0x0)
pread64(0xffffffffffffffff, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)

11m46.887553642s ago: executing program 35 (id=695):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={&(0x7f0000000180)=[0x3, 0x1ff, 0x1d0, 0x7c, 0x6, 0x5, 0x9, 0x6151, 0x45671d7f, 0x1, 0x55, 0x6, 0x5, 0x3, 0x7f, 0x8, 0x5, 0x7, 0xffff621e, 0x6, 0x80, 0xfffffff8, 0x9, 0x1, 0x7f, 0x2, 0x81, 0x400, 0x4, 0x400, 0x8000, 0x7, 0x2, 0x8e11, 0xa, 0x6, 0x40, 0x3, 0x4, 0xffff8000, 0xfffffffa, 0xe4, 0x6914, 0x1, 0x5, 0x6, 0x8f79, 0xff, 0x4, 0x9, 0x20000000, 0x3, 0x8, 0x80f9d7d, 0x5, 0x5, 0x54b, 0xdd, 0xfffffffc, 0x0, 0x7, 0x8, 0xfffffffc, 0x3, 0x4, 0x0, 0x7fff, 0x8001, 0x5, 0xa, 0x3, 0xffff, 0x703f, 0x8, 0x763d, 0x94c, 0x92, 0xce, 0xc, 0x7fff, 0x7, 0x3, 0x890e, 0xef4, 0x4, 0x8, 0xff, 0x3, 0x3, 0x9cbb, 0x5, 0x1, 0xd021, 0x3, 0x1000, 0x5, 0xff, 0x4, 0x3ff, 0x2, 0x3, 0x5, 0x81, 0x8001, 0x9, 0xd, 0x5f04, 0x6, 0x4, 0xe, 0x964, 0x5, 0xff, 0x8, 0xfffffffe, 0x4, 0xc, 0x40, 0x5, 0x5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x80000000, 0x7, 0x7, 0x101, 0x7b98, 0x3, 0x7f260000, 0x9, 0xff, 0x7, 0x9, 0xc, 0x9, 0x7fffffff, 0x5, 0x7, 0x4, 0x3, 0x8, 0x8, 0x4, 0x83e, 0x7fff, 0x7, 0x9, 0x3, 0xca5d, 0xffffffff, 0x1000, 0x1, 0x0, 0x3, 0x3, 0x79, 0x9, 0x51e6, 0x46, 0xb, 0x1, 0x10000, 0x6, 0x1e00, 0x6, 0x8, 0x1, 0x45495d9b, 0xba, 0x2, 0x2, 0x7, 0x8, 0x9, 0xfffffff7, 0x1, 0x2, 0x9, 0x80000001, 0xc613, 0x2, 0x2, 0x81, 0x3, 0x9, 0x8, 0x6, 0x9, 0x0, 0x5, 0x5, 0x349, 0x1, 0x1, 0x9, 0x6, 0x1, 0x9, 0x5, 0x8001, 0xe, 0x5, 0x10001, 0x8000, 0xf50a, 0x6, 0x85a, 0x4, 0xc3, 0x3, 0x5, 0x8, 0x10000, 0x10000, 0xa, 0x1ff, 0xf, 0x2, 0x101, 0x5d4, 0xf7c, 0x6, 0x8, 0x400, 0x1, 0xffffffff, 0x6, 0x0, 0x7, 0x8, 0x8, 0x1, 0x5, 0x3, 0x8, 0x0, 0x4, 0x70, 0x4, 0x8, 0x2, 0xfa0, 0x80da, 0x5, 0x3, 0x5, 0x4e01e696, 0x3, 0xfffffffb, 0xd54, 0xb3, 0x4, 0xf7, 0xfff, 0x8, 0x1, 0x6c, 0xd9, 0x6, 0x6, 0xd0, 0x2d, 0xe, 0x542dbbe9, 0x9, 0x7a8, 0x9, 0x8, 0x9, 0x101, 0x7, 0x7fff, 0x0, 0x2, 0x7, 0x6, 0x7, 0xb59, 0x7, 0xa6ab, 0x7, 0x8000, 0x20, 0x2, 0xfd, 0x8817, 0x2, 0x9, 0x5a, 0x6, 0x80000001, 0x6, 0x3, 0x3, 0x17c7286c, 0x6, 0xffffffff, 0x0, 0x4, 0x8, 0x0, 0x401, 0x40, 0x0, 0x4b4, 0x40, 0x10, 0xf, 0x7, 0x8, 0xffff, 0x9, 0x10001, 0x3, 0x2, 0x5f6c, 0x5, 0x80000001, 0x2, 0x8, 0x2, 0x1, 0x0, 0x5, 0x4, 0x8001, 0x1, 0x7af0, 0x1, 0x0, 0x9, 0x3, 0x0, 0x3, 0x3, 0xfffffffa, 0x3ff, 0x5e9967dd, 0x4, 0x15, 0x0, 0x8, 0x3, 0xfa, 0xfffffffb, 0x2, 0x9, 0x9, 0xc25, 0x69d1, 0x4, 0x8, 0x4, 0x514c, 0x7aded2d2, 0xfffffffe, 0x400, 0x5, 0x6, 0xc48, 0xa, 0x2, 0x2, 0x0, 0x2, 0x101, 0xfffffff7, 0x1, 0x0, 0x100, 0x0, 0x8, 0x3, 0x2, 0xacf7, 0x18000, 0x5, 0x2, 0x6, 0x2, 0x2, 0x9, 0x8, 0x54, 0x81, 0xb8c, 0x10, 0x482b4b04, 0x2, 0x4, 0x7, 0x4, 0xffffa223, 0xcfb0000, 0x9, 0x8, 0x800, 0x5, 0x93, 0xe, 0x7, 0x3, 0x5, 0x4, 0xffff85f6, 0x3, 0xfffff8df, 0x8, 0x1000, 0x3f0000, 0x5, 0x3, 0x7, 0x8, 0xffffffff, 0x8001, 0x3, 0xf0b, 0xb, 0x167, 0x1, 0x8, 0x401, 0xb0c, 0x9, 0x3, 0xa9f1, 0x8, 0x0, 0x4, 0x6, 0x57, 0x2, 0x4, 0x3, 0xfffffffb, 0x7fffffff, 0x6, 0x6dc9, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0xc6, 0x4, 0x1, 0x40, 0x0, 0xa69, 0xffffe8f9, 0x43, 0x10, 0x80000000, 0x1, 0x35f, 0xc, 0xfffffffd, 0x3, 0x9, 0x7, 0x10001, 0x3, 0x80000001, 0x2, 0x6, 0x6, 0x6, 0x8, 0x3db, 0x2, 0x8, 0x5, 0xd, 0x26860260, 0x40, 0x0, 0x8000, 0x0, 0x101, 0x1, 0xffffa448, 0x3, 0xf11, 0x6, 0xfffffff9, 0x1, 0x0, 0x5, 0x8, 0x7, 0x9, 0xffff179d, 0x6, 0x0, 0x21, 0x279, 0x3, 0x7ff, 0xe4000000, 0xa, 0xfffffff7, 0x6, 0x0, 0xa, 0x5, 0x1, 0x7, 0x4, 0x3, 0xfffffffb, 0x3, 0x7, 0x5, 0x6, 0x9, 0x2, 0x1, 0x3, 0x10, 0x6d80000, 0x8, 0x1ff, 0x800, 0xa, 0x2, 0xffffffff, 0x3, 0xff, 0x1, 0x5, 0x2, 0x80000001, 0x4, 0x1, 0x2, 0x1, 0x85, 0xffffffff, 0x4b4, 0x80000001, 0x5, 0x67468d6c, 0x5, 0x1, 0x5, 0x9, 0x3, 0x5, 0x687, 0x3, 0x5, 0x5, 0x3, 0x3c, 0x3, 0xfe3e, 0x0, 0x5, 0x6, 0xfffffffc, 0x6, 0x7fffffff, 0x1, 0x0, 0x0, 0x8, 0x8, 0x5, 0xfffff3c2, 0x6, 0x3, 0x6, 0x2, 0x4, 0x5, 0x6, 0x7, 0xc8e, 0x8, 0xf, 0x3, 0x0, 0x9, 0x6, 0x0, 0x14c59023, 0x9, 0xffffff6d, 0x0, 0xf97, 0x2, 0x400, 0x7f, 0x7fff, 0x9, 0xfff, 0x9, 0x7, 0x1, 0x9, 0xb27a, 0x7, 0x7, 0x4, 0x4, 0x9, 0x0, 0x80000000, 0x8, 0x6, 0x2, 0x3, 0x6, 0x2, 0x9, 0x7, 0x10000, 0xa, 0x3, 0x6, 0x10000, 0x7f, 0x5, 0x3, 0x101, 0x0, 0x2, 0x4, 0xffffffff, 0x4, 0x5, 0x2, 0x9, 0xffffffff, 0x2, 0x3, 0x1, 0x53f, 0x0, 0x0, 0x10000, 0x7, 0x80, 0x0, 0xa, 0x8, 0x0, 0x2000, 0x572800, 0x6, 0x681, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0xffffff80, 0xfffffffb, 0xffffffff, 0x4, 0x4, 0x6, 0x8, 0x4, 0x3, 0xa, 0x80000000, 0x1, 0x8, 0x7fffffff, 0x5668, 0x1, 0x9, 0x7, 0x2, 0x9, 0x2, 0x2, 0x8, 0x925e, 0x6, 0x2, 0x9c, 0x4, 0x8000, 0xa, 0x9, 0x4, 0x8, 0x80000000, 0xfffffebf, 0x23, 0x57a, 0x8, 0x4, 0xaf, 0x2, 0x5, 0x0, 0x9, 0xffff, 0x0, 0x8000, 0x7, 0x2, 0x7, 0x7, 0x5f4, 0x5, 0xdbdb, 0x7000, 0x0, 0x27a, 0x7fff, 0xae, 0x2, 0x8, 0xfffffffe, 0x5, 0x3, 0x9, 0x10001, 0x6, 0x5, 0x7fff, 0x9, 0x4, 0xfffffff9, 0x7, 0x6, 0x9d5e, 0x7665eb43, 0x3, 0x200, 0x8, 0x5, 0x4, 0x0, 0x6, 0x401, 0x6, 0x1, 0x4, 0x3, 0x0, 0x7, 0x2, 0xe62, 0x9, 0x20000, 0x7, 0xd5e, 0x551d, 0x200, 0x2, 0xc66, 0xfffffff8, 0x5, 0x3, 0xa, 0x7, 0x9, 0x100, 0x6, 0x1, 0x4, 0x27023543, 0x1, 0x81, 0x9, 0x4, 0x1, 0xe, 0x8, 0x6, 0xe, 0x3ff, 0x3ff, 0xb6, 0xff, 0x2, 0x6, 0x5, 0x7, 0x1, 0x5, 0x9, 0x6, 0x80000001, 0xa, 0x7fffffff, 0x6, 0x0, 0x2, 0x9, 0x400, 0xa92, 0x9, 0x40, 0x0, 0x6, 0x7, 0xb, 0x40, 0x0, 0xb4, 0x40, 0x5, 0x1, 0x1010000, 0x8, 0x82c, 0x8000, 0x10, 0x2, 0xd, 0xd, 0x6, 0x3, 0xa, 0x6, 0x1000, 0xb, 0x9, 0x40, 0xffff, 0x1, 0x40, 0x6, 0xd, 0x400, 0xd56c, 0x9, 0x8, 0x4, 0x9, 0xddb, 0x9, 0x2, 0x66, 0x10000, 0x0, 0x0, 0x4, 0x4, 0x2, 0x3, 0x7fff, 0xa73, 0x9, 0xfffffffe, 0x7, 0x2, 0xbf3, 0xa0a6, 0x5, 0xb, 0x9, 0xfffffb0a, 0x8, 0x8001, 0x4, 0x5, 0xe, 0x6, 0x7, 0x1, 0x3, 0x6, 0x1, 0x58, 0xf, 0x80000, 0x100, 0x0, 0xa59f, 0xd, 0x6f6, 0x2, 0x5, 0xff, 0x80000000, 0xdfb0, 0x47ad, 0x9, 0xfffffdab, 0x5, 0x5, 0x99, 0x7, 0xffffff4d, 0xffe, 0x5f25, 0x93, 0x8, 0xe, 0x100, 0x6, 0x8001, 0x2, 0x8, 0x4, 0x4, 0x9, 0x80000001, 0x5e, 0x5, 0x6, 0x1, 0x8, 0xffff, 0x0, 0x5, 0x7f, 0x4, 0x40, 0x4000e, 0xffffffff, 0x1ff, 0x3, 0x8, 0x6277, 0x5, 0x3, 0x8, 0x0, 0x2, 0x9, 0xa, 0x8, 0x1, 0x4, 0x7f, 0x200, 0xfffffff7, 0x7, 0x6, 0xe9df, 0xff, 0x6, 0x0, 0x3ff, 0x6, 0x7fff, 0xf4, 0x9, 0xa, 0x6, 0x6, 0x7, 0x8b14, 0x3, 0x9, 0x2000000, 0x5, 0xff, 0x7, 0x80000, 0x3, 0xfffffffc, 0x5, 0x1, 0x6, 0x2, 0x2, 0xd3, 0x1, 0x3a5, 0x0, 0x99d1, 0x7, 0x7, 0x5, 0x4, 0x0, 0x2, 0x3ff, 0x0, 0x4, 0x1, 0x9bc, 0xd, 0x9, 0x200, 0x0, 0x0, 0x2, 0xd, 0x10001, 0x0, 0xfff, 0x6, 0x56b6fc16, 0x30dfc00, 0x7, 0xf, 0x380000, 0x1, 0x2, 0x9, 0x80, 0x0, 0x2, 0x8, 0x6, 0x6, 0x3, 0xd, 0x4, 0x6, 0x1b1, 0x1, 0x1, 0xfffffff9], 0x1, 0x400, 0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
socket(0x10, 0x803, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
fanotify_mark(0xffffffffffffffff, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
pipe(&(0x7f0000000180))
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='vfat\x00', 0x81, &(0x7f0000000100)='nfs\x00')
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000300)='\x00', &(0x7f0000000340)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x7, 0xa, 0x5, 0x7}}, &(0x7f00000003c0), 0x0)
pread64(0xffffffffffffffff, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)

10m45.407428353s ago: executing program 36 (id=832):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)

8m21.042152756s ago: executing program 37 (id=1203):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x835, &(0x7f00000028c0)={0x0, 0x679d, 0x0, 0x2, 0x3ca}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000002940)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240), 0x0, 0x2400c0c7, 0x1})
io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x8)
syz_open_dev$MSR(0x0, 0x0, 0x0)

5m19.873310514s ago: executing program 2 (id=1738):
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x1439c2)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

5m18.602739287s ago: executing program 2 (id=1742):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140), &(0x7f0000000180))
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES8], 0x28)
syz_io_uring_setup(0x217e, &(0x7f0000000240)={0x0, 0x8fea, 0x20, 0x0, 0x1df}, &(0x7f00000001c0), 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x2500060)

5m18.043901709s ago: executing program 2 (id=1744):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000284)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})

5m16.857356613s ago: executing program 2 (id=1746):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000200)='./file0\x00', 0x400)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x4)

5m16.613049052s ago: executing program 2 (id=1748):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000000340)="67bb3762a414267911d925db865c0e6d1f5bfafaff000000f9fbf747437fb245094b271809bffcf94c7a71efe76d751a6e9f3731a91e09593e47e8f458b7d21d0ec76e9b754da5457ff57751c4ab7a4219da71f18e8d02fc7ad3ea1033b17d1620", 0x61)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffd, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x16, &(0x7f0000000940)=ANY=[@ANYRES64=r0], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000002e000100fefff7ffffdb018006000600800a00"/36, @ANYRES32, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x48815}, 0xc840)

5m14.770458233s ago: executing program 2 (id=1751):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000080)={[{@nodots}, {@dots}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x254, &(0x7f0000000580)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf1f}, 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), 0x0, 0x2000000}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)

