last executing test programs:

12m7.422401628s ago: executing program 32 (id=18):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000})

11m36.047081951s ago: executing program 33 (id=248):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000))
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x4112, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11m24.027004061s ago: executing program 6 (id=250):
r0 = io_uring_setup(0x5, &(0x7f00000002c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x424)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103100, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11m23.632513773s ago: executing program 6 (id=335):
r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r1, 0x5)
accept$inet6(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

11m23.42474972s ago: executing program 6 (id=337):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

11m23.172331248s ago: executing program 6 (id=339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ff01007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ea050000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000540)=ANY=[], 0x0)

11m22.560386337s ago: executing program 6 (id=343):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bh}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[{@fat=@errors_remount}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@nodots}, {@fat=@gid}, {}, {@dots}, {@fat=@tz_utc}, {@dots}], [{@appraise}]}, 0x1, 0x20e, &(0x7f0000000400)="$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")
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

11m22.003108405s ago: executing program 34 (id=343):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bh}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[{@fat=@errors_remount}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@nodots}, {@fat=@gid}, {}, {@dots}, {@fat=@tz_utc}, {@dots}], [{@appraise}]}, 0x1, 0x20e, &(0x7f0000000400)="$eJzs3T9rE2EYAPAnbdpcVKSbIAgnDjoVdXKsSAUxIFQy6CboZKZ2SV3a7+DiV/B7+QGkUxZ5Jd4lF9MkDaW5YP39lnvunve990/IJUuepHgWQz/ufIssa8TGXuzFoBE7sREjpwEAXCeDlOJnKqx7LgBAPZb4/P9V85QAgBV7++796+edzv5BnmcRZ6f9br9bHIv8y1ed/cf5HztVr7N+v7s5zj/Jp787DPNbcaPMPy365+P0dkR0t+PRgyI/zL1408n/7t+KjyteOwAAAAAAAAAAAAAAAAAAAAAArMu9yEeq+j6bEVHW99ndnc63y/o8xdlEfaCp+j3NuNssT6vyQOmkllUBAAAAAAAAAAAAAAAAAADAv+Xo+MvnD73ep8MqaEXE5JXmjDbzg0Z546UaXxzcvKL7zAs24nLd26MNbMzcw0VBo9yic6ksrnCB7dkv7jJBNFe44bUEeQ1jtRdub0rDYPa7YFQWY2737YhYPPrDg8tOfpBS6n2/f3h0HGlh4+oZ0arzgQQAAAAAAAAAAAAAAAAAAP+xiV99j329XRyztc0KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpV/f//MDh/ZWFwEhG34sLGo7G2IlvrWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi+fgcAAP//9DweRg==")
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

11m11.167078938s ago: executing program 3 (id=413):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @private2, @local}}}}, 0x0)

11m10.941609405s ago: executing program 3 (id=415):
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0xdd, 0x3, 0x9, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0)
shutdown(r1, 0x1)

11m9.800563301s ago: executing program 3 (id=420):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r1], 0x20}}, 0x40816)

11m9.574666218s ago: executing program 3 (id=422):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f00000000c0)=ANY=[], 0x33, 0x70c, &(0x7f00000015c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
fchown(0xffffffffffffffff, 0x0, 0x0)

11m8.904465479s ago: executing program 3 (id=429):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r1, 0xffffffffffffffff, 0x0)

11m7.715213587s ago: executing program 3 (id=438):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4})

11m7.32115878s ago: executing program 35 (id=438):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4})

10m27.998817563s ago: executing program 8 (id=746):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, 0x8)

10m27.851984818s ago: executing program 8 (id=748):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x4)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x10)
ftruncate(r3, 0x200004)
sendfile(r2, r3, 0x0, 0x80001d00c0d5)

10m27.524437308s ago: executing program 8 (id=752):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x160)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x840)
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160)
open_by_handle_at(r1, &(0x7f0000000080)=ANY=[], 0x531500)

10m27.356205984s ago: executing program 8 (id=754):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r1, 0x0, 0x0)

10m26.798912631s ago: executing program 8 (id=757):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delchain={0x24, 0x2a, 0x201, 0x20000000, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0)

10m26.072116374s ago: executing program 8 (id=764):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xb000000d})
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x400)
recvfrom$unix(r1, 0x0, 0x0, 0x40002000, 0x0, 0x0)

10m25.681132287s ago: executing program 36 (id=764):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xb000000d})
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x400)
recvfrom$unix(r1, 0x0, 0x0, 0x40002000, 0x0, 0x0)

2m55.508162408s ago: executing program 7 (id=2883):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0)

2m44.532911095s ago: executing program 7 (id=2908):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271b, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)

2m42.46228244s ago: executing program 7 (id=2913):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

2m37.939076664s ago: executing program 9 (id=2918):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe})
fcntl$lock(r1, 0x26, &(0x7f0000000080))
unshare(0x22020400)
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m37.73619815s ago: executing program 7 (id=2921):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)

2m33.588229451s ago: executing program 9 (id=2927):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000003000000000000000001000000", @ANYRES32], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x756}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4800)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xbd213077fa1addad, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc)

2m33.422995917s ago: executing program 7 (id=2930):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000)

2m31.146296578s ago: executing program 9 (id=2933):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2m29.242783059s ago: executing program 7 (id=2935):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = epoll_create1(0x80000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000000000000000ffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d4, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x2, 0x101, 0xfffffff7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
epoll_pwait(r0, &(0x7f0000001a80)=[{}], 0x1, 0x1ff, 0x0, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

2m28.924669579s ago: executing program 9 (id=2937):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = gettid()
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)

2m22.903470999s ago: executing program 9 (id=2944):
r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x3)
fchdir(r1)
r2 = fanotify_init(0x1a, 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r2, 0x541, 0x1023, r3, 0x0)
dup(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

2m22.24820416s ago: executing program 9 (id=2947):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)

2m13.904280864s ago: executing program 37 (id=2935):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = epoll_create1(0x80000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000000000000000ffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d4, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x2, 0x101, 0xfffffff7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
epoll_pwait(r0, &(0x7f0000001a80)=[{}], 0x1, 0x1ff, 0x0, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

2m6.984564603s ago: executing program 38 (id=2947):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)

8.829085651s ago: executing program 4 (id=3180):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x9, 0x80000)
timerfd_gettime(r3, &(0x7f00000003c0))

7.940832939s ago: executing program 5 (id=3181):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x4880)
ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r1 = signalfd(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x40044581, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc)

7.89501932s ago: executing program 1 (id=3182):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

7.880468071s ago: executing program 2 (id=3183):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000080), &(0x7f0000000840)=r2}, 0x20)

7.677787368s ago: executing program 4 (id=3185):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)

7.507799383s ago: executing program 1 (id=3187):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r0, 0x402, 0x1a)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000cc0)="409b", 0x2)
syz_pidfd_open(0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5})

7.426227556s ago: executing program 2 (id=3188):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x7010e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71ffff15cdf0311c00003a52a7d96bd1", 0x10)

6.553482203s ago: executing program 5 (id=3189):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fstat(r0, &(0x7f00000002c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x20)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

6.367873749s ago: executing program 2 (id=3190):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40081)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r0, 0x0}])

6.367523229s ago: executing program 4 (id=3191):
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x4, 0x40032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000481000/0x1000)=nil, 0x1000)
munmap(&(0x7f00007f5000/0x1000)=nil, 0x1000)
munmap(&(0x7f00009f4000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000e4c000/0x4000)=nil, 0x4000)
munmap(&(0x7f000047a000/0x3000)=nil, 0x3000)
munmap(&(0x7f00007f5000/0xe000)=nil, 0xe000)
munmap(&(0x7f0000d04000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000c12000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000d53000/0x2000)=nil, 0x2000)
munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000)

6.256963702s ago: executing program 0 (id=3192):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x214a81, 0x0)
mprotect(&(0x7f0000728000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff})
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040))

6.132144026s ago: executing program 1 (id=3193):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x19)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r5, 0x0, 0x10}, 0xc)

6.047779869s ago: executing program 4 (id=3194):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x2)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)

5.813512026s ago: executing program 1 (id=3195):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x800, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c)
vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x7ffffffd}, 0x14)
splice(r0, 0x0, r3, 0x0, 0xcc0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

5.787915247s ago: executing program 0 (id=3196):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