4m59.606618004s ago: executing program 38 (id=1751):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000080)={[{@nodots}, {@dots}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x254, &(0x7f0000000580)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf1f}, 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), 0x0, 0x2000000}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)

4m30.997614469s ago: executing program 9 (id=1837):
futex(0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffd, 0x1)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)

4m27.526266249s ago: executing program 9 (id=1845):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f00000002c0)=0x36c4, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
socket$packet(0x11, 0x3, 0x300)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00')

4m26.092356781s ago: executing program 9 (id=1846):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept$alg(r0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x1000000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)

4m24.016738978s ago: executing program 9 (id=1848):
syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x10301)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000284)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})

4m17.150830397s ago: executing program 9 (id=1863):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
get_robust_list(0x0, 0x0, &(0x7f0000000280))
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

4m16.10700932s ago: executing program 9 (id=1866):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
epoll_create1(0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
tkill(r2, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='inet_sk_error_report\x00', r0}, 0x68)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000)

4m0.926856238s ago: executing program 39 (id=1866):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
epoll_create1(0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
tkill(r2, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='inet_sk_error_report\x00', r0}, 0x68)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000)

3m3.806257176s ago: executing program 0 (id=1902):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000000}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpriority(0x2, 0x0, 0x8000000000000000)

3m3.370646308s ago: executing program 0 (id=2036):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3m3.241669616s ago: executing program 0 (id=2037):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)

3m2.862749268s ago: executing program 0 (id=2042):
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3"])
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
syz_open_dev$loop(0x0, 0x2, 0x2001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r5=>0x0})
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2}, 0x14)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)

2m47.615739113s ago: executing program 40 (id=2042):
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3"])
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
syz_open_dev$loop(0x0, 0x2, 0x2001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$radio(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r5=>0x0})
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2}, 0x14)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)

2m15.301632083s ago: executing program 6 (id=2240):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r0}, 0x10)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7af", 0x5c4}], 0x1}, 0x0)

2m13.102816514s ago: executing program 6 (id=2246):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a69", 0x2f9}], 0x1}, 0xff00)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000008000000000000180100002020702500000000002020207b1af8ff00000000bfa100000200000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
close(r6)

2m9.108913269s ago: executing program 6 (id=2260):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

2m7.853668606s ago: executing program 6 (id=2267):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x64, &(0x7f0000001080), 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x50}, 0x0)

2m7.739394972s ago: executing program 6 (id=2268):
mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00008b2000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000685000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000062d000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
dup3(r2, r0, 0x0)

2m7.451279551s ago: executing program 6 (id=2270):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
get_robust_list(0x0, 0x0, &(0x7f0000000280))
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1m52.152721164s ago: executing program 41 (id=2270):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
get_robust_list(0x0, 0x0, &(0x7f0000000280))
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1m6.358471006s ago: executing program 5 (id=2440):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xbf9d5a5a4c2f3738)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

1m4.648319037s ago: executing program 5 (id=2453):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208000600000004010400160040001e4003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x0)

1m2.934596498s ago: executing program 5 (id=2459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m2.079772817s ago: executing program 5 (id=2463):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x240448c1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

58.241779435s ago: executing program 5 (id=2473):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x84)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000cc80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f00000003c0)="eb7e2e9f02c0f0f569c47bb9e2e4c788b51b", 0x12}, {&(0x7f0000000400)="071ef1f30f475dbdea9c9b991426430a9910291316d58fc9d0cb2890084cdc3c52c4d120a1bf5b1e4f91407b30c7307bcf45891f26c8791808327ff7f299848f4ee74d4ec55fbfdd696473d221b99c7ca724b7a79ca5c88f4b66fb8ce20f6644e9fc3022c50e1b36a4b32bfe475522e52639b561b0d012d3e88fd8ebac33e9a4b06be5b7a17d51", 0x87}, {&(0x7f00000004c0)="170c756ba6442993a3da1d173b4d79986bb6274427ed53451ead9169c63a81324d196bb87639631979c05659f0b7ea24e15db7356b3d55f3c2a992368d8b3cd1e9200e2346750c654441ac48d28b31569639bc964079e390b4ece8743677f1cb239ea276b5e7500f6171b3efd89fe5f6a344140262102bc439e1742e0ef860186f9d13d5a2e0356f4212d658129ba12ae50b17bb7370ff0aaad01c34a34275e2cb4b6387bf2a11521249fd5065ea79746eb64e41f54c60b728eb58feb900bd819a0b60a1a4ac4f80e09d1469fc0cc4f34231a942", 0xd4}, {&(0x7f00000005c0)="790e8175992077af44347372105d7df355bffa9d76a0dfd785454ca6a6f277593e6102b85e27241bc6b6723d86af04ec3ec3d4accbb2851cb0dcd5f47f1a30fb142ec8c58ffee3249247b5c1e8373b96aebe5f4ab53ddc4b1162d1e0b46d6188552fcbad847b3f31a4aee8a9d96d6ae11d08aae51067b99f998f709924fc2d6d6595f276d807c6b0bc9c41d3b4d4fe8a3db417b342fc41407e21f31673e9b5a83fce60250a729d609d7db86019b7c44a914905a16889352672d55e1048", 0xbd}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="835c280759dda6b4ecb042e63647b13df0c1eb34a86affff4a9fef8b9aeb363361e8ce948a7c355eacb8067006429bef730d", 0x32}, {&(0x7f0000000700)="1b8f2162e928accb4173f0e57226e6a9608c5657ed4d7f5be78d24570462f143d7d53dbf4e4daf41c57560baf895ef7117017614d622c1bce25d87cb31772f569bbda90cc215feeb39", 0x49}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)}], 0x9, &(0x7f0000001a40)=[@rights={{0x24, 0x1, 0x1, [r0, r5, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x88, 0x48840}}, {{&(0x7f00000029c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002a40)="0948fd94a9ea03e590b5b5550f1747feb6289bb8806b9ba649299924f38f58b7696bf724ed9c016b5a142bc1a2d895d2ac617171a22712e3155f91267e56b915226eae24848e9fb13662e5214b50787236450474f7da256251945e2ef08c5ed1c28579ff83e8330609a5f4edd9cf6c9ac1f413b77b0d6707c6e2d1d0373ffc2b1126c42e68c5ee4e011daf0137fae20a0e4e77eb6fe8afd8de3499624159a479c6a5b1cc8daecbef", 0xa8}, {&(0x7f0000002b00)="b02fb6c5f1bac780a4c41d6bb87c85467e82c42a7d9b1cf1debbd94d82a26e41ba00e24a19455d47097adff230ce3cdd96ba0f95ca94050c76941bdc7dac75c8a40866d6b4ddf5d0c236c026869d24cf4b0aa22dace611985bbc58a97d431541efcba6fab089e6afa30ac3379970c321034f08748294f78e11ef27c1d285d65723ee7c9b6217cd0cc336616b428aac817c1b5939d3c854f2180b653e82657ee1013b8cc6e11f5a47153e402adde828fd5a04ce16019258725a20128e187a929e0ab01b026eb188526f1b03ad0be2a9ac98d9c4792d4f8cd2b6bcbc9583b119cbcc79074da5f147a766c1bfc04abb03c6115fbd77d627b7dc0b7cf318591a8a68725a38a8c5e6c236080f831eb7d0e04728fa63bcd812f224aad6a3ef1fa7256b30dbe37e524165cdb1c0df9a9f29a37f6a0609dcddab8df9c5403ed36d605642f0f0a7756b4aed676f17584c52c0269013e2ce490cbc1ea815c9082c47c52f835f99ef986e8fab2ead605418df69cf4977c5cc185f608246bdb6f87db0018a7b12df34df8d05bb7b6d713d8c2049c7303c7fcd47868a41cb370264f3ddabdf6d890206c900b59408ce2af258bc964363b88a9635d0291deef1ff4125bb929e7d0d714bcccc2a2e10f2c6bbb9d84114b7929908d26cd9a9ac3f0b1d6e08200d6a4f716e97268ec1fe74dece9faae342404a23331c6f149f6b2cf46071f6ada0251162d730ae1b2b2bd3e6a2556aed78b959ffb8096a4b5fc1b9f1428a285cc5ce20f766fe7ecc25aa9fb83daab50179f5a270d80f8f7906933576ae2d9bbdd9a5b764e913eb2b227968aef017b2a2fab8834a95213b11fcbaf51ee348f8fc41d6bfcaa7c003d43dc26c3235c0a8cd0cae0624c36c348a8089ea87add7bb4eaa8a49590fe55ebda78bc19ca9284bedde21352174ff7392123110894ebb3896116c38a35682247b5a0302f728eb90017a2a782c30b2b0114df0c426d46f9bd1d7332e5e8446beb7d8c0f9b437da967fb3a2cd15e6ce60c3b83f001a878e3eae9938a50e356bea39e66ce2a17760f9b4a28a86a8aa425f7a80d909d91d500429c5437cd7ea143cca5cb5aa6c1f3d5a1fabfb29e078d9c3068e864be675bbd0fd8c826a750227baf39dcfddbc9e4e6cd1095ea7e471944d0a9fdc665c4ec15bcfcd466fa9bd7d00d7216c55f537f9e89f83eb0474dcbf3ba2082ef65bc649313c0a6d12bbf25a07fd4704ca793d9b19d84369d1228780d2f6f8e7990f215468cd383d89eaa216ae99583249c9214d015ecd14915236ed90ecb66dccff701789a12fcf12dd96e04a60fa814969d6a07c5e26254e07ec633e43246fcd0a2470b1bf85dac467c49f425b40fb50193fb3d96b1b4ef8fa77e4a741fd9677f132e8dc21fac68101f473d31c3f26b13da6a8d706dfd6b87356bcf52b051d6e4794540bd9212c8d8c72abf8f4834f04fc32d9e6488c7dcd120cba3d5ab84db5eb92dbd0f89cb86c75ad4404f117814c079f4dfce5b41e1c73476e0163a0dddbfb2ba66f7a3c59cf167b97230f0913ba35fbf9a49e0f176aa2c62c92a0434d61b5662ea789c4954ddca58adb67cedb1499b13037a9f6646ccbc55da567bf01f60c0465f8dea763613820054df7a198a0d6bad756e2c3dbad61f9328fb42c8da9f8f6bd0ada0384797b662119b2661e1cbc1622b9845ab319a7fed2f1461bf09f2cb2ce9cbd35e5eff6c7f0377b0590a202cbcc3dbe6d8bfe87d4f829c3e52a82fef0fa0184f664a808dfd6a14fcdbf33211a7dd5ba4330e7f6016706e54d50b0fff9df3ee97217790ef57a384f2f07149733245586049a58bd3f22bc45e44876d86cceabbe7bbadc5259cb71161bb202ecc6295a849b6ace53430d08bd31179bd495defb961d5a2d52de32a8e7d0837f525c255b1205c2017a59db11a4e813edd885002269e18bee54b603f6ee55edba80f3c14d5284ee75c6b5689169ed1ac28954822ec32c60da6ff2805143369dbe945b7037023c4e48d2cc6e10ecd408f4ee9816a7232832856adffa0ab1208283e1f2df5c8ec608f9553ba1c321e05c7ae306475fc3f16c6f0b0206cf394be569dcc8cba7e0260708767699e730639fa0c457349a76fbf775a19d829282f52ef3a44bf159cf9987b7def570c357bd99bea338a41f048a550d7dd64bc8006796b986a0753e650ec01f667133bd5cbffd123907e4e4da60c8021d5c817efc413561b68c453ac60d73b45437000d6fad92a334d4a34b554a1c6cc3c6172a47e3e255427c6de4da6cd5cd830ed35dae043fcb14a668ff7c3e924f742551cf94f4ec0f20b16c48aee7af9efb0ff45daf3c0bd94d5bc4b9ea0bf164220bba5aa9ea392162d75167e3e248d322ddf3e4f1201199ea3bcbeb745b0c64c46af07d19008f3df0e73cb4b73a93d54c97729b4dff8137ea109969202414e49fe0170891fcf5f62c143df155285e383469a86d8f3b41f26d42c0aa4e44883f297cc39188c803755a9bad165e52a8596fd32d36bf109f27ea6156cc5d5313031e000e232976d956d5c6f12879b8a3fd0c50c792e4f007c36c553c32744bfeb6e656a8afc3ec62ffde0545a352665e4fd61686446326c33351b18dca302bb57c942ad84fda2ee0b3beb2aa5e8e8532126d2bccfd779793e24e22bb5656f2e6e3c3fd46238db619d6fe39fcee0316974f8e96e196b4dd6ac57bee5d2ac469c402f7c6800b78613ef7a076b6495555da44a73013778bc0860eb740d3e7843d0f9ab15486dbb475a063f51096ddf0375d86bd9f7b94662ced67c3f00aa6964329e88c4f8e61f13bb9022bab5eebee0f99da9a077280f6acbf7f4aae42011db502cd2bb5baeba32df9d64ede7ac2e79d8c5b0c988cb06591bdf20e7043d03f91d7133969dedf5741938019c9bde493654d693ebfc32f0486f1bc5d1d25b51ae627afff122001ddca5ae48b37fd1d597b53752d7f3ed912628c265712a0bb9e49dbffed59a8083a921a687f430a5d64b8e2937105ed300d74ed84eb63d1afe8e493b0e8b8f4cd640e511a82c360206517114c55f6bba2e38ac852dee31dd74ecb19b4ac1015ded7e93e2051c1282337371e1839f7d4f0b80b0573cc43c20b9372c19d0bbf5a5b5a6e16c88a2524ae545a0b93a984b134e0f340b40a5d0f131c8286d1ac0e6e1088533b0e192f38b98e45e124f780ad3d9dfc14075df06548f7df73bce554611c6b30cd21569b1525e3668824ab1f99ac0cb5c6e41219c9ee1df30150c5fc15a6b0f4ceadda4b25fa0bd26624aaab052cded9797d90b233de08a74aec4a55c8552cf97c1dd09b0f7add781e5c18a77faf3c1fbcc8264ce24c61e1bb7df1f110c6a216d8e7c20429fe0e46a34ad31b906718d9b904c9d50f68b077bb0093802817a6e6cac34bdd8b4b678be1a000b04bd8be6cd2bd6fbff5d56b63cef8a2fea67f8f458aa75824866f3dad1befca335579049b1d90d1df8b594eedb4b2421147ae1e99bfc42576a15091c5852ec9d8bcd2f3ee5064ea467b7ba13a3dce91f0a83febf9ca3eed064b122ab4d215688da522eef318b7fd765afc225247d8eb788c269fdbf3b47d1439ba9ed1241bedf9cbeddcf23e856129839963f3013a7831fa4d21ac18bbf4a9f7b9257a7abff041907cd29e5c919de4f1bb3e35baf273380cf66797dba529ee9e21eea281e5f4bcd6bf01eb78c6cb139c2c30e0464911d39323dc36f50ba7a10ec9e9ee3dc7157da176575f08e65805d5698fe559dcb4b2fae7a9ac5ad2ce87baa3cefee0fac057af2c9d97a328e07092a6318e3ae0b320b128a319505ef56ddc4f50bfd8fb77e0d7b8e11c6be1baf8e024b918ad0949733c900b1f039cd3dc3cf011318125b7304154220c1eab27f725893525756ee7bda521e04509d3284b66e092b38693c54c938bc9b44ca8220add9ade43687e257d6c7d0c2c136a78269a9234406a80d0bf684531a54fc0f8401fcc2c5f6f2fda4855265bf3bbc9aa86d7d7f36e86aabe2a66da416161231803bc143cac4c26ce5e5218cf0eac75c1d69d80001f59b2732076aaf27c9e39958e379501615f673956d842efcf0ccf62e0387f93b905f168aa7f9fd8a21a0724708f2cbdea3f02c32b23526b260de2317d00e13cf6090488baded8c12229ea850266c34a18ea2a4f89addc261ab474c3efeb701f4feb538833d0ed4860e177aad7b93e310b3cc9ed88a779cfb9032de6e3f7ee6b5c638024d9da546ac524cd72e345ed67cd3215a5e047e83bedcf6988b3428d1416c5761e3296638db30379931e20d24360ab29916ccb22d0545ba5cda87a1a47fa3333b27bf7711929bde549047fe87fe8f3", 0xc00}, {&(0x7f0000003b00)="fd48cd4224169a186db6323560ab6d563262212695e0165bcecf467de69f98b915d7a386d978d075cf9b4dc88d82ba3f99ac6fe87d9cfa55cd4736163cbc9d3acd0970db6eb408cb16e60d2855c27ccda761ed777d591d32aa01aa4d9ba57fa18844d369d970faca719aecb01b308d70e4f4d712b630cf95933ed645b22aeeecf783128a2bfb66251c9293b586e1931dea5b1ff7e01f99c7797f4c2abcbba459d0cf41fa7d", 0xa5}, {0x0}], 0x4, &(0x7f0000003d80)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r5, r2, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108, 0x4c814}}, {{&(0x7f00000091c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009400), 0x0, &(0x7f000000b4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c}}], 0x80, 0x20000005}}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000b600)="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", 0xbfc}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f000000c6c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f000000c840)=[{&(0x7f000000c740)="d8b44ed26a6b21c03555ec78ba3e181a0f02a181f7860cf24be93fcaf1ff0a59d8132dbc20f550800433c519383c7758b1143b9e7914f9adea77dad45ab6cc8450d44cd2338e56609f049abff9834d3c04f0bdb384f9d8a027da21d5fed9ab08029d227f39035b9e28fb91901651686a852794e2439fe62cfe1840de8c05029d046eda788e2a543be90ce5aab0ddf18e0b24561e0865c90992efdb6f09432d17942f6976ebe3c75a603aef387a05b3827997dbb4ef53bc52ad1c4111853ff6b6c30aacf8d8ad491c5d93788cc1da505e1554bc1a9d22edc71db7", 0xda}], 0x1, &(0x7f000000cb40), 0x0, 0x20000001}}], 0x5, 0x0)