5.551888485s ago: executing program 1 (id=3197):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
r2 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r2, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0xcb19f000)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
tkill(r1, 0xb)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

4.674532762s ago: executing program 4 (id=3198):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@dioread_lock}, {@mblk_io_submit}, {@errors_remount}, {@nombcache}]}, 0x1, 0x460, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x884)

4.41949425s ago: executing program 5 (id=3199):
r0 = fanotify_init(0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.222661607s ago: executing program 0 (id=3200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffff5fb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

3.443336631s ago: executing program 4 (id=3201):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x40, 0x0, 0x0, 0x2}, {0x28, 0x1, 0x4f, 0xfffff038}, {0x6, 0x1, 0x0, 0x57c}]}, 0x10)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc)

3.322008655s ago: executing program 0 (id=3202):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)

3.081403803s ago: executing program 2 (id=3203):
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0x6}}, 0x0, 0x0, 0x1d, 0x0, "824770ed9d3fc1114fa98b3115b51a7042ccec5e95bd9f46a985c3cf9ffa5fb6b26498702bcbe954eea58a3582073718f1ad6bd6721d341b42f3e5aae27255f15e424dc0e9b55d3af11e97f6ef2f1b4c"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.874597979s ago: executing program 5 (id=3204):
mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x100, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x74)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x8000)

1.89130545s ago: executing program 2 (id=3205):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
r1 = fanotify_init(0x8, 0x1)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4)
fcntl$setlease(r0, 0x400, 0x0)
read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
close(0x3)

1.791916054s ago: executing program 5 (id=3206):
socket$rxrpc(0x21, 0x2, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20)

1.721100176s ago: executing program 1 (id=3207):
r0 = io_uring_setup(0x769e, &(0x7f0000000180)={0x0, 0x1bd4, 0x0, 0x40})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
r3 = fcntl$dupfd(r2, 0x0, r1)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000002540)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000810)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.694690037s ago: executing program 0 (id=3208):
r0 = socket$pppoe(0x18, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)

243.124122ms ago: executing program 0 (id=3209):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$getregs(0xc, r1, 0x8000, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6})

181.842364ms ago: executing program 5 (id=3210):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500"], 0x50)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000600)={r2, 0x1ff, 0x20}, 0xc)

0s ago: executing program 2 (id=3211):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
prlimit64(0x0, 0xe, 0x0, 0x0)

kernel console output (not intermixed with test programs):

nd 0x80379423 level 0
[  195.695925][ T7807] BTRFS warning (device loop4): couldn't read tree root
[  195.703207][ T7807] BTRFS warning (device loop4): try to load backup roots slot 2
[  195.724286][ T7807] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  195.736593][ T7807] BTRFS warning (device loop4): couldn't read tree root
[  195.743667][ T7807] BTRFS warning (device loop4): try to load backup roots slot 3
[  195.782266][ T7807] BTRFS info (device loop4): enabling ssd optimizations
[  195.791097][ T7807] BTRFS info (device loop4): rebuilding free space tree
[  195.847021][ T7807] BTRFS info (device loop4): checking UUID tree
[  195.921652][ T7842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.928'.
[  195.944003][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.927'.
[  196.614184][ T4277] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.754494][ T7870] netlink: 'syz.2.937': attribute type 4 has an invalid length.
[  196.842095][ T5763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (5763)
[  197.157743][ T7874] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  197.359956][ T7874] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  197.400723][ T7874] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.449751][ T7874] usb 10-1: config 0 interface 0 has no altsetting 0
[  197.476561][ T7874] usb 10-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  197.510389][ T7874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.548027][ T7874] usb 10-1: config 0 descriptor??
[  197.857339][ T7874] usbhid 10-1:0.0: can't add hid device: -71
[  197.864711][ T7874] usbhid: probe of 10-1:0.0 failed with error -71
[  197.894161][ T7874] usb 10-1: USB disconnect, device number 2
[  198.414201][ T7921] loop4: detected capacity change from 0 to 128
[  198.495326][ T7921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  198.542794][ T7921] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  198.693486][ T7921] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:427: inode #2: comm syz.4.946: No space for directory leaf checksum. Please run e2fsck -D.
[  198.852721][ T7936] loop9: detected capacity change from 0 to 512
[  198.908813][ T7936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.929285][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  198.957376][ T7936] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.952: iget: bad i_size value: 38620345925642
[  199.072195][ T7936] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.952: couldn't read orphan inode 15 (err -117)
[  199.086875][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  199.096502][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  199.106244][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  199.115865][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  199.125477][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  199.129821][ T7913] loop0: detected capacity change from 0 to 32768
[  199.135073][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  199.150859][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  199.207522][ T7936] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  199.207591][ T7913] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  199.302988][ T7936] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.952: bg 0: block 5: invalid block bitmap
[  199.410511][ T7936] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  199.459910][ T7936] EXT4-fs (loop9): This should not happen!! Data will be lost
[  199.459910][ T7936] 
[  199.503587][ T7936] EXT4-fs (loop9): Total free blocks count 0
[  199.528767][ T7936] EXT4-fs (loop9): Free/Dirty block details
[  199.560354][ T7936] EXT4-fs (loop9): free_blocks=0
[  199.589061][ T7936] EXT4-fs (loop9): dirty_blocks=1
[  199.594148][ T7936] EXT4-fs (loop9): Block reservation details
[  199.643441][ T7936] EXT4-fs (loop9): i_reserved_data_blocks=1
[  199.664626][ T5763] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  199.714698][ T7936] EXT4-fs (loop9): shut down requested (0)
[  201.344668][ T8017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.977'.
[  201.364118][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.9.974'.
[  202.728824][ T4318] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  202.847495][ T8034] could not allocate digest TFM handle blake2s-256-generic
[  202.916892][ T4318] usb 1-1: Using ep0 maxpacket: 32
[  202.923601][ T4318] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  202.973736][ T4318] usb 1-1: config 0 has no interface number 0
[  203.000052][ T4318] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  203.068752][ T4318] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  203.106797][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.137632][ T4318] usb 1-1: Product: syz
[  203.141857][ T4318] usb 1-1: Manufacturer: syz
[  203.180957][ T4318] usb 1-1: SerialNumber: syz
[  203.211974][ T4318] usb 1-1: config 0 descriptor??
[  203.232619][ T8056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  203.459526][ T8056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  204.126880][    C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.0
[  204.431297][ T8109] loop9: detected capacity change from 0 to 1024
[  204.797630][ T8114] hfsplus: b-tree write err: -5, ino 3
[  204.845302][ T8114] hfsplus: request for non-existent node 33554434 in B*Tree
[  204.875463][ T8114] hfsplus: request for non-existent node 33554434 in B*Tree