56.325310521s ago: executing program 5 (id=2478):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, 0x0, 0x20044000)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r6 = syz_open_dev$dri(0x0, 0x7, 0x220042)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r9=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9})
syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280))
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0)

41.086884858s ago: executing program 42 (id=2478):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, 0x0, 0x20044000)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r6 = syz_open_dev$dri(0x0, 0x7, 0x220042)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r9=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9})
syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280))
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0)

22.293008487s ago: executing program 4 (id=2571):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)

18.198696193s ago: executing program 4 (id=2580):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000180)={0xa, 0x4e21, 0xfffffffd, @empty, 0xfffffff9}, 0x1c, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000029000000340000000985"], 0x18}, 0x8050)

17.281993041s ago: executing program 4 (id=2586):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r1, r2, 0x0, 0x3ffffffffffffa)

16.274260108s ago: executing program 7 (id=2587):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@oldalloc}, {@block_validity}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@i_version}, {@nomblk_io_submit}, {@nodioread_nolock}]}, 0x6, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000600)={[{@nobarrier}]}, 0xfe, 0x269, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1acd060, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00')
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getgroups(0x0, 0x0)
truncate(&(0x7f0000000000)='./bus\x00', 0x9471)
finit_module(r0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec48"], 0x208}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)

15.901383374s ago: executing program 4 (id=2589):
sendmsg$inet(0xffffffffffffffff, 0x0, 0xff00)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
close(r5)

13.798490086s ago: executing program 7 (id=2594):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_io_uring_setup(0x48dd, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x800, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x80800)

12.678265411s ago: executing program 1 (id=2597):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000180)={0xa, 0x4e21, 0xfffffffd, @empty, 0xfffffff9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000029000000340000000985"], 0x18}, 0x8050)

12.053469026s ago: executing program 1 (id=2599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x3b0}}, 0x0)

11.815695891s ago: executing program 7 (id=2600):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000000c0)=""/111)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open(&(0x7f00000001c0)='.\x00', 0x10000, 0x1f6)
r6 = socket$inet(0x2, 0x3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x94)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)

11.586728929s ago: executing program 3 (id=2601):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$usbfs(0x0, 0x77, 0x103341)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
close_range(r0, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000100))
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x1, @default, @netrom={'nr', 0x0}, 0x4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

11.21069494s ago: executing program 1 (id=2602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

9.893589404s ago: executing program 1 (id=2603):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x38}, 0x0)

9.607561378s ago: executing program 1 (id=2604):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

9.477079992s ago: executing program 1 (id=2605):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1, 0x7, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]})
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000240)={0x0, 0x300, 0x8, 0x14, 0x200, &(0x7f0000003c40)="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"})

7.527277378s ago: executing program 3 (id=2607):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300))
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x21, 0x2, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029", @ANYRES16=r0], 0xfe33)

7.495215212s ago: executing program 4 (id=2608):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)

7.423434592s ago: executing program 7 (id=2609):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

7.144516022s ago: executing program 3 (id=2610):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000180)={0xa, 0x4e21, 0xfffffffd, @empty, 0xfffffff9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000029000000340000000985"], 0x18}, 0x8050)

6.909354403s ago: executing program 3 (id=2611):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_io_uring_setup(0x48dd, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x800, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x80800)

5.622544311s ago: executing program 3 (id=2612):
mkdirat(0xffffffffffffffff, &(0x7f0000002000)='./file1\x00', 0x183)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/4, 0x4)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='dd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=','])
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000000c0)=ANY=[@ANYBLOB='umask=00000000000000000000126,codepage=iso8859-14,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d30303030303030303030303030303030303430303030342c692c706172743d3078303030303030303030303030303830302c63726561746f723d5863953a2c00"], 0x11, 0x31c, &(0x7f0000000940)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x705, 0x70bd26, 0x25dfdbfe}, 0x10}}, 0x80)

5.489660469s ago: executing program 4 (id=2613):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f00000047c0)=""/4039, 0xfc7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000007c0)=""/45, 0x2d}, {&(0x7f00000002c0)=""/178, 0xb2}, {0x0}], 0x7}, 0xbf9d5a5a4c2f3738)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

5.488836854s ago: executing program 7 (id=2614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

4.271036712s ago: executing program 8 (id=2616):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x38}, 0x0)

3.925200624s ago: executing program 8 (id=2617):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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")

3.367522828s ago: executing program 7 (id=2618):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x0, 0x9, 0x1, 0xffffffff, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0xfdf9, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xffff68a8, 0x9, 0x7ff}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)

2.471722515s ago: executing program 8 (id=2619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x3b0}}, 0x0)

1.805826878s ago: executing program 8 (id=2620):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000000c0)=""/111)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open(&(0x7f00000001c0)='.\x00', 0x10000, 0x1f6)
r6 = socket$inet(0x2, 0x3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x94)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)

1.527288461s ago: executing program 3 (id=2621):
sendmsg$inet(0xffffffffffffffff, 0x0, 0xff00)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
close(r5)

106.936176ms ago: executing program 8 (id=2622):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000180)={0xa, 0x4e21, 0xfffffffd, @empty, 0xfffffff9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000029000000340000000985"], 0x18}, 0x8050)

0s ago: executing program 8 (id=2623):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

ck.
[  731.234535][ T6599] usb 10-1: Using ep0 maxpacket: 32
[  731.292911][ T6599] usb 10-1: no configurations
[  731.324341][ T6599] usb 10-1: can't read configurations, error -22
[  731.482631][ T8357] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.485329][ T6599] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  731.713364][T11540] loop5: detected capacity change from 0 to 512
[  731.715495][ T6599] usb 10-1: Using ep0 maxpacket: 32
[  731.740846][ T9972] Bluetooth: hci1: Frame reassembly failed (-84)
[  731.750568][ T6599] usb 10-1: no configurations
[  731.776561][ T6599] usb 10-1: can't read configurations, error -22
[  731.784782][ T6599] usb usb10-port1: attempt power cycle
[  732.294527][ T6599] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  732.485270][ T6599] usb 10-1: Using ep0 maxpacket: 32
[  733.471514][ T6599] usb 10-1: no configurations
[  733.483995][ T6599] usb 10-1: can't read configurations, error -22
[  733.793529][ T5835] Bluetooth: hci1: command 0x1003 tx timeout
[  733.805451][ T5843] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  735.369543][T11575] loop5: detected capacity change from 0 to 1024
[  735.398569][T11575] EXT4-fs: inline encryption not supported
[  735.436419][T11575] EXT4-fs: Ignoring removed nobh option
[  735.463005][T11575] EXT4-fs: Ignoring removed bh option
[  735.533472][T11575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  735.717417][T11590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  735.786524][T11575] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1471: Allocating blocks 481-513 which overlap fs metadata
[  735.857063][T11589] tipc: Disabling bearer <eth:syzkaller0>
[  735.957903][ T9466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  736.034986][ T6007] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[  736.326381][ T6007] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.044477][  T788] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  737.110761][ T6007] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  737.141089][ T6007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  737.163880][ T6007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  737.286293][ T6007] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  737.302710][ T6007] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  737.311943][ T6007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  737.362901][ T6007] usb 9-1: Product: syz
[  737.404490][  T788] usb 6-1: Using ep0 maxpacket: 32
[  737.405772][ T6007] usb 9-1: Manufacturer: syz
[  737.420365][  T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.434769][  T788] usb 6-1: config 0 has no interfaces?
[  737.442435][  T788] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  737.447029][ T6007] usb 9-1: SerialNumber: syz
[  737.451578][  T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.475119][  T788] usb 6-1: config 0 descriptor??
[  737.522578][ T6007] usb 9-1: config 0 descriptor??
[  737.802156][ T6007] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  737.809234][ T6007] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  738.022906][ T6007] radio-si470x 9-1:0.0: software version 0, hardware version 0
[  738.041781][ T6007] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  738.101981][ T6007] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  738.225200][ T6007] radio-si470x 9-1:0.0: submitting int urb failed (-90)
[  739.179220][T11629] loop9: detected capacity change from 0 to 64
[  739.201976][ T6007] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32
[  739.236931][ T6007] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22
[  739.243005][  T788] usb 6-1: USB disconnect, device number 4
[  739.326226][ T6007] usb 9-1: USB disconnect, device number 16
[  740.547282][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1491'.
[  740.613763][T11637] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1491'.
[  740.624485][T11644] loop7: detected capacity change from 0 to 1024
[  740.631784][T11644] EXT4-fs: inline encryption not supported
[  740.684253][T11644] EXT4-fs: Ignoring removed nobh option
[  740.706702][T11644] EXT4-fs: Ignoring removed bh option
[  740.831536][T11644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  740.906951][T11644] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1493: Allocating blocks 481-513 which overlap fs metadata
[  740.925135][T11644] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1493: Allocating blocks 481-513 which overlap fs metadata
[  740.934968][T11651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  741.226852][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.209042][ T5813] tipc: Node number set to 3528851934
[  743.146555][T11650] tipc: Disabling bearer <eth:syzkaller0>
[  745.861568][T11697] loop5: detected capacity change from 0 to 512
[  746.094534][ T6007] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  746.274756][ T6007] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  746.344491][ T6007] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  746.403401][ T6007] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  746.448771][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.529530][T11693] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  746.584238][ T6007] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  746.884046][ T6007] usb 9-1: USB disconnect, device number 17
[  747.171200][T11707] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1510'.
[  747.276249][T11679] loop2: detected capacity change from 0 to 32768
[  747.279618][T11707] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1510'.
[  747.434752][T11679] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  747.529426][T11679] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  747.548786][T11716] loop5: detected capacity change from 0 to 1024
[  747.613567][T11716] EXT4-fs: inline encryption not supported
[  747.642037][T11679] XFS (loop2): Starting recovery (logdev: internal)
[  747.663886][T11716] EXT4-fs: Ignoring removed nobh option
[  747.704911][T11716] EXT4-fs: Ignoring removed bh option
[  747.730591][T11679] XFS (loop2): Ending recovery (logdev: internal)
[  747.798606][T11716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  748.117120][T11716] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1511: Allocating blocks 481-513 which overlap fs metadata
[  748.262645][T10760] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  748.755475][T11727] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  748.761551][T11727] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  748.767670][T11727] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  748.773687][T11727] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  748.779749][T11727] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  750.375252][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  750.437468][ T9466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.459639][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  750.567937][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  750.634308][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  750.702865][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  750.769797][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  750.814485][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  750.814565][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout
[  750.820554][ T8735] Bluetooth: hci6: command 0x0c1a tx timeout
[  750.826590][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  750.832526][ T5846] Bluetooth: hci5: command 0x0c1a tx timeout
[  750.867227][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  750.928904][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'.
[  751.017784][T11734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  751.125662][ T3492] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  751.338221][ T3492] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  752.099398][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  752.105859][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  752.195820][T11755] veth3: entered allmulticast mode
[  752.224058][ T3492] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  752.459374][ T3492] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  752.562019][T11760] __nla_validate_parse: 14 callbacks suppressed
[  752.562039][T11760] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1524'.
[  752.654788][T11760] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1524'.
[  755.728837][T11765] loop9: detected capacity change from 0 to 32768
[  755.806945][T11765] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  755.845407][T11765] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop9": -EINTR
[  755.845879][T11765] XFS (loop9): log mount failed
[  757.254349][T11804] loop9: detected capacity change from 0 to 16
[  757.324627][T11804] erofs (device loop9): mounted with root inode @ nid 36.
[  757.400733][T11804] erofs (device loop9): corrupted dir block 72 @ nid 36
[  758.193106][T11815] xt_CT: You must specify a L4 protocol and not use inversions on it
[  758.632083][T11822] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1541'.
[  758.915682][T11822] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1541'.
[  762.119342][T11849] loop5: detected capacity change from 0 to 2048
[  762.194841][ T5923] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  762.599019][ T5923] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  762.610954][ T5923] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  762.620912][ T5923] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  762.630382][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.935965][T11846] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  762.956216][ T5923] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  763.701170][ T5923] usb 9-1: USB disconnect, device number 18
[  763.717155][T11858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  764.774519][ T5813] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  765.094145][T11870] xt_CT: You must specify a L4 protocol and not use inversions on it
[  765.544952][ T5813] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  765.648369][ T5813] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  765.684541][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  765.734450][ T5813] usb 6-1: Product: syz
[  765.754465][ T5813] usb 6-1: Manufacturer: syz
[  765.773793][ T5813] usb 6-1: SerialNumber: syz
[  766.018993][ T5813] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  766.645880][  T788] usb 6-1: USB disconnect, device number 5
[  767.386659][  T788] usblp0: removed
[  767.415082][T11883] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1558'.
[  767.556948][T11883] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1558'.
[  769.616993][T11907] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  771.269613][T11921] loop2: detected capacity change from 0 to 512
[  771.309625][T11905] loop5: detected capacity change from 0 to 32768
[  771.345586][T11921] EXT4-fs: Ignoring removed oldalloc option
[  771.365462][T11921] EXT4-fs: Ignoring removed i_version option
[  771.373529][T11905] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1566 (11905)
[  771.446899][T11921] EXT4-fs: Ignoring removed nomblk_io_submit option
[  771.476504][T11921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  771.546924][T11921] EXT4-fs (loop2): 1 truncate cleaned up
[  771.570269][T11921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  771.589240][   T31] audit: type=1800 audit(1767182555.658:96): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1573" name="bus" dev="loop2" ino=18 res=0 errno=0
[  771.666708][T11905] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  771.687033][T11905] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  772.057060][T11937] Invalid ELF header magic: != ELF
[  772.475284][T11905] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  772.475646][T11905] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  772.508404][T11905] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  772.555991][T11905] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  772.767544][T11905] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  772.825348][T11905] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  772.955575][T10760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  773.108889][T11905] BTRFS error (device loop5): open_ctree failed: -12
[  775.159158][T11974] loop7: detected capacity change from 0 to 512
[  776.756080][T12002] xt_CT: You must specify a L4 protocol and not use inversions on it
[  782.188109][T12037] loop5: detected capacity change from 0 to 512
[  782.847715][   T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  782.945985][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1603'.
[  782.964301][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1603'.
[  783.014230][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1603'.
[  783.056095][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1603'.
[  783.126114][   T24] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  783.554345][   T24] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  784.535802][   T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  786.451312][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.674583][   T24] usb 10-1: can't set config #27, error -71
[  786.717741][   T24] usb 10-1: USB disconnect, device number 16
[  793.034838][ T5923] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  793.261217][ T5923] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  793.346373][ T5923] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  793.430950][T12117] loop6: detected capacity change from 0 to 64
[  793.461996][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  793.490388][T12119] loop7: detected capacity change from 0 to 64
[  793.524453][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.626375][T12111] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  793.667355][ T5923] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  793.748847][T12109] loop2: detected capacity change from 0 to 32768
[  793.774571][T12109] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1620 (12109)
[  793.883863][ T5923] usb 6-1: USB disconnect, device number 6
[  794.096756][T12109] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  794.828145][T12109] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  794.858490][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1627'.
[  794.867491][T12124] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  794.928081][   T31] audit: type=1326 audit(1767182578.998:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d4f8f749 code=0x7ffc0000
[  794.963622][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  794.964198][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  795.002244][T12077] udevd[12077]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  795.085212][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  795.085553][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  795.568294][   T31] audit: type=1326 audit(1767182579.028:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d4f8f749 code=0x7ffc0000
[  795.635089][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  795.635756][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  795.661219][   T31] audit: type=1326 audit(1767182579.028:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4d4f8f749 code=0x7ffc0000
[  795.750641][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  795.751202][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  795.768090][T12139] syzkaller0: entered promiscuous mode
[  795.782772][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  795.783313][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  795.818123][T12139] syzkaller0: entered allmulticast mode
[  795.860513][   T31] audit: type=1326 audit(1767182579.028:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d4f8f749 code=0x7ffc0000
[  795.884207][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  795.884672][T12109] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  795.952861][T12109] BTRFS error (device loop2): open_ctree failed: -12
[  796.025749][T12139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  796.033888][   T31] audit: type=1326 audit(1767182579.048:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.7.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d4f8f749 code=0x7ffc0000
[  796.108685][T12150] loop5: detected capacity change from 0 to 512
[  796.171219][T12138] tipc: Resetting bearer <eth:syzkaller0>
[  796.217519][T12150] EXT4-fs: Ignoring removed oldalloc option
[  796.223518][T12150] EXT4-fs: Ignoring removed i_version option
[  796.307643][T12138] tipc: Disabling bearer <eth:syzkaller0>
[  796.534570][T12150] EXT4-fs: Ignoring removed nomblk_io_submit option
[  797.303891][T12150] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  797.373720][T12150] EXT4-fs (loop5): 1 truncate cleaned up
[  797.384918][T12150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  797.407207][   T31] audit: type=1800 audit(1767182581.478:102): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1631" name="bus" dev="loop5" ino=18 res=0 errno=0
[  797.924945][T12165] Invalid ELF header magic: != ELF
[  798.952172][T12177] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1639'.
[  799.148593][T12179] loop2: detected capacity change from 0 to 64
[  799.644443][T12181] ceph: No mds server is up or the cluster is laggy
[  800.474998][T12190] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  801.276190][   T31] audit: type=1326 audit(1767182585.348:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bab8f749 code=0x7ffc0000
[  801.379453][   T31] audit: type=1326 audit(1767182585.378:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31bab8f749 code=0x7ffc0000
[  801.484047][   T31] audit: type=1326 audit(1767182585.378:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bab8f749 code=0x7ffc0000
[  801.594499][   T31] audit: type=1326 audit(1767182585.378:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31bab91667 code=0x7ffc0000
[  801.681554][   T31] audit: type=1326 audit(1767182585.378:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f31bab915dc code=0x7ffc0000
[  801.752720][   T31] audit: type=1326 audit(1767182585.378:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f31bab91514 code=0x7ffc0000
[  801.780837][   T31] audit: type=1326 audit(1767182585.378:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f31bab91514 code=0x7ffc0000
[  801.964416][   T31] audit: type=1326 audit(1767182585.378:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31bab8e3aa code=0x7ffc0000
[  801.988226][   T31] audit: type=1326 audit(1767182585.378:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bab8f749 code=0x7ffc0000
[  802.020021][ T9466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.052455][   T31] audit: type=1326 audit(1767182585.378:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f31bab8f749 code=0x7ffc0000
[  803.171551][T12207] syzkaller0: entered promiscuous mode
[  803.202562][T12207] syzkaller0: entered allmulticast mode
[  803.260719][T12207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  803.566265][T12206] tipc: Resetting bearer <eth:syzkaller0>
[  803.658171][T12206] tipc: Disabling bearer <eth:syzkaller0>
[  803.787704][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  804.994440][ T5813] usb 3-1: Using ep0 maxpacket: 32
[  805.014438][ T5813] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  805.023404][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  805.155252][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.188417][T12228] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1654'.
[  805.234069][ T5813] usb 3-1: config 0 descriptor??
[  805.309527][ T6007] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  805.637583][ T6007] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  805.650377][ T6007] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  805.662399][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  805.678871][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  805.702980][ T6007] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  805.762978][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1656'.
[  805.772644][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1656'.
[  806.108658][ T6007] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  806.298500][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  806.336621][ T6007] usb 7-1: Product: syz
[  806.354975][ T6007] usb 7-1: Manufacturer: syz
[  806.373521][ T6007] usb 7-1: SerialNumber: syz
[  806.419822][ T6007] usb 7-1: config 0 descriptor??
[  806.514667][ T5813] usb 3-1: USB disconnect, device number 2
[  806.911454][ T6007] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  807.457421][ T6007] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  807.471131][ T6007] radio-si470x 7-1:0.0: software version 0, hardware version 0
[  807.479069][ T6007] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  807.491653][ T6007] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  807.506000][ T6007] radio-si470x 7-1:0.0: submitting int urb failed (-90)
[  807.945235][T12262] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1664'.
[  808.244108][ T6007] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32
[  808.284206][ T6007] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22
[  808.329668][ T6007] usb 7-1: USB disconnect, device number 6
[  809.561404][T12275] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1668'.
[  810.874221][T12290] hfsplus: unable to find HFS+ superblock
[  813.367722][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  813.378990][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  813.750796][T12311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1678'.
[  814.424422][T12326] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1684'.
[  820.208301][T12360] loop2: detected capacity change from 0 to 512
[  820.598958][T12379] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1699'.
[  820.612543][T12378] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  820.638149][T12378] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1702'.
[  820.680066][T12378] tipc: Enabled bearer <eth:ip6_vti0>, priority 10
[  823.507679][ T6007] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[  823.634963][T12414] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  823.696275][ T6007] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  823.754468][ T6007] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  823.816753][ T6007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  823.864481][ T6007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  823.914437][ T6007] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  823.929201][T12418] loop9: detected capacity change from 0 to 512
[  823.960754][ T6007] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  823.981785][T12421] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1716'.
[  823.993929][ T6007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  824.046385][ T6007] usb 9-1: Product: syz