[  204.901707][ T4318] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  204.925668][ T4318] asix: probe of 1-1:0.188 failed with error -71
[  204.965462][ T4318] usb 1-1: USB disconnect, device number 9
[  204.996868][ T7884] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  205.190233][ T4846] hfsplus: request for non-existent node 33554434 in B*Tree
[  205.207026][ T7884] usb 5-1: Using ep0 maxpacket: 16
[  205.214333][ T7884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.225166][ T4846] hfsplus: request for non-existent node 33554434 in B*Tree
[  205.248847][ T4846] hfsplus: b-tree write err: -5, ino 3
[  205.257567][ T7884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.290810][ T7884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  205.316792][ T7884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.345528][ T7884] usb 5-1: Product: syz
[  205.364761][ T7884] usb 5-1: Manufacturer: syz
[  205.377064][ T7884] usb 5-1: SerialNumber: syz
[  205.553692][ T8139] loop0: detected capacity change from 0 to 128
[  205.602347][ T7884] usb 5-1: 0:2 : does not exist
[  205.628038][ T7884] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  205.684769][ T7884] usb 5-1: USB disconnect, device number 6
[  205.716266][ T8140] syz.0.1012: attempt to access beyond end of device
[  205.716266][ T8140] loop0: rw=2049, sector=145, nr_sectors = 400 limit=128
[  205.741580][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1013'.
[  205.957745][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.232489][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'.
[  206.587690][ T8175] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1023'.
[  207.250691][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1033'.
[  207.308669][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1033'.
[  207.791614][ T8226] loop2: detected capacity change from 0 to 7
[  207.883169][ T8226] Dev loop2: unable to read RDB block 7
[  207.924544][ T8226]  loop2: unable to read partition table
[  207.979233][ T8226] loop2: partition table beyond EOD, truncated
[  207.985472][ T8226] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  208.115086][ T3639] Dev loop2: unable to read RDB block 7
[  208.126518][ T3639]  loop2: unable to read partition table
[  208.149567][ T3639] loop2: partition table beyond EOD, truncated
[  208.533886][ T8250] Bluetooth: MGMT ver 1.22
[  208.662890][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'.
[  209.061886][ T8279] loop9: detected capacity change from 0 to 1024
[  209.094579][ T8279] EXT4-fs: Ignoring removed orlov option
[  209.155442][ T8279] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  209.379699][ T7266] EXT4-fs (loop9): unmounting filesystem.
[  209.947999][ T8319] fuse: Bad value for 'fd'
[  209.991819][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  210.073571][ T8321] loop4: detected capacity change from 0 to 4096
[  210.148597][ T8321] EXT4-fs (loop4): Test dummy encryption mode enabled
[  210.225055][ T8321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  210.267950][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  210.449305][   T26] audit: type=1804 audit(1779240982.752:33): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1073" name="file1" dev="ramfs" ino=50574 res=1 errno=0
[  210.547713][ T8321] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.1066: Abort forced by user
[  210.575037][ T8321] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  210.797896][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  211.365409][   T26] audit: type=1804 audit(1779240983.662:34): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1088" name="file1" dev="ramfs" ino=49651 res=1 errno=0
[  211.720029][ T8391] loop0: detected capacity change from 0 to 4096
[  211.773847][ T8391] EXT4-fs (loop0): Test dummy encryption mode enabled
[  211.848643][ T8391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  212.047907][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.055431][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.100142][ T8391] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.1091: Abort forced by user
[  212.148535][ T8391] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  212.299374][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  212.644962][ T8416] loop4: detected capacity change from 0 to 1024
[  212.799188][ T8416] hfsplus: b-tree write err: -5, ino 3
[  212.807478][ T8416] hfsplus: request for non-existent node 33554434 in B*Tree
[  212.814810][ T8416] hfsplus: request for non-existent node 33554434 in B*Tree
[  213.023891][ T4869] hfsplus: request for non-existent node 33554434 in B*Tree
[  213.060947][ T4869] hfsplus: request for non-existent node 33554434 in B*Tree
[  213.103948][ T4869] hfsplus: b-tree write err: -5, ino 3
[  213.160324][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.260333][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.943553][ T8395] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.962141][ T8395] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.973853][ T8395] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.989033][ T8395] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.349361][ T8446] Failed to get privilege flags for destination (handle=0x0:0x0)
[  215.439290][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  215.654706][ T8492] loop0: detected capacity change from 0 to 1024
[  215.764803][ T8497] loop9: detected capacity change from 0 to 512
[  215.814482][ T8499] device bridge1 entered promiscuous mode
[  215.824341][ T8497] EXT4-fs: Ignoring removed oldalloc option
[  215.862642][ T8499] team0: Port device bridge1 added
[  215.929987][ T8501] bridge0: port 3(team0) entered blocking state
[  215.964410][ T8501] bridge0: port 3(team0) entered disabled state
[  215.972295][ T8497] EXT4-fs (loop9): 1 truncate cleaned up
[  215.979875][ T4846] hfsplus: b-tree write err: -5, ino 25
[  215.985602][ T4846] hfsplus: b-tree write err: -5, ino 4
[  216.010654][ T8497] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  216.011300][ T8501] device team0 entered promiscuous mode
[  216.026476][ T8501] device team_slave_1 entered promiscuous mode
[  216.035344][ T8501] bridge0: port 3(team0) entered blocking state
[  216.041887][ T8501] bridge0: port 3(team0) entered listening state
[  216.053065][ T4846] hfsplus: b-tree write err: -5, ino 2
[  216.230138][ T8497] EXT4-fs (loop9): unmounting filesystem.
[  216.722067][ T8531] loop4: detected capacity change from 0 to 8192
[  217.088790][ T8540] overlayfs: failed to clone lowerpath
[  219.322541][ T8626] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1160'.
[  219.476781][ T8630] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1160'.
[  219.573692][ T8630] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1160'.
[  221.828534][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1181'.
[  221.913359][ T8693] loop0: detected capacity change from 0 to 512
[  221.966262][ T8693] EXT4-fs: Ignoring removed oldalloc option
[  222.092800][ T8693] EXT4-fs (loop0): 1 truncate cleaned up
[  222.133553][ T8693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  222.230113][ T8664] loop4: detected capacity change from 0 to 40427
[  222.272530][ T8664] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  222.314946][ T8664] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  222.449681][ T8693] EXT4-fs (loop0): unmounting filesystem.
[  222.549529][ T8664] F2FS-fs (loop4): Found nat_bits in checkpoint
[  223.004330][ T8664] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  223.041912][ T8664] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  223.756242][ T8752] overlayfs: failed to clone upperpath
[  223.902043][ T4277] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  223.902106][ T4277] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  223.957318][ T4277] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  223.967370][ T4277] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  223.974952][ T4277] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  224.087018][ T4277] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  224.126767][ T4277] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  224.306560][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'.
[  224.758763][ T8781] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1205'.
[  224.789674][ T8781] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1205'.
[  224.815654][ T8781] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1205'.
[  225.453742][ T8806] fuse: Bad value for 'fd'
[  225.852541][ T8829] loop4: detected capacity change from 0 to 128
[  226.050552][ T4318] libceph: connect (1)[c::]:6789 error -22
[  226.056615][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  226.143848][ T8826] ceph: No mds server is up or the cluster is laggy
[  227.331065][ T8879] 9pnet: p9_errstr2errno: server reported unknown error �@c0x0000000000000006
[  228.075793][ T8910] fuse: Bad value for 'fd'
[  228.716252][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1250'.
[  228.821488][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1250'.
[  229.231399][ T8953] IPVS: Scheduler module ip_vs_ not found
[  229.894263][ T8993] tipc: Started in network mode
[  229.913271][ T8993] tipc: Node identity ac1414aa, cluster identity 4711
[  229.948724][ T8993] tipc: Enabled bearer <udp:s>, priority 10
[  230.882648][   T26] audit: type=1326 audit(1779241003.182:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  230.949117][ T7881] tipc: Node number set to 2886997162
[  230.956543][   T26] audit: type=1326 audit(1779241003.182:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.063624][   T26] audit: type=1326 audit(1779241003.182:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.163309][   T26] audit: type=1326 audit(1779241003.182:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.260452][   T26] audit: type=1326 audit(1779241003.182:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.319090][   T26] audit: type=1326 audit(1779241003.182:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.355346][   T26] audit: type=1326 audit(1779241003.182:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.392320][   T26] audit: type=1326 audit(1779241003.182:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.432490][   T26] audit: type=1326 audit(1779241003.182:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  231.463615][   T26] audit: type=1326 audit(1779241003.182:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  232.377639][ T9079] netlink: 'syz.2.1302': attribute type 39 has an invalid length.
[  232.768794][ T9091] overlayfs: failed to clone upperpath
[  233.884776][ T9126] overlayfs: failed to clone upperpath
[  234.343625][ T9141] device bond2 entered promiscuous mode
[  234.644330][ T9153] fuse: Bad value for 'fd'
[  235.233207][ T9173] fuse: Bad value for 'fd'
[  235.370866][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1342'.