[  824.054959][ T6007] usb 9-1: Manufacturer: syz
[  824.059584][ T6007] usb 9-1: SerialNumber: syz
[  824.295643][ T6007] usb 9-1: config 0 descriptor??
[  824.594513][ T6007] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  824.604532][ T6007] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  824.857843][ T6007] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32
[  825.354493][ T6007] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[  825.363400][ T6007] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5
[  825.381582][    C0] raw-gadget.0 gadget.8: ignoring, device is not running
[  825.403856][T12432] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  825.413137][T12432] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1720'.
[  825.424786][T12432] tipc: Enabling of bearer <eth:ip6_vti0> rejected, already enabled
[  825.518897][ T6007] usb 9-1: USB disconnect, device number 19
[  829.356471][T12467] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1732'.
[  830.850358][T12472] tipc: Started in network mode
[  830.890668][T12472] tipc: Node identity 7f000001, cluster identity 4711
[  830.922387][T12472] tipc: Enabled bearer <udp:syz2>, priority 10
[  830.984047][T12472] tipc: Enabled bearer <eth:ip6_vti0>, priority 10
[  831.168301][T12480] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1730'.
[  831.506016][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1737'.
[  831.565094][T12483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  831.572468][T12483] IPv6: NLM_F_CREATE should be set when creating new route
[  831.579751][T12483] IPv6: NLM_F_CREATE should be set when creating new route
[  831.612284][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1737'.
[  831.621228][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1737'.
[  832.143353][ T6007] tipc: Node number set to 2130706433
[  834.207754][T12508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  834.348443][T12511] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1747'.
[  835.185780][T12514] mmap: syz.2.1748 (12514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  835.244399][T12514] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1748'.
[  836.348526][T12519] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  836.398427][T12519] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1750'.
[  839.836662][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1758'.
[  839.869053][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1758'.
[  839.909061][T12551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  839.937874][T12554] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1761'.
[  840.804689][ T6599] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  842.026364][ T6599] usb 8-1: config 0 has an invalid interface number: 229 but max is 0
[  843.497235][ T6599] usb 8-1: config 0 has no interface number 0
[  843.506260][ T6599] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19
[  843.525497][ T6599] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.536986][ T6599] usb 8-1: config 0 descriptor??
[  843.629419][ T6599] usb 8-1: can't set config #0, error -71
[  843.653965][T12578] loop2: detected capacity change from 0 to 512
[  843.685823][ T6599] usb 8-1: USB disconnect, device number 9
[  847.517459][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'.
[  847.636919][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'.
[  847.647347][T12614] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1776'.
[  855.064303][T12668] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1792'.
[  855.626393][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  855.636970][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  855.647733][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  855.659473][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  855.667588][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  855.929471][ T6863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.350087][ T6863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.361205][T12667] loop9: detected capacity change from 0 to 32768
[  856.434860][T12667] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  857.399605][T12667] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  857.452116][ T6863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.472969][T12667] XFS (loop9): Starting recovery (logdev: internal)
[  857.694512][ T5843] Bluetooth: hci1: command tx timeout
[  858.460463][T12667] XFS (loop9): Ending recovery (logdev: internal)
[  858.594565][ T8959] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  858.615628][ T6863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.775033][ T5843] Bluetooth: hci1: command tx timeout
[  859.929657][T12643] chnl_net:caif_netlink_parms(): no params data found
[  859.971929][ T6863] bridge_slave_1: left allmulticast mode
[  860.165217][ T6863] bridge_slave_1: left promiscuous mode
[  860.171295][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.179601][T12717] netlink: 'syz.6.1806': attribute type 12 has an invalid length.
[  860.291640][ T6863] bridge_slave_0: left allmulticast mode
[  860.299334][ T6863] bridge_slave_0: left promiscuous mode
[  860.320092][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.371802][ T6863] tipc: Resetting bearer <eth:ip6_vti0>
[  860.886890][ T6863] tipc: Disabling bearer <eth:ip6_vti0>
[  861.706072][ T6863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  861.766639][ T6863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  861.797470][ T6863] bond0 (unregistering): Released all slaves
[  861.854958][ T5843] Bluetooth: hci1: command tx timeout
[  861.986835][T12723] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1807'.
[  863.007403][ T6863] tipc: Disabling bearer <udp:syz2>
[  863.012821][ T6863] tipc: Left network mode
[  863.959098][ T5843] Bluetooth: hci1: command tx timeout
[  867.651455][T12643] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.772999][T12643] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.402366][T12643] bridge_slave_0: entered allmulticast mode
[  868.463167][T12643] bridge_slave_0: entered promiscuous mode
[  868.493964][T12643] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.559430][T12643] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.607844][T12643] bridge_slave_1: entered allmulticast mode
[  868.679792][T12643] bridge_slave_1: entered promiscuous mode
[  869.576128][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  869.690662][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  870.266827][ T6863] hsr_slave_0: left promiscuous mode
[  870.356822][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1823'.
[  870.915962][ T6863] hsr_slave_1: left promiscuous mode
[  870.930174][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  870.937664][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  870.979020][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  871.005037][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  871.088889][ T6863] veth1_macvtap: left promiscuous mode
[  871.124156][ T6863] veth0_macvtap: left promiscuous mode
[  871.146243][ T6863] veth1_vlan: left promiscuous mode
[  871.169671][ T6863] veth0_vlan: left promiscuous mode
[  872.073014][T12787] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1825'.
[  873.919662][ T6863] team0 (unregistering): Port device team_slave_1 removed
[  873.989554][ T6863] team0 (unregistering): Port device team_slave_0 removed
[  874.584734][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  874.591048][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  874.688536][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1826'.
[  874.934459][ T6599] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  875.025195][T12643] team0: Port device team_slave_0 added
[  875.044031][T12643] team0: Port device team_slave_1 added
[  875.097244][ T6599] usb 6-1: Using ep0 maxpacket: 8
[  875.111839][ T6599] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.163481][ T6599] usb 6-1: config 0 interface 0 has no altsetting 0
[  875.209876][ T6599] usb 6-1: New USB device found, idVendor=056a, idProduct=00e2, bcdDevice= 0.00
[  875.230367][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  875.261393][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  875.287708][ T6599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.298020][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  875.310966][ T6599] usb 6-1: config 0 descriptor??
[  875.360949][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  875.378656][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  875.446571][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  875.530972][ T6599] usbhid 6-1:0.0: can't add hid device: -71
[  875.550240][ T6599] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  875.604646][ T6599] usb 6-1: USB disconnect, device number 7
[  877.561680][T12643] hsr_slave_0: entered promiscuous mode
[  877.646128][T12643] hsr_slave_1: entered promiscuous mode
[  879.394890][T12818] loop5: detected capacity change from 0 to 32768
[  879.403066][T12643] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  879.435602][T12818] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1836 (12818)
[  879.477249][T12643] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  879.499029][T12816] loop6: detected capacity change from 0 to 32768
[  879.538625][T12643] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  879.592154][T12816] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  879.627984][T12643] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  879.694834][T12818] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  879.711570][T12818] BTRFS info (device loop5): using blake2b (blake2b-256-lib) checksum algorithm
[  879.780237][T12816] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  879.844182][T12816] XFS (loop6): Starting recovery (logdev: internal)
[  879.919158][T12816] XFS (loop6): Ending recovery (logdev: internal)
[  879.998476][   T31] kauditd_printk_skb: 1 callbacks suppressed
[  879.998495][   T31] audit: type=1800 audit(1767182664.068:114): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1832" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  880.139084][T12643] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.172814][   T31] audit: type=1800 audit(1767182664.238:115): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1832" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  880.262600][T12643] 8021q: adding VLAN 0 to HW filter on device team0
[  880.313683][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.320877][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  880.381623][ T7777] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  880.399532][T12818] BTRFS info (device loop5): enabling ssd optimizations
[  880.408359][T12818] BTRFS info (device loop5): turning on async discard
[  880.421582][T12818] BTRFS info (device loop5): enabling free space tree
[  880.457707][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.464837][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.752193][ T9466] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  882.881614][T12877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  882.888878][T12877] IPv6: NLM_F_CREATE should be set when creating new route
[  882.896123][T12877] IPv6: NLM_F_CREATE should be set when creating new route
[  882.910084][T12643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  883.188642][T12643] veth0_vlan: entered promiscuous mode
[  883.317160][T12643] veth1_vlan: entered promiscuous mode
[  883.648552][T12643] veth0_macvtap: entered promiscuous mode
[  884.042152][T12643] veth1_macvtap: entered promiscuous mode
[  884.225257][T12643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  884.256281][T12643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  884.304144][ T6248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  884.363109][ T6248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  884.438052][ T6248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  884.503904][ T6248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  886.210698][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.508047][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  886.700304][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  886.739267][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.354274][T12909] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1850'.
[  889.661732][T12899] loop8: detected capacity change from 0 to 32768
[  889.781215][T12899] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  890.158593][T12926] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  890.305343][T12899] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  890.846283][T12899] XFS (loop8): Starting recovery (logdev: internal)
[  890.886088][T12905] loop7: detected capacity change from 0 to 32768
[  890.915389][T12928] loop5: detected capacity change from 0 to 8
[  890.926469][T12899] XFS (loop8): Ending recovery (logdev: internal)
[  890.933074][T12905] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1851 (12905)
[  890.955313][T12928] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  891.010456][T12789] udevd[12789]: incorrect cramfs checksum on /dev/loop5
[  891.945832][T12797] udevd[12797]: incorrect cramfs checksum on /dev/loop5
[  891.974542][ T8357] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  892.524498][T12935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  895.303661][T12973] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1864'.
[  896.346151][T12970] ceph: No mds server is up or the cluster is laggy
[  896.770806][T12988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  896.778068][T12988] IPv6: NLM_F_CREATE should be set when creating new route
[  896.785310][T12988] IPv6: NLM_F_CREATE should be set when creating new route
[  897.909438][T12996] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  902.313525][T13027] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1880'.
[  903.041310][T13031] netlink: 1700 bytes leftover after parsing attributes in process `syz.8.1883'.
[  903.274958][   T31] audit: type=1326 audit(1767182687.308:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd522f8f749 code=0x7ffc0000
[  903.369017][   T31] audit: type=1326 audit(1767182687.318:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd522f8f749 code=0x7ffc0000
[  903.463230][   T31] audit: type=1326 audit(1767182687.318:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd522f8f749 code=0x7ffc0000
[  903.565349][   T31] audit: type=1326 audit(1767182687.328:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd522f8f749 code=0x7ffc0000
[  904.029450][   T31] audit: type=1326 audit(1767182687.328:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd522f8f749 code=0x7ffc0000
[  904.234408][   T31] audit: type=1326 audit(1767182687.328:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd522f8f749 code=0x7ffc0000
[  904.776867][   T31] audit: type=1326 audit(1767182687.328:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13028 comm="syz.6.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd522f8f749 code=0x7ffc0000
[  906.875494][T13063] x_tables: duplicate entry at hook 2
[  907.711955][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'.
[  907.782709][T13067] bridge0: port 3(syz_tun) entered disabled state
[  907.853027][T13067] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.860372][T13067] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.329835][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1896'.
[  910.408453][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  910.424779][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  910.433654][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  910.443369][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  910.451184][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  910.491796][T13067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  910.569426][T13067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  912.774386][   T52] Bluetooth: hci3: command tx timeout
[  912.899222][T10984] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  912.910603][T10984] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  913.389795][T10984] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  913.567679][T10984] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  913.638010][T10984] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  913.738972][T10984] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  913.927099][T10984] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  913.952694][T10984] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  914.202607][   T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.496029][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1911'.
[  914.533003][T13129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  914.547486][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1911'.
[  914.556412][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1911'.
[  914.844460][   T52] Bluetooth: hci3: command tx timeout
[  915.296718][   T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.477319][   T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.894430][   T52] Bluetooth: hci3: command tx timeout
[  917.016529][   T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.995079][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1920'.
[  918.072779][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1920'.
[  918.974815][   T52] Bluetooth: hci3: command tx timeout
[  919.663422][   T13] bridge_slave_1: left allmulticast mode
[  919.714520][   T13] bridge_slave_1: left promiscuous mode
[  919.728890][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.768470][   T13] bridge_slave_0: left allmulticast mode
[  919.774126][   T13] bridge_slave_0: left promiscuous mode
[  919.794594][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.363870][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  920.379337][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  920.390347][   T13] bond0 (unregistering): Released all slaves
[  920.408710][T13167] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  920.469493][T13190] syzkaller1: entered promiscuous mode
[  920.501492][T13190] syzkaller1: entered allmulticast mode
[  920.802456][   T13] tipc: Left network mode
[  920.808052][T13100] chnl_net:caif_netlink_parms(): no params data found
[  920.865803][T13208] x_tables: duplicate entry at hook 2
[  921.772732][T13211] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.780213][T13211] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.097790][T13211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  922.130758][T13211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  922.510641][T13228] loop6: detected capacity change from 0 to 32768
[  922.587609][T13228] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1939 (13228)
[  923.256654][T13228] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  923.268158][T13232] syzkaller0: entered promiscuous mode
[  923.277085][T13228] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm
[  923.301041][T13232] syzkaller0: entered allmulticast mode
[  923.337274][ T3536] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  923.354985][ T3536] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  923.481409][T13228] BTRFS info (device loop6): enabling ssd optimizations
[  923.507563][T13228] BTRFS info (device loop6): turning on async discard
[  923.534427][T13228] BTRFS info (device loop6): enabling free space tree
[  923.591334][   T31] audit: type=1800 audit(1767182707.658:123): pid=13228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1939" name="bus" dev="loop6" ino=263 res=0 errno=0
[  923.693297][ T3536] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  923.719267][ T3536] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  923.734209][ T7777] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  924.150000][T13282] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  924.260425][T13272] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  924.289009][T13100] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.328363][T13100] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.350056][T13100] bridge_slave_0: entered allmulticast mode
[  924.387000][T13100] bridge_slave_0: entered promiscuous mode
[  924.416890][T13100] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.439582][T13100] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.477633][T13100] bridge_slave_1: entered allmulticast mode
[  924.508014][T13100] bridge_slave_1: entered promiscuous mode
[  924.700321][   T13] hsr_slave_0: left promiscuous mode
[  924.928031][   T13] hsr_slave_1: left promiscuous mode
[  924.934766][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  924.942140][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  924.960849][T13292] x_tables: duplicate entry at hook 2
[  925.018733][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  925.218687][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  925.388286][   T13] veth1_macvtap: left promiscuous mode
[  925.427829][   T13] veth0_macvtap: left promiscuous mode
[  925.998196][   T13] veth1_vlan: left promiscuous mode
[  926.045210][   T13] veth0_vlan: left promiscuous mode
[  926.684925][T13312] Device name cannot be null; rc = [-22]
[  927.811638][   T13] team0 (unregistering): Port device team_slave_1 removed
[  927.914038][   T13] team0 (unregistering): Port device team_slave_0 removed
[  928.383673][T13314] loop7: detected capacity change from 0 to 32768
[  928.414871][T13314] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1957 (13314)
[  928.487739][T13314] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  928.505576][T13314] BTRFS info (device loop7): using blake2b (blake2b-256-lib) checksum algorithm
[  929.122929][T13314] BTRFS info (device loop7): enabling ssd optimizations
[  929.130818][T13314] BTRFS info (device loop7): turning on async discard
[  929.188931][T13314] BTRFS info (device loop7): enabling free space tree
[  929.629348][   T31] audit: type=1804 audit(1767182713.638:124): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1957" name="/newroot/258/file0/bus" dev="loop7" ino=263 res=1 errno=0
[  930.242263][ T7212] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  930.444659][T13300] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1955'.
[  931.468592][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  931.482393][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.772455][T13359] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1963'.
[  932.878652][T13100] team0: Port device team_slave_0 added
[  932.981598][T13100] team0: Port device team_slave_1 added
[  933.331663][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  933.342581][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.084888][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.098851][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.137263][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.264483][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  934.801918][T13100] hsr_slave_0: entered promiscuous mode
[  934.857259][T13100] hsr_slave_1: entered promiscuous mode