[  235.382933][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1342'.
[  235.402571][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1342'.
[  235.651812][ T9187] xt_hashlimit: size too large, truncated to 1048576
[  236.753795][ T9215] overlayfs: failed to clone upperpath
[  238.008377][ T9250] fuse: Bad value for 'fd'
[  239.879821][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.936757][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.946629][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.016798][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.046797][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.072827][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.102304][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.156771][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.166643][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.182606][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.198095][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.236768][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.247313][   T26] kauditd_printk_skb: 548 callbacks suppressed
[  240.247333][   T26] audit: type=1800 audit(1779241012.552:593): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1381" name="bus" dev="ramfs" ino=52771 res=0 errno=0
[  240.314443][ T9293] ip: renamed from gretap0
[  242.036854][ T9324] netlink: 'syz.2.1399': attribute type 1 has an invalid length.
[  242.123007][ T9324] 8021q: adding VLAN 0 to HW filter on device bond1
[  242.240121][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'.
[  242.287219][ T4285] Bluetooth: hci4: command 0x0406 tx timeout
[  242.323470][ T9324] bond1: (slave geneve2): making interface the new active one
[  242.342444][ T9324] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  242.352377][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  242.526363][ T9338] ipt_CLUSTERIP: Please specify destination IP
[  242.616379][ T9347] fuse: Bad value for 'fd'
[  244.662707][ T9404] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1483442705/1483442707
[  244.725486][ T9404] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1483442705/1483442707
[  246.361901][ T9470] fuse: Bad value for 'fd'
[  246.534086][ T9477] netlink: 'syz.4.1459': attribute type 1 has an invalid length.
[  246.562381][ T9477] device bond3 entered promiscuous mode
[  246.568627][ T9477] 8021q: adding VLAN 0 to HW filter on device bond3
[  246.597829][ T9477] device veth5 entered promiscuous mode
[  246.609334][    C1] bridge0: port 3(team0) entered learning state
[  246.625624][ T9477] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  246.724291][ T9484] netlink: 'syz.4.1461': attribute type 1 has an invalid length.
[  246.756488][ T9484] 8021q: adding VLAN 0 to HW filter on device bond4
[  246.807917][ T9484] bond4: (slave geneve2): making interface the new active one
[  246.820432][ T9484] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  246.831206][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  247.874167][ T9520] tipc: Failed to remove unknown binding: 66,1,1/0:2760086371/2760086373
[  248.002691][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'.
[  248.754219][ T9532] fuse: Bad value for 'fd'
[  248.966083][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1483'.
[  249.053659][ T9534] device team1 entered promiscuous mode
[  249.071856][ T9534] 8021q: adding VLAN 0 to HW filter on device team1
[  249.093729][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1483'.
[  249.157558][ T9539] device team2 entered promiscuous mode
[  249.163562][ T9539] 8021q: adding VLAN 0 to HW filter on device team2
[  249.361401][ T9557] device bond1 entered promiscuous mode
[  250.623686][ T9593] ipt_CLUSTERIP: Please specify destination IP
[  251.024194][ T9604] ceph: No mds server is up or the cluster is laggy
[  251.293645][ T9614] device vlan2 entered promiscuous mode
[  251.311571][ T9614] device syz_tun entered promiscuous mode
[  251.346979][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1513'.
[  251.973144][ T9627] device vlan0 entered promiscuous mode
[  251.993268][ T9627] device bond4 entered promiscuous mode
[  252.013406][ T9627] device geneve2 entered promiscuous mode
[  252.033182][ T9627] team0: Port device vlan0 added
[  252.040575][ T9632] tipc: Started in network mode
[  252.045764][ T9632] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  252.054127][ T9632] tipc: Enabled bearer <eth:team0>, priority 0
[  252.605346][   T26] audit: type=1800 audit(1779241024.902:594): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1515" name="bus" dev="ramfs" ino=53401 res=0 errno=0
[  253.147436][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1529'.
[  253.183007][ T4283] tipc: Node number set to 11578026
[  253.518755][ T9673] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1534'.
[  253.540812][ T9673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1534'.
[  253.789329][ T9686] overlayfs: failed to clone upperpath
[  253.938851][ T9694] netlink: 'syz.9.1543': attribute type 10 has an invalid length.
[  253.958265][ T9694] team0: Port device netdevsim0 added
[  254.149917][ T9702] device batadv_slave_1 entered promiscuous mode
[  254.244908][ T9701] device batadv_slave_1 left promiscuous mode
[  254.294848][ T9705] mmap: syz.4.1547 (9705): VmData 49348608 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  254.816050][ T9728] fuse: Bad value for 'fd'