[  934.905300][T13100] debugfs: 'hsr0' already exists in 'hsr'
[  934.963177][T13100] Cannot create hsr debugfs directory
[  936.138915][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  936.145293][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  942.604508][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'.
[  942.643209][T13406] x_tables: duplicate entry at hook 2
[  942.660599][T13403] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  942.943352][T13409] syzkaller0: entered promiscuous mode
[  942.968479][T13409] syzkaller0: entered allmulticast mode
[  943.099655][T13409] tipc: Started in network mode
[  943.116049][T13409] tipc: Node identity 4e6ef29e4ca1, cluster identity 4711
[  943.144610][T13409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  943.153417][T13415] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1982'.
[  943.215767][T13408] tipc: Resetting bearer <eth:syzkaller0>
[  943.276998][T13408] tipc: Disabling bearer <eth:syzkaller0>
[  944.119209][T13430] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1986'.
[  944.305781][T13430] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1986'.
[  944.396298][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1986'.
[  944.608933][ T6015] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  944.618134][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1986'.
[  945.475902][ T6015] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  945.496770][ T6015] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  945.509474][ T6015] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  945.596800][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1991'.
[  945.619830][T13443] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  948.037792][T13100] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  948.137903][T13100] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  948.317355][T13100] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  948.764585][T13100] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  948.901411][T13465] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  948.949783][T13465] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1996'.
[  949.176036][T13100] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.250371][T13100] 8021q: adding VLAN 0 to HW filter on device team0
[  949.298491][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.305646][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  949.528665][T13476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2002'.
[  950.338707][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[  950.346082][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  959.941223][T13511] tipc: Started in network mode
[  959.947970][T13511] tipc: Node identity 7f000001, cluster identity 4711
[  959.958105][T13511] tipc: Enabled bearer <udp:syz2>, priority 10
[  960.093183][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  961.068201][T13100] veth0_vlan: entered promiscuous mode
[  961.089823][T13100] veth1_vlan: entered promiscuous mode
[  961.164619][T13557] netlink: 'syz.6.2023': attribute type 3 has an invalid length.
[  961.182820][ T5923] tipc: Node number set to 2130706433
[  961.218216][T13100] veth0_macvtap: entered promiscuous mode
[  961.276216][T13100] veth1_macvtap: entered promiscuous mode
[  962.160738][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  962.287635][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  963.006788][ T3492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.040440][ T3492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.743237][T10606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.884935][T10606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.230383][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.411550][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.404455][  T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.727552][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2032'.
[  966.757110][  T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.764398][T13589] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  967.504575][T13598] tipc: Started in network mode
[  967.509469][T13598] tipc: Node identity 7f000001, cluster identity 4711
[  967.544977][T13598] tipc: Enabled bearer <udp:syz2>, priority 10
[  967.577070][T13603] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2035'.
[  968.677341][T13625] Device name cannot be null; rc = [-22]
[  969.365810][ T5923] tipc: Node number set to 2130706433
[  970.987751][T13647] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  971.272143][T13647] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2051'.
[  971.588351][T13648] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  971.594582][T13648] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  971.600582][T13648] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  971.606657][T13648] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  971.612580][T13648] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  971.629032][T13648] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  971.650434][T13648] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  971.657126][T13648] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  971.706361][T13648] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  972.158727][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'.
[  972.269577][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'.
[  972.333384][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'.
[  972.384024][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'.
[  972.964658][T13674] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.2061'.
[  973.044623][T13676] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.2061'.
[  973.294682][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  973.754500][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  973.762813][   T52] Bluetooth: hci6: command 0x0c1a tx timeout
[  973.769064][   T52] Bluetooth: hci5: command 0x0c1a tx timeout
[  973.775360][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  975.594515][T13724] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  975.600604][T13724] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  975.606756][T13724] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  975.612804][T13724] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  975.619169][T13724] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  977.448336][T13759] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2078'.
[  977.694752][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[  977.701625][ T5843] Bluetooth: hci5: command 0x0c1a tx timeout
[  977.707679][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  977.713872][ T8735] Bluetooth: hci2: command 0x0c1a tx timeout
[  977.718002][T13729] Bluetooth: hci6: command 0x0c1a tx timeout
[  978.840697][T13783] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  978.846884][T13783] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  978.852880][T13783] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  978.859044][T13783] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  978.865127][T13783] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  979.592957][T13798] netlink: 'syz.7.2089': attribute type 1 has an invalid length.
[  980.245029][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2093'.
[  980.291624][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2093'.
[  980.303928][T13812] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2096'.
[  980.327843][T13812] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2096'.
[  980.359463][T13814] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2097'.
[  980.574365][ T8735] Bluetooth: hci2: command 0x0c1a tx timeout
[  980.673033][T13821] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  981.009666][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  981.009679][T13729] Bluetooth: hci6: command 0x0c1a tx timeout
[  981.022005][ T8735] Bluetooth: hci3: command 0x0c1a tx timeout
[  981.054470][ T8735] Bluetooth: hci5: command 0x0c1a tx timeout
[  982.171503][T13839] syz.5.2105: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  982.324354][T13839] CPU: 1 UID: 0 PID: 13839 Comm: syz.5.2105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  982.324393][T13839] Tainted: [L]=SOFTLOCKUP
[  982.324403][T13839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  982.324418][T13839] Call Trace:
[  982.324428][T13839]  <TASK>
[  982.324438][T13839]  dump_stack_lvl+0xe8/0x150
[  982.324476][T13839]  warn_alloc+0x214/0x310
[  982.324504][T13839]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  982.324548][T13839]  ? __pfx_warn_alloc+0x10/0x10
[  982.324571][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.324609][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.324636][T13839]  ? kasan_save_track+0x4f/0x80
[  982.324659][T13839]  ? kasan_save_track+0x3e/0x80
[  982.324682][T13839]  ? __kasan_kmalloc+0x93/0xb0
[  982.324707][T13839]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  982.324737][T13839]  ? xskq_create+0x56/0x170
[  982.324773][T13839]  ? xsk_setsockopt+0x57b/0x8d0
[  982.324805][T13839]  ? do_sock_setsockopt+0x17c/0x1b0
[  982.324831][T13839]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  982.324857][T13839]  ? do_syscall_64+0xec/0xf80
[  982.324886][T13839]  __vmalloc_node_range_noprof+0x134/0x16a0
[  982.324949][T13839]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  982.324981][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.325009][T13839]  ? __kasan_kmalloc+0x93/0xb0
[  982.325036][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.325069][T13839]  vmalloc_user_noprof+0xad/0xf0
[  982.325094][T13839]  ? xskq_create+0xbf/0x170
[  982.325131][T13839]  xskq_create+0xbf/0x170
[  982.325171][T13839]  xsk_init_queue+0xb0/0x110
[  982.325210][T13839]  xsk_setsockopt+0x57b/0x8d0
[  982.325248][T13839]  ? __pfx_xsk_setsockopt+0x10/0x10
[  982.325282][T13839]  ? __pfx_aa_sk_perm+0x10/0x10
[  982.325312][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.325343][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.325371][T13839]  ? aa_sock_opt_perm+0xff/0x1a0
[  982.325406][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.325434][T13839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  982.325461][T13839]  ? __pfx_xsk_setsockopt+0x10/0x10
[  982.325498][T13839]  do_sock_setsockopt+0x17c/0x1b0
[  982.325532][T13839]  __x64_sys_setsockopt+0x13f/0x1b0
[  982.325567][T13839]  do_syscall_64+0xec/0xf80
[  982.325592][T13839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.325616][T13839]  ? trace_irq_disable+0x37/0x100
[  982.325655][T13839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.325679][T13839] RIP: 0033:0x7fe100d8f749
[  982.325700][T13839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  982.325726][T13839] RSP: 002b:00007fe101c84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  982.325752][T13839] RAX: ffffffffffffffda RBX: 00007fe100fe5fa0 RCX: 00007fe100d8f749
[  982.325771][T13839] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  982.325786][T13839] RBP: 00007fe100e13f91 R08: 0000000000000004 R09: 0000000000000000
[  982.325802][T13839] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  982.325819][T13839] R13: 00007fe100fe6038 R14: 00007fe100fe5fa0 R15: 00007ffe18659498
[  982.325858][T13839]  </TASK>
[  982.325898][T13839] Mem-Info:
[  982.769070][T13839] active_anon:14610 inactive_anon:0 isolated_anon:0
[  982.769070][T13839]  active_file:20438 inactive_file:43387 isolated_file:0
[  982.769070][T13839]  unevictable:768 dirty:143 writeback:0
[  982.769070][T13839]  slab_reclaimable:12066 slab_unreclaimable:106597
[  982.769070][T13839]  mapped:47827 shmem:9284 pagetables:1305
[  982.769070][T13839]  sec_pagetables:0 bounce:0
[  982.769070][T13839]  kernel_misc_reclaimable:0
[  982.769070][T13839]  free:1277154 free_pcp:6825 free_cma:0
[  982.831727][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2108'.
[  982.869552][T13839] Node 0 active_anon:60340kB inactive_anon:0kB active_file:81752kB inactive_file:173256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:192724kB dirty:572kB writeback:0kB shmem:37100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12852kB pagetables:5084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  983.030379][T13839] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  983.152961][T13839] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  983.246250][T13839] lowmem_reserve[]: 0 2499 2501 2501 2501
[  983.353689][T13839] Node 0 DMA32 free:1201864kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46612kB inactive_anon:0kB active_file:81752kB inactive_file:173256kB unevictable:1536kB writepending:588kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:28580kB local_pcp:21144kB free_cma:0kB
[  983.623848][T13839] lowmem_reserve[]: 0 0 1 1 1
[  983.629107][T13839] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  983.904801][T13839] lowmem_reserve[]: 0 0 0 0 0
[  983.928147][T13839] Node 1 Normal free:3888584kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14216kB local_pcp:3520kB free_cma:0kB
[  984.044477][T13839] lowmem_reserve[]: 0 0 0 0 0
[  984.244834][T13839] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB
[  984.264534][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2113'.
[  984.314426][T13839] Node 0 DMA32: 1902*4kB (UME) 3637*8kB (UM) 2055*16kB (UME) 894*32kB (UME) 914*64kB (UM) 660*128kB (UME) 475*256kB (UM) 282*512kB (UM) 195*1024kB (UM) 23*2048kB (UM) 99*4096kB (M) = 1159440kB
[  984.405131][T13839] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  984.476793][T13839] Node 1 Normal: 202*4kB (UM) 54*8kB (UE) 39*16kB (UE) 246*32kB (UME) 69*64kB (UE) 15*128kB (UME) 3*256kB (ME) 6*512kB (UME) 2*1024kB (ME) 0*2048kB 944*4096kB (M) = 3888584kB
[  984.634364][T13839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  984.643938][T13839] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  984.674760][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  984.685140][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  984.696021][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  984.714016][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  984.721132][T13839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  984.731210][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  984.850063][T13866] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  984.874465][T13839] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  985.225686][T13839] 70793 total pagecache pages
[  985.255317][T13839] 0 pages in swap cache
[  985.278696][T13839] Free swap  = 124996kB
[  985.306440][T13839] Total swap = 124996kB
[  985.311579][T13868] netlink: 1760 bytes leftover after parsing attributes in process `syz.7.2115'.
[  985.328068][T13839] 2097051 pages RAM
[  985.348257][T13839] 0 pages HighMem/MovableOnly
[  985.367386][T13839] 425082 pages reserved
[  985.385028][T13839] 0 pages cma reserved
[  986.843173][ T8735] Bluetooth: hci4: command tx timeout
[  987.134265][T13893] x_tables: duplicate entry at hook 2
[  987.324245][T13901] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  987.536475][T13893] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.544330][T13893] bridge0: port 1(bridge_slave_0) entered disabled state
[  988.097047][T13915] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.2132'.
[  988.131668][T13893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  988.146767][T13893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  988.303957][T13903] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  988.319140][ T1872] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  988.349323][ T1872] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  988.375615][ T1872] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  988.717297][T10984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.914384][ T8735] Bluetooth: hci4: command tx timeout
[  989.562805][ T1872] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  989.608205][T13862] chnl_net:caif_netlink_parms(): no params data found
[  990.164359][T10984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.292056][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'.
[  990.356659][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'.
[  990.458563][T10984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.565544][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'.
[  990.601604][ T6077] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  990.624117][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'.
[  990.737116][ T6077] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  990.838039][T10984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  990.845697][T13951] netlink: 1760 bytes leftover after parsing attributes in process `syz.7.2144'.
[  990.921315][ T6077] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  990.944931][ T6077] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  990.971117][T13862] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.987003][ T8735] Bluetooth: hci4: command tx timeout
[  990.994692][T13862] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.036758][T13862] bridge_slave_0: entered allmulticast mode
[  991.417989][T13862] bridge_slave_0: entered promiscuous mode
[  991.516898][T13862] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.623352][T13862] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.755008][T13862] bridge_slave_1: entered allmulticast mode
[  992.146911][T13862] bridge_slave_1: entered promiscuous mode
[  992.291568][T13862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  992.342484][T13862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  993.622509][ T8735] Bluetooth: hci4: command tx timeout
[  993.866099][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2153'.
[  994.350602][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2157'.
[  994.423368][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2157'.
[  994.507390][T13862] team0: Port device team_slave_0 added
[  994.513685][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2157'.
[  994.539804][T13862] team0: Port device team_slave_1 added
[  994.556168][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2157'.
[  994.707232][T13862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  994.724907][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  994.770673][T13862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  994.870477][T13862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  995.209125][T13862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  995.315662][T13862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  995.492081][T10984] bridge_slave_1: left allmulticast mode
[  995.502023][T10984] bridge_slave_1: left promiscuous mode
[  995.530383][T13991] netlink: 1760 bytes leftover after parsing attributes in process `syz.5.2159'.
[  995.545301][T10984] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.575747][T10984] bridge_slave_0: left allmulticast mode
[  995.581389][T10984] bridge_slave_0: left promiscuous mode
[  995.615457][T10984] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.761792][T10984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  996.776540][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2165'.
[  996.787092][T10984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  996.787407][T14008] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  996.807288][T10984] bond0 (unregistering): Released all slaves
[  996.878685][T14006] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2156'.
[  996.912982][T13862] hsr_slave_0: entered promiscuous mode
[  996.921328][T13862] hsr_slave_1: entered promiscuous mode
[  996.939515][T13862] debugfs: 'hsr0' already exists in 'hsr'
[  996.950217][T13862] Cannot create hsr debugfs directory
[  996.960346][T14009] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2156'.
[  997.469906][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  997.509612][T14011] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2156'.
[  997.522897][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1000.025200][T14048] __nla_validate_parse: 1 callbacks suppressed
[ 1000.025221][T14048] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.2178'.
[ 1000.204399][T14053] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2181'.
[ 1000.257700][T14052] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2181'.
[ 1000.841961][T10984] hsr_slave_0: left promiscuous mode
[ 1000.877115][T10984] hsr_slave_1: left promiscuous mode
[ 1000.892791][T10984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1000.927477][T10984] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1000.975818][T10984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1001.000989][T10984] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1001.070766][T10984] veth1_macvtap: left promiscuous mode
[ 1001.080990][T10984] veth0_macvtap: left promiscuous mode
[ 1001.086715][T10984] veth1_vlan: left promiscuous mode
[ 1001.093816][T10984] veth0_vlan: left promiscuous mode
[ 1001.229217][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2186'.
[ 1002.775796][T10984] team0 (unregistering): Port device team_slave_1 removed
[ 1002.830275][T10984] team0 (unregistering): Port device team_slave_0 removed
[ 1003.695440][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2198'.
[ 1003.835003][T14056] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2181'.
[ 1006.395647][T13862] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1006.443521][T13862] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1006.500532][T13862] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1006.614668][T13862] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1009.983212][T13862] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1010.802866][T13862] 8021q: adding VLAN 0 to HW filter on device team0
[ 1010.912153][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.919318][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1011.127074][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.134230][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1011.257035][T14188] netlink: 'syz.8.2223': attribute type 5 has an invalid length.
[ 1014.512227][T14211] syzkaller0: entered promiscuous mode
[ 1014.577888][T14211] syzkaller0: entered allmulticast mode
[ 1014.922048][T14211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1015.111419][T14210] tipc: Resetting bearer <eth:syzkaller0>
[ 1015.448423][T14210] tipc: Disabling bearer <eth:syzkaller0>
[ 1015.590279][T13862] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1018.963652][T14248] loop7: detected capacity change from 0 to 8192
[ 1019.042477][T14267] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2252'.
[ 1019.062099][T14267] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2252'.
[ 1019.082689][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2252'.
[ 1019.374330][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2252'.
[ 1019.600770][T13862] veth0_vlan: entered promiscuous mode
[ 1019.632729][T13862] veth1_vlan: entered promiscuous mode
[ 1020.138438][T13862] veth0_macvtap: entered promiscuous mode
[ 1020.195367][T13862] veth1_macvtap: entered promiscuous mode
[ 1021.311240][T13862] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1021.376118][T13862] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1021.486804][ T6009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.576985][ T6424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.604967][ T6424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.635321][ T6424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1022.294651][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1022.304328][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1023.130394][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2265'.
[ 1023.156649][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2265'.
[ 1023.192629][ T6426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1023.244538][ T6426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1023.339449][T14313] fuse: Bad value for 'group_id'
[ 1023.351801][T14313] fuse: Bad value for 'group_id'
[ 1024.138706][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2269'.
[ 1027.228932][T14351] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1028.975583][T14361] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1028.981699][T14361] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1028.988295][T14361] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1028.994377][T14361] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1029.000696][T14361] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1029.006726][T14361] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1029.019357][T14361] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1029.299762][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2285'.
[ 1031.054687][   T52] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1031.060756][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1031.067112][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1031.073118][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1031.079315][   T52] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1031.358395][T14391] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2293'.
[ 1031.380371][T14391] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2293'.
[ 1031.481327][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2295'.
[ 1031.525209][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2295'.
[ 1033.734626][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1034.034698][T14409] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1034.040817][T14409] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1034.047070][T14409] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1034.053133][T14409] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1034.059244][T14409] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1035.469499][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2301'.
[ 1035.500186][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2301'.
[ 1035.509155][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2301'.
[ 1036.220607][T14425] loop4: detected capacity change from 0 to 64
[ 1036.294724][T14425] kAFS: No cell specified
[ 1036.782616][ T5843] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1036.790768][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1036.797033][ T5843] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1036.864460][T13729] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1036.870505][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1039.074461][ T5842] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1039.916401][T14459] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1039.922444][T14459] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1039.928524][T14459] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1039.934735][T14459] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1039.940747][T14459] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1039.994425][ T5842] usb 8-1: device descriptor read/64, error -71
[ 1040.394556][ T5842] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1040.821820][ T5842] usb 8-1: device descriptor read/64, error -71
[ 1041.025700][ T5842] usb usb8-port1: attempt power cycle
[ 1041.273022][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1041.285616][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1041.293766][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1041.331796][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1041.339602][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1041.340556][T14470] Device name cannot be null; rc = [-22]
[ 1041.484339][ T5842] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1041.522445][ T5842] usb 8-1: device descriptor read/8, error -71
[ 1041.831837][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'.
[ 1041.853296][T14474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1041.868807][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'.
[ 1041.877768][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'.
[ 1042.014692][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1042.020988][   T52] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1042.027162][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1042.033361][   T52] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1042.039578][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1042.335988][ T5842] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1042.574906][ T5842] usb 8-1: device descriptor read/8, error -71
[ 1042.737808][ T5842] usb usb8-port1: unable to enumerate USB device
[ 1043.466478][ T5835] Bluetooth: hci3: command tx timeout
[ 1045.534655][ T5835] Bluetooth: hci3: command tx timeout
[ 1047.614412][ T5835] Bluetooth: hci3: command tx timeout
[ 1047.984412][  T109] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1048.040505][T14468] chnl_net:caif_netlink_parms(): no params data found
[ 1048.124424][  T109] usb 8-1: device descriptor read/64, error -71
[ 1049.336641][T14468] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1049.373237][T14468] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.404523][T14468] bridge_slave_0: entered allmulticast mode
[ 1049.445354][T14468] bridge_slave_0: entered promiscuous mode
[ 1049.485411][T14468] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1049.500041][  T109] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1049.547865][T14468] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.620787][T14468] bridge_slave_1: entered allmulticast mode
[ 1049.654363][  T109] usb 8-1: device descriptor read/64, error -71
[ 1049.672061][T14468] bridge_slave_1: entered promiscuous mode
[ 1049.694437][ T5835] Bluetooth: hci3: command tx timeout
[ 1049.854396][  T109] usb usb8-port1: attempt power cycle
[ 1051.600929][T14468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1052.406174][T14468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1052.602917][T14468] team0: Port device team_slave_0 added
[ 1052.639107][T14468] team0: Port device team_slave_1 added
[ 1054.018675][T14468] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1054.051410][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1055.225881][T14468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1055.325262][T14468] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1055.332226][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1055.575262][T14589] fuse: Unknown parameter 'grou00000000000000000000'
[ 1055.839218][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2349'.
[ 1056.077756][T14597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1056.085020][T14597] IPv6: NLM_F_CREATE should be set when creating new route
[ 1056.092238][T14597] IPv6: NLM_F_CREATE should be set when creating new route
[ 1056.105652][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2349'.
[ 1056.114538][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2349'.
[ 1056.546809][T14468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1057.304144][T14468] hsr_slave_0: entered promiscuous mode
[ 1057.320055][T14609] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2357'.
[ 1057.335858][T14468] hsr_slave_1: entered promiscuous mode
[ 1057.356537][T14468] debugfs: 'hsr0' already exists in 'hsr'
[ 1057.362825][T14468] Cannot create hsr debugfs directory
[ 1057.589381][T14616] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1058.921755][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1058.929183][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.408619][T14634] Device name cannot be null; rc = [-22]
[ 1061.556658][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2367'.
[ 1061.568877][T14647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1061.577172][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2367'.
[ 1061.586075][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2367'.
[ 1062.636063][T14654] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1062.778816][T14468] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1062.803786][T14468] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1062.859222][T14468] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1062.883690][T14468] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1065.237931][T14468] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1065.288523][T14468] 8021q: adding VLAN 0 to HW filter on device team0
[ 1065.500747][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1065.507928][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1066.643950][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.651133][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1067.618310][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2379'.
[ 1067.649965][T14694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1067.664511][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2379'.
[ 1067.673404][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2379'.
[ 1068.329826][T14468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1070.573282][T14721] loop8: detected capacity change from 0 to 64
[ 1070.754794][T14721] kAFS: No cell specified
[ 1070.860232][T14468] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1071.152548][T14727] Device name cannot be null; rc = [-22]
[ 1071.438515][T14468] veth0_vlan: entered promiscuous mode
[ 1071.528581][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2393'.
[ 1071.653493][T14741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1071.668757][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2393'.
[ 1071.677721][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2393'.
[ 1072.080170][T14468] veth1_vlan: entered promiscuous mode
[ 1072.232225][T14742] fuse: Bad value for 'fd'
[ 1073.498554][T14731] loop4: detected capacity change from 0 to 8192
[ 1073.527053][T14468] veth0_macvtap: entered promiscuous mode
[ 1073.551805][T14468] veth1_macvtap: entered promiscuous mode
[ 1073.674069][T14468] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1073.847007][T14468] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1073.867423][ T3459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.725162][ T3459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.734004][ T3459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.743082][ T3459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.411637][T14773] loop8: detected capacity change from 0 to 64
[ 1076.422584][ T9972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1076.465441][T14773] hfs: Unknown parameter 'i'
[ 1076.484645][ T9972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1076.580341][  T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1076.614427][  T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1076.825318][T14779] Device name cannot be null; rc = [-22]
[ 1077.048536][T14789] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2409'.
[ 1077.369625][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2409'.
[ 1077.663916][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2409'.
[ 1078.043489][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2413'.
[ 1078.695817][T14814] syz.8.2416: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1
[ 1078.869909][T14814] CPU: 0 UID: 0 PID: 14814 Comm: syz.8.2416 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1078.869951][T14814] Tainted: [L]=SOFTLOCKUP
[ 1078.869961][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1078.869976][T14814] Call Trace:
[ 1078.869986][T14814]  <TASK>
[ 1078.869996][T14814]  dump_stack_lvl+0xe8/0x150
[ 1078.870035][T14814]  warn_alloc+0x214/0x310
[ 1078.870064][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.870093][T14814]  ? stack_trace_save+0x9c/0xe0
[ 1078.870137][T14814]  ? __pfx_warn_alloc+0x10/0x10
[ 1078.870160][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.870197][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.870226][T14814]  ? kasan_save_track+0x4f/0x80
[ 1078.870250][T14814]  ? kasan_save_track+0x3e/0x80
[ 1078.870277][T14814]  ? __kasan_kmalloc+0x93/0xb0
[ 1078.870303][T14814]  ? __kmalloc_cache_noprof+0x3e2/0x700
[ 1078.870327][T14814]  ? xskq_create+0x56/0x170
[ 1078.870364][T14814]  ? xsk_setsockopt+0x57b/0x8d0
[ 1078.870398][T14814]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1078.870425][T14814]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1078.870452][T14814]  ? do_syscall_64+0xec/0xf80
[ 1078.870482][T14814]  __vmalloc_node_range_noprof+0x134/0x16a0
[ 1078.870545][T14814]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1078.870578][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.870608][T14814]  ? __kasan_kmalloc+0x93/0xb0
[ 1078.870636][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.870670][T14814]  vmalloc_user_noprof+0xad/0xf0
[ 1078.870696][T14814]  ? xskq_create+0xbf/0x170
[ 1078.870735][T14814]  xskq_create+0xbf/0x170
[ 1078.870784][T14814]  xsk_init_queue+0xb0/0x110
[ 1078.870824][T14814]  xsk_setsockopt+0x57b/0x8d0
[ 1078.870864][T14814]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1078.870899][T14814]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1078.870929][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.870962][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.870990][T14814]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1078.871026][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.871055][T14814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.871083][T14814]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1078.871121][T14814]  do_sock_setsockopt+0x17c/0x1b0
[ 1078.871155][T14814]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1078.871191][T14814]  do_syscall_64+0xec/0xf80
[ 1078.871216][T14814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.871241][T14814]  ? trace_irq_disable+0x37/0x100
[ 1078.871282][T14814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.871306][T14814] RIP: 0033:0x7f36c238f749
[ 1078.871328][T14814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1078.871350][T14814] RSP: 002b:00007f36c321d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1078.871376][T14814] RAX: ffffffffffffffda RBX: 00007f36c25e5fa0 RCX: 00007f36c238f749
[ 1078.871396][T14814] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[ 1078.871411][T14814] RBP: 00007f36c2413f91 R08: 0000000000000004 R09: 0000000000000000
[ 1078.871428][T14814] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1078.871445][T14814] R13: 00007f36c25e6038 R14: 00007f36c25e5fa0 R15: 00007ffc22b7db08
[ 1078.871485][T14814]  </TASK>
[ 1079.626832][T14814] Mem-Info:
[ 1079.629962][T14814] active_anon:14406 inactive_anon:0 isolated_anon:0
[ 1079.629962][T14814]  active_file:20416 inactive_file:43451 isolated_file:0
[ 1079.629962][T14814]  unevictable:768 dirty:129 writeback:0
[ 1079.629962][T14814]  slab_reclaimable:12216 slab_unreclaimable:107387
[ 1079.629962][T14814]  mapped:50478 shmem:10041 pagetables:1289
[ 1079.629962][T14814]  sec_pagetables:0 bounce:0
[ 1079.629962][T14814]  kernel_misc_reclaimable:0
[ 1079.629962][T14814]  free:1270123 free_pcp:12928 free_cma:0
[ 1079.724513][T14814] Node 0 active_anon:53724kB inactive_anon:0kB active_file:81664kB inactive_file:173512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:186352kB dirty:516kB writeback:0kB shmem:34828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12884kB pagetables:5020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1079.841516][T14814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1079.977922][T14814] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1080.024379][T14814] lowmem_reserve[]: 0 2499 2501 2501 2501
[ 1080.071468][T14814] Node 0 DMA32 free:1176300kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46272kB inactive_anon:0kB active_file:81664kB inactive_file:173512kB unevictable:1536kB writepending:516kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:49768kB local_pcp:24052kB free_cma:0kB
[ 1080.196554][T14814] lowmem_reserve[]: 0 0 1 1 1
[ 1080.206813][T14814] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1080.280990][T14814] lowmem_reserve[]: 0 0 0 0 0
[ 1080.323249][T14814] Node 1 Normal free:3889360kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13440kB local_pcp:10176kB free_cma:0kB
[ 1080.422791][T14814] lowmem_reserve[]: 0 0 0 0 0
[ 1080.439863][T14814] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB
[ 1080.464373][T14814] Node 0 DMA32: 2321*4kB (UE) 3201*8kB (UME) 1636*16kB (U) 509*32kB (UME) 978*64kB (UM) 685*128kB (UME) 532*256kB (UM) 319*512kB (UME) 220*1024kB (UME) 29*2048kB (UME) 89*4096kB (M) = 1176364kB
[ 1080.515256][T14814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1080.557361][T14814] Node 1 Normal: 202*4kB (UM) 55*8kB (UE) 39*16kB (UE) 250*32kB (UME) 77*64kB (UE) 14*128kB (UME) 4*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 0*2048kB 944*4096kB (M) = 3889360kB
[ 1080.636466][T14814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1080.674332][T14814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1080.683623][T14814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1080.748312][T14814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1080.788186][T14814] 70774 total pagecache pages
[ 1080.792874][T14814] 0 pages in swap cache
[ 1080.814595][T14814] Free swap  = 124996kB
[ 1080.820536][T14814] Total swap = 124996kB
[ 1080.828903][T14814] 2097051 pages RAM
[ 1080.832710][T14814] 0 pages HighMem/MovableOnly
[ 1080.861087][T14814] 425082 pages reserved
[ 1080.874511][T14814] 0 pages cma reserved
[ 1081.435566][  T109] kernel read not supported for file /vga_arbiter (pid: 109 comm: kworker/0:2)
[ 1081.447453][T14835] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2423'.
[ 1081.661234][T14833] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2423'.
[ 1081.993581][T14839] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2423'.
[ 1084.635438][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2438'.
[ 1084.933273][T14894] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2440'.
[ 1085.073211][T14894] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2440'.
[ 1085.112132][T14887] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2440'.
[ 1086.251409][T14910] loop7: detected capacity change from 0 to 512
[ 1086.283700][T14910] EXT4-fs: Ignoring removed oldalloc option
[ 1086.336909][T14910] EXT4-fs: Ignoring removed i_version option
[ 1086.357089][T14910] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1086.425114][T14910] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1086.494777][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'.
[ 1086.563842][T14910] EXT4-fs (loop7): 1 truncate cleaned up
[ 1086.755771][T14910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1087.476429][   T31] audit: type=1800 audit(1767182871.338:125): pid=14910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2449" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1087.562216][T14934] Invalid ELF header magic: != ELF
[ 1088.271632][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1088.721306][T14953] loop4: detected capacity change from 0 to 512
[ 1088.825522][T14953] EXT4-fs: Ignoring removed oldalloc option
[ 1088.966983][T14953] EXT4-fs: Ignoring removed i_version option
[ 1089.066234][T14953] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1089.189434][T14953] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1090.255993][T14953] EXT4-fs (loop4): 1 truncate cleaned up
[ 1090.384121][T14953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1092.168932][T13862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1092.267519][T14980] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2466'.
[ 1092.326511][T14979] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2466'.
[ 1092.428381][T14981] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2466'.
[ 1092.743885][T14991] loop7: detected capacity change from 0 to 512
[ 1092.775303][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'.
[ 1092.855235][T14991] EXT4-fs: Ignoring removed oldalloc option
[ 1092.866156][T14991] EXT4-fs: Ignoring removed i_version option
[ 1092.872709][T14991] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1092.930028][T14991] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1093.156789][T14991] EXT4-fs (loop7): 1 truncate cleaned up
[ 1093.176044][T14991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1094.626084][   T31] audit: type=1800 audit(1767182878.698:126): pid=14991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2472" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1095.117297][T15006] Invalid ELF header magic: != ELF
[ 1095.821864][T15001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2475'.
[ 1096.297190][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2475'.
[ 1096.440325][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2475'.
[ 1096.449686][T11663] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1096.503102][T11663] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1096.633595][T11663] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1096.662170][T11663] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1096.699301][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1099.420214][T15038] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2485'.
[ 1099.462673][T15036] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2485'.
[ 1099.519999][T15039] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2485'.
[ 1100.041529][T15046] syzkaller0: entered promiscuous mode
[ 1100.078658][T15046] syzkaller0: entered allmulticast mode
[ 1100.456868][T15051] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1101.121497][T15063] loop7: detected capacity change from 0 to 256
[ 1102.294982][T15063] FAT-fs (loop7): Directory bread(block 64) failed
[ 1102.355356][T15063] FAT-fs (loop7): Directory bread(block 65) failed
[ 1102.402387][T15063] FAT-fs (loop7): Directory bread(block 66) failed
[ 1102.871061][T15063] FAT-fs (loop7): Directory bread(block 67) failed
[ 1102.891091][T15063] FAT-fs (loop7): Directory bread(block 68) failed
[ 1102.942928][T15063] FAT-fs (loop7): Directory bread(block 69) failed
[ 1103.025791][T15063] FAT-fs (loop7): Directory bread(block 70) failed
[ 1103.092477][T15063] FAT-fs (loop7): Directory bread(block 71) failed
[ 1103.136371][T15063] FAT-fs (loop7): Directory bread(block 72) failed
[ 1103.354348][T15063] FAT-fs (loop7): Directory bread(block 73) failed
[ 1104.573470][T15084] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1106.669556][T15090] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1107.147264][T15100] overlayfs: missing 'lowerdir'
[ 1107.277669][T15098] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2499'.
[ 1107.395557][T15098] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2499'.
[ 1108.630416][T15111] loop3: detected capacity change from 0 to 512
[ 1108.778481][T15111] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1108.909339][T15111] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[ 1109.004339][T15111] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2507: Corrupt directory, running e2fsck is recommended
[ 1109.578808][T15111] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[ 1109.621734][T15111] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.2507: corrupted in-inode xattr: invalid ea_ino
[ 1109.702658][T15111] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2507: couldn't read orphan inode 15 (err -117)
[ 1109.770729][T15131] loop7: detected capacity change from 0 to 256
[ 1109.788938][T15111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1109.915851][T15131] FAT-fs (loop7): Directory bread(block 64) failed
[ 1109.982973][T15131] FAT-fs (loop7): Directory bread(block 65) failed
[ 1110.075353][T15131] FAT-fs (loop7): Directory bread(block 66) failed
[ 1110.134363][T15131] FAT-fs (loop7): Directory bread(block 67) failed
[ 1110.278520][T12643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.304408][T15131] FAT-fs (loop7): Directory bread(block 68) failed
[ 1110.423085][T15131] FAT-fs (loop7): Directory bread(block 69) failed
[ 1110.623826][T15137] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1110.773665][T15131] FAT-fs (loop7): Directory bread(block 70) failed
[ 1110.825145][   T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1110.837124][   T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1110.874376][   T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1110.924933][   T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1110.932553][   T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1110.966823][T15131] FAT-fs (loop7): Directory bread(block 71) failed
[ 1111.042272][T15144] overlayfs: missing 'lowerdir'
[ 1111.174374][T15131] FAT-fs (loop7): Directory bread(block 72) failed
[ 1111.198764][T15131] FAT-fs (loop7): Directory bread(block 73) failed
[ 1113.397356][   T52] Bluetooth: hci6: command tx timeout
[ 1114.918457][T15177] loop3: detected capacity change from 0 to 64
[ 1115.170357][T15177] loop3: detected capacity change from 0 to 1024
[ 1115.454571][   T52] Bluetooth: hci6: command tx timeout
[ 1116.863295][T15206] overlayfs: missing 'lowerdir'
[ 1117.534410][   T52] Bluetooth: hci6: command tx timeout
[ 1118.021794][ T3492] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1118.043930][ T3492] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1118.103382][T15217] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[ 1119.107102][ T3492] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1119.144343][ T3492] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.246219][T15243] loop1: detected capacity change from 0 to 512
[ 1119.305277][T15243] EXT4-fs: Ignoring removed oldalloc option
[ 1119.341095][T15243] EXT4-fs: Ignoring removed i_version option
[ 1119.358096][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2543'.
[ 1119.384292][T15243] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1119.429623][T15243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1119.485261][T15243] EXT4-fs (loop1): 1 truncate cleaned up
[ 1119.553748][T15243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1119.572408][   T31] audit: type=1800 audit(1767182903.638:127): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2542" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1119.685983][   T52] Bluetooth: hci6: command tx timeout
[ 1119.817636][T15249] Invalid ELF header magic: != ELF
[ 1119.843941][T15250] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1119.864435][T15250] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1119.896610][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2543'.
[ 1120.886969][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.893259][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.013725][ T3492] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1121.130214][ T3492] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1121.175773][T14468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1121.646592][ T3492] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1121.663508][ T3492] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.634054][T15273] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[ 1123.411358][T15139] chnl_net:caif_netlink_parms(): no params data found
[ 1123.457389][T15290] loop8: detected capacity change from 0 to 64
[ 1123.478694][ T3492] gretap0: left allmulticast mode
[ 1123.493469][T15290] hfs: Unknown parameter 'i'
[ 1123.502026][ T3492] gretap0: left promiscuous mode
[ 1123.528595][ T3492] bridge0: port 3(gretap0) entered disabled state
[ 1123.659586][ T3492] bridge_slave_1: left allmulticast mode
[ 1123.687516][ T3492] bridge_slave_1: left promiscuous mode
[ 1123.734533][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.845886][ T3492] bridge_slave_0: left allmulticast mode
[ 1123.870470][ T3492] bridge_slave_0: left promiscuous mode
[ 1123.891270][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1124.958836][ T3492] tipc: Disabling bearer <eth:ip6_vti0>
[ 1125.486628][T15304] loop7: detected capacity change from 0 to 32768
[ 1125.929714][T15304] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1126.004786][T15304] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1126.041095][T15304] XFS (loop7): Starting recovery (logdev: internal)
[ 1126.216957][T15304] XFS (loop7): Ending recovery (logdev: internal)
[ 1126.238960][   T31] audit: type=1800 audit(1767182910.308:128): pid=15304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2557" name="file1" dev="loop7" ino=4422 res=0 errno=0
[ 1126.518159][   T31] audit: type=1800 audit(1767182910.588:129): pid=15333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2557" name="file1" dev="loop7" ino=4422 res=0 errno=0
[ 1126.838589][ T7212] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1128.285351][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1128.420005][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1128.437472][T15345] loop4: detected capacity change from 0 to 64
[ 1128.476163][ T3492] bond0 (unregistering): Released all slaves
[ 1128.485706][T15345] hfs: Unknown parameter 'i'
[ 1128.653223][ T3492] bond1 (unregistering): Released all slaves
[ 1128.946512][ T3492] tipc: Disabling bearer <udp:syz2>
[ 1128.953332][ T3492] tipc: Left network mode
[ 1133.022291][T15139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.061075][T15139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.154646][T15139] bridge_slave_0: entered allmulticast mode
[ 1133.182900][T15139] bridge_slave_0: entered promiscuous mode
[ 1133.451801][T15139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1133.478201][T15139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.507073][T15139] bridge_slave_1: entered allmulticast mode
[ 1133.548741][T15139] bridge_slave_1: entered promiscuous mode
[ 1133.627491][T15400] loop7: detected capacity change from 0 to 64
[ 1133.654166][T15400] hfs: Unknown parameter 'i'
[ 1133.674347][T13449] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1134.594676][T13449] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1134.603317][T13449] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[ 1134.644441][T13449] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1134.653480][T13449] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1134.755125][T13449] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1134.794352][T13449] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1134.803599][T13449] usb 2-1: Product: syz
[ 1134.818780][T15139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1134.928509][T13449] usb 2-1: Manufacturer: syz
[ 1135.002156][T13449] cdc_wdm 2-1:1.0: skipping garbage
[ 1135.037467][T13449] cdc_wdm 2-1:1.0: skipping garbage
[ 1135.054119][T13449] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1135.055351][T15139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1135.265454][T13449] usb 2-1: USB disconnect, device number 11
[ 1135.325479][T15412] loop7: detected capacity change from 0 to 512
[ 1135.346214][T15412] EXT4-fs: Ignoring removed oldalloc option
[ 1135.381368][T15412] EXT4-fs: Ignoring removed i_version option
[ 1135.412994][T15412] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1135.468382][T15412] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1135.553112][T15412] EXT4-fs (loop7): 1 truncate cleaned up
[ 1135.580928][T15412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1135.731990][   T31] audit: type=1800 audit(1767182919.798:130): pid=15412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2587" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1135.930690][T15139] team0: Port device team_slave_0 added
[ 1136.778845][T15421] Invalid ELF header magic: != ELF
[ 1136.786934][T15139] team0: Port device team_slave_1 added
[ 1137.229232][ T7212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1137.278753][T15139] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1137.314273][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1137.421632][T15139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1137.507762][T15139] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1137.536830][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1137.615583][T15139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1139.095870][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2599'.
[ 1139.137586][ T3492] hsr_slave_0: left promiscuous mode
[ 1139.165029][ T3492] hsr_slave_1: left promiscuous mode
[ 1139.194368][T15445] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2599'.
[ 1139.196540][T15447] loop3: detected capacity change from 0 to 64
[ 1139.215177][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1139.222554][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1139.265646][T15447] hfs: Unknown parameter 'i'
[ 1139.300587][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1139.338378][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1139.641422][ T3492] veth1_macvtap: left promiscuous mode
[ 1139.647456][ T3492] veth0_macvtap: left promiscuous mode
[ 1139.655058][ T3492] veth1_vlan: left promiscuous mode
[ 1139.660373][ T3492] veth0_vlan: left promiscuous mode
[ 1142.565460][ T4416] smc: removing ib device syz2
[ 1144.104658][ T5835] Bluetooth: hci6: command 0x0405 tx timeout
[ 1147.630986][T15500] loop8: detected capacity change from 0 to 512
[ 1147.734496][T15500] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1147.834682][T15500] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[ 1147.855311][T15500] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2617: Corrupt directory, running e2fsck is recommended
[ 1147.918739][T15500] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[ 1148.002102][T15500] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.2617: corrupted in-inode xattr: invalid ea_ino
[ 1148.075954][T15500] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2617: couldn't read orphan inode 15 (err -117)
[ 1148.127296][T15500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1148.520818][ T8357] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1148.615437][ T3492] team0 (unregistering): Port device team_slave_1 removed
[ 1148.760149][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2619'.
[ 1148.796577][T15506] netlink: 292 bytes leftover after parsing attributes in process `syz.8.2619'.
[ 1148.883897][ T3492] team0 (unregistering): Port device team_slave_0 removed
[ 1149.316010][T15510] loop3: detected capacity change from 0 to 64
[ 1149.346211][T15510] hfs: Unknown parameter 'i'
[ 1151.039409][T15340] ==================================================================
[ 1151.047495][T15340] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[ 1151.056266][T15340] Read of size 8 at addr ffff88807b90e2e8 by task kworker/0:1/15340
[ 1151.064236][T15340] 
[ 1151.066556][T15340] CPU: 0 UID: 0 PID: 15340 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1151.066590][T15340] Tainted: [L]=SOFTLOCKUP
[ 1151.066600][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1151.066617][T15340] Workqueue: events smc_ib_port_event_work
[ 1151.066651][T15340] Call Trace:
[ 1151.066662][T15340]  <TASK>
[ 1151.066671][T15340]  dump_stack_lvl+0xe8/0x150
[ 1151.066704][T15340]  print_report+0xca/0x240
[ 1151.066730][T15340]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1151.066767][T15340]  kasan_report+0x118/0x150
[ 1151.066806][T15340]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1151.066848][T15340]  __ethtool_get_link_ksettings+0x5e/0x170
[ 1151.066888][T15340]  ib_get_eth_speed+0x15e/0x7b0
[ 1151.066921][T15340]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1151.066957][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1151.066986][T15340]  ? do_raw_spin_unlock+0x122/0x240
[ 1151.067026][T15340]  rxe_query_port+0x93/0x3d0
[ 1151.067056][T15340]  ib_query_port+0x170/0x830
[ 1151.067092][T15340]  smc_ib_port_event_work+0x15a/0x940
[ 1151.067132][T15340]  ? process_scheduled_works+0x9ef/0x1770
[ 1151.067157][T15340]  ? process_scheduled_works+0x9ef/0x1770
[ 1151.067183][T15340]  process_scheduled_works+0xad1/0x1770
[ 1151.067225][T15340]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1151.067249][T15340]  ? do_raw_spin_lock+0x121/0x290
[ 1151.067286][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1151.067322][T15340]  worker_thread+0x8a0/0xda0
[ 1151.067350][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1151.067382][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1151.067411][T15340]  ? __kthread_parkme+0x7b/0x200
[ 1151.067444][T15340]  kthread+0x711/0x8a0
[ 1151.067477][T15340]  ? __pfx_worker_thread+0x10/0x10
[ 1151.067503][T15340]  ? __pfx_kthread+0x10/0x10
[ 1151.067532][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1151.067563][T15340]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1151.067600][T15340]  ? __pfx_kthread+0x10/0x10
[ 1151.067632][T15340]  ret_from_fork+0x510/0xa50
[ 1151.067657][T15340]  ? __pfx_ret_from_fork+0x10/0x10
[ 1151.067678][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1151.067707][T15340]  ? __switch_to+0xc9e/0x1480
[ 1151.067743][T15340]  ? __pfx_kthread+0x10/0x10
[ 1151.067775][T15340]  ret_from_fork_asm+0x1a/0x30
[ 1151.067824][T15340]  </TASK>
[ 1151.067833][T15340] 
[ 1151.288798][T15340] Allocated by task 7777:
[ 1151.293106][T15340]  kasan_save_track+0x3e/0x80
[ 1151.297781][T15340]  __kasan_kmalloc+0x93/0xb0
[ 1151.302370][T15340]  __kvmalloc_node_noprof+0x5d5/0x920
[ 1151.307727][T15340]  alloc_netdev_mqs+0xa6/0x11b0
[ 1151.312576][T15340]  rtnl_create_link+0x31f/0xcf0
[ 1151.317420][T15340]  rtnl_newlink_create+0x25c/0xb00
[ 1151.322520][T15340]  rtnl_newlink+0x16e7/0x1c90
[ 1151.327182][T15340]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1151.332103][T15340]  netlink_rcv_skb+0x208/0x470
[ 1151.336859][T15340]  netlink_unicast+0x82f/0x9e0
[ 1151.341615][T15340]  netlink_sendmsg+0x805/0xb30
[ 1151.346368][T15340]  __sock_sendmsg+0x21c/0x270
[ 1151.351040][T15340]  __sys_sendto+0x3bd/0x520
[ 1151.355527][T15340]  __x64_sys_sendto+0xde/0x100
[ 1151.360273][T15340]  do_syscall_64+0xec/0xf80
[ 1151.364760][T15340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1151.370647][T15340] 
[ 1151.372951][T15340] Freed by task 3492:
[ 1151.376907][T15340]  kasan_save_track+0x3e/0x80
[ 1151.381569][T15340]  kasan_save_free_info+0x46/0x50
[ 1151.386584][T15340]  __kasan_slab_free+0x5c/0x80
[ 1151.391332][T15340]  kfree+0x1c0/0x660
[ 1151.395226][T15340]  device_release+0x9e/0x1d0
[ 1151.399811][T15340]  kobject_put+0x228/0x570
[ 1151.404216][T15340]  netdev_run_todo+0xd2c/0xea0
[ 1151.408971][T15340]  default_device_exit_batch+0x969/0x9e0
[ 1151.414586][T15340]  ops_undo_list+0x525/0x990
[ 1151.419161][T15340]  cleanup_net+0x4d8/0x7a0
[ 1151.423558][T15340]  process_scheduled_works+0xad1/0x1770
[ 1151.429089][T15340]  worker_thread+0x8a0/0xda0
[ 1151.433665][T15340]  kthread+0x711/0x8a0
[ 1151.437720][T15340]  ret_from_fork+0x510/0xa50
[ 1151.442292][T15340]  ret_from_fork_asm+0x1a/0x30
[ 1151.447048][T15340] 
[ 1151.449351][T15340] The buggy address belongs to the object at ffff88807b90e000
[ 1151.449351][T15340]  which belongs to the cache kmalloc-cg-4k of size 4096
[ 1151.463648][T15340] The buggy address is located 744 bytes inside of
[ 1151.463648][T15340]  freed 4096-byte region [ffff88807b90e000, ffff88807b90f000)
[ 1151.477515][T15340] 
[ 1151.479837][T15340] The buggy address belongs to the physical page:
[ 1151.486226][T15340] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b908
[ 1151.494966][T15340] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1151.503442][T15340] memcg:ffff8880789e6201
[ 1151.507658][T15340] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1151.515182][T15340] page_type: f5(slab)
[ 1151.519145][T15340] raw: 00fff00000000040 ffff88813ffb0500 ffffea0000cf0200 dead000000000002
[ 1151.527710][T15340] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff8880789e6201
[ 1151.536276][T15340] head: 00fff00000000040 ffff88813ffb0500 ffffea0000cf0200 dead000000000002
[ 1151.544944][T15340] head: 0000000000000000 0000000000040004 00000000f5000000 ffff8880789e6201
[ 1151.553606][T15340] head: 00fff00000000003 ffffea0001ee4201 00000000ffffffff 00000000ffffffff
[ 1151.562258][T15340] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1151.570904][T15340] page dumped because: kasan: bad access detected
[ 1151.577299][T15340] page_owner tracks the page as allocated
[ 1151.583091][T15340] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5827, tgid 5827 (syz-executor), ts 91049376947, free_ts 91029720999
[ 1151.604438][T15340]  post_alloc_hook+0x234/0x290
[ 1151.609188][T15340]  get_page_from_freelist+0x24e0/0x2580
[ 1151.614722][T15340]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1151.620517][T15340]  alloc_pages_mpol+0x232/0x4a0
[ 1151.625357][T15340]  allocate_slab+0x86/0x3b0
[ 1151.629852][T15340]  ___slab_alloc+0xe53/0x1820
[ 1151.634517][T15340]  __slab_alloc+0x65/0x100
[ 1151.638921][T15340]  __kmalloc_cache_noprof+0x41e/0x700
[ 1151.644277][T15340]  ipv6_add_dev+0x6aa/0x13a0
[ 1151.648854][T15340]  addrconf_notify+0x771/0x1050
[ 1151.653693][T15340]  notifier_call_chain+0x19d/0x3a0
[ 1151.658791][T15340]  register_netdevice+0x15bd/0x1a70
[ 1151.663988][T15340]  register_netdev+0x40/0x60
[ 1151.668568][T15340]  ip6gre_init_net+0x291/0x3c0
[ 1151.673326][T15340]  ops_init+0x35c/0x5c0
[ 1151.677466][T15340]  setup_net+0x110/0x330
[ 1151.681694][T15340] page last free pid 5828 tgid 5828 stack trace:
[ 1151.688003][T15340]  __free_frozen_pages+0xbc8/0xd30
[ 1151.693097][T15340]  __slab_free+0x2ce/0x320
[ 1151.697501][T15340]  qlist_free_all+0x97/0x100
[ 1151.702075][T15340]  kasan_quarantine_reduce+0x148/0x160
[ 1151.707516][T15340]  __kasan_slab_alloc+0x22/0x80
[ 1151.712350][T15340]  __kmalloc_cache_noprof+0x37c/0x700
[ 1151.717704][T15340]  ref_tracker_alloc+0x133/0x460
[ 1151.722634][T15340]  register_netdevice+0x1471/0x1a70
[ 1151.727841][T15340]  register_netdev+0x40/0x60
[ 1151.732422][T15340]  ip6gre_init_net+0x291/0x3c0
[ 1151.737181][T15340]  ops_init+0x35c/0x5c0
[ 1151.741324][T15340]  setup_net+0x110/0x330
[ 1151.745556][T15340]  copy_net_ns+0x3e3/0x570
[ 1151.749959][T15340]  create_new_namespaces+0x3e7/0x6a0
[ 1151.755226][T15340]  unshare_nsproxy_namespaces+0x11c/0x170
[ 1151.760930][T15340]  ksys_unshare+0x4c8/0x8c0
[ 1151.765423][T15340] 
[ 1151.767735][T15340] Memory state around the buggy address:
[ 1151.773342][T15340]  ffff88807b90e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1151.781387][T15340]  ffff88807b90e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1151.789431][T15340] >ffff88807b90e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1151.797469][T15340]                                                           ^
[ 1151.804911][T15340]  ffff88807b90e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1151.812953][T15340]  ffff88807b90e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1151.820990][T15340] ==================================================================
[ 1152.124281][T15340] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1152.131514][T15340] CPU: 0 UID: 0 PID: 15340 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1152.142532][T15340] Tainted: [L]=SOFTLOCKUP
[ 1152.146836][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1152.156874][T15340] Workqueue: events smc_ib_port_event_work
[ 1152.162676][T15340] Call Trace:
[ 1152.165936][T15340]  <TASK>
[ 1152.168846][T15340]  vpanic+0x1e0/0x670
[ 1152.172825][T15340]  panic+0xb9/0xc0
[ 1152.176537][T15340]  ? __pfx_panic+0x10/0x10
[ 1152.180944][T15340]  ? preempt_schedule_thunk+0x16/0x30
[ 1152.186299][T15340]  ? preempt_schedule_thunk+0x16/0x30
[ 1152.191657][T15340]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1152.197634][T15340]  check_panic_on_warn+0x89/0xb0
[ 1152.202565][T15340]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1152.208554][T15340]  end_report+0x6f/0x140
[ 1152.212786][T15340]  kasan_report+0x129/0x150
[ 1152.217285][T15340]  ? __ethtool_get_link_ksettings+0x5e/0x170
[ 1152.223263][T15340]  __ethtool_get_link_ksettings+0x5e/0x170
[ 1152.229157][T15340]  ib_get_eth_speed+0x15e/0x7b0
[ 1152.234002][T15340]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1152.239365][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1152.244986][T15340]  ? do_raw_spin_unlock+0x122/0x240
[ 1152.250186][T15340]  rxe_query_port+0x93/0x3d0
[ 1152.254781][T15340]  ib_query_port+0x170/0x830
[ 1152.259368][T15340]  smc_ib_port_event_work+0x15a/0x940
[ 1152.264741][T15340]  ? process_scheduled_works+0x9ef/0x1770
[ 1152.270446][T15340]  ? process_scheduled_works+0x9ef/0x1770
[ 1152.276158][T15340]  process_scheduled_works+0xad1/0x1770
[ 1152.281715][T15340]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1152.287677][T15340]  ? do_raw_spin_lock+0x121/0x290
[ 1152.292699][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1152.298323][T15340]  worker_thread+0x8a0/0xda0
[ 1152.302900][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1152.308517][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1152.314131][T15340]  ? __kthread_parkme+0x7b/0x200
[ 1152.319056][T15340]  kthread+0x711/0x8a0
[ 1152.323113][T15340]  ? __pfx_worker_thread+0x10/0x10
[ 1152.328205][T15340]  ? __pfx_kthread+0x10/0x10
[ 1152.332777][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1152.338396][T15340]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1152.343587][T15340]  ? __pfx_kthread+0x10/0x10
[ 1152.348162][T15340]  ret_from_fork+0x510/0xa50
[ 1152.352759][T15340]  ? __pfx_ret_from_fork+0x10/0x10
[ 1152.357847][T15340]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1152.363461][T15340]  ? __switch_to+0xc9e/0x1480
[ 1152.368127][T15340]  ? __pfx_kthread+0x10/0x10
[ 1152.372705][T15340]  ret_from_fork_asm+0x1a/0x30
[ 1152.377465][T15340]  </TASK>
[ 1152.380758][T15340] Kernel Offset: disabled
[ 1152.385069][T15340] Rebooting in 86400 seconds..