[  255.145029][ T9739] overlayfs: failed to clone upperpath
[  255.573044][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  255.579430][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  256.313541][ T9759] device bridge_slave_1 left promiscuous mode
[  256.357008][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.575718][ T9763] netlink: 'syz.4.1570': attribute type 1 has an invalid length.
[  256.615413][ T9763] device macvlan2 entered promiscuous mode
[  256.622699][ T9763] device bond5 entered promiscuous mode
[  256.629129][ T9763] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  256.678891][ T9763] device bond5 left promiscuous mode
[  256.775613][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1569'.
[  256.999077][ T9771] netlink: 'syz.0.1573': attribute type 1 has an invalid length.
[  257.169491][ T9774] 8021q: adding VLAN 0 to HW filter on device bond2
[  257.210411][ T9774] bond1: (slave bond2): making interface the new active one
[  257.243520][ T9774] bond1: (slave bond2): Enslaving as an active interface with an up link
[  257.576983][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.588685][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.598361][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.608242][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.617887][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.627529][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.637149][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.646787][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.656407][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  257.666053][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[  259.603387][ T9858] netlink: 'syz.4.1605': attribute type 4 has an invalid length.
[  259.813162][ T4318] libceph: connect (1)[c::]:6789 error -101
[  259.830142][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  259.890536][ T9862] ceph: No mds server is up or the cluster is laggy
[  260.303564][ T9889] device vlan0 entered promiscuous mode
[  260.341098][ T9889] team0: Port device vlan0 added
[  260.364059][ T9892] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1618'.
[  260.382796][ T9894] tipc: Enabled bearer <eth:team0>, priority 0
[  260.805643][ T9910] overlayfs: failed to clone upperpath
[  262.159723][ T9957] 9pnet_fd: Insufficient options for proto=fd
[  263.549711][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1660'.
[  264.576702][    C0] hrtimer: interrupt took 45993 ns
[  266.144473][T10067] fuse: Bad value for 'fd'
[  266.513221][T10081] fuse: Bad value for 'fd'
[  268.688685][ T4869] wlan1: Trigger new scan to find an IBSS to join
[  270.437926][T10161] netlink: 'syz.9.1725': attribute type 4 has an invalid length.
[  270.506576][T10161] netlink: 'syz.9.1725': attribute type 4 has an invalid length.
[  271.545018][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1735'.
[  271.727152][ T4857] wlan1: Trigger new scan to find an IBSS to join
[  271.746204][   T14] libceph: connect (1)[c::]:6789 error -101
[  271.770651][   T14] libceph: mon0 (1)[c::]:6789 connect error
[  271.778321][   T14] libceph: connect (1)[c::]:6789 error -101
[  271.786482][   T14] libceph: mon0 (1)[c::]:6789 connect error
[  271.839333][T10196] ceph: No mds server is up or the cluster is laggy
[  272.051062][   T14] libceph: connect (1)[c::]:6789 error -101
[  272.058497][   T14] libceph: mon0 (1)[c::]:6789 connect error
[  274.768291][ T4832] wlan1: Trigger new scan to find an IBSS to join
[  275.479387][T10272] netlink: 'syz.9.1766': attribute type 4 has an invalid length.
[  275.697891][ T4857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.096617][T10278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1770'.
[  276.119398][T10278] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1770'.
[  276.188302][T10278] netlink: 'syz.0.1770': attribute type 6 has an invalid length.
[  276.228903][T10278] netlink: 'syz.0.1770': attribute type 5 has an invalid length.
[  276.263317][T10279] VFS: Mount too revealing
[  276.266136][T10282] overlayfs: failed to clone upperpath
[  276.277084][T10278] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1770'.
[  276.354997][T10283] overlayfs: failed to clone upperpath
[  276.686849][    C1] bridge0: port 3(team0) entered forwarding state
[  276.694296][    C1] bridge0: topology change detected, propagating
[  277.361695][T10301] batman_adv: batadv0: Adding interface: dummy0
[  277.453225][T10301] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.702719][T10301] batman_adv: batadv0: Interface activated: dummy0
[  277.753485][T10300] net_ratelimit: 7 callbacks suppressed
[  277.753521][T10300] batadv0: mtu less than device minimum
[  277.790866][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.805938][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.821059][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.834420][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.847735][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.861562][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.874862][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.888658][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  277.902411][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  279.391448][T10328] netlink: 'syz.2.1789': attribute type 1 has an invalid length.
[  279.527266][T10328] 8021q: adding VLAN 0 to HW filter on device bond2
[  279.557873][T10330] device veth0_virt_wifi entered promiscuous mode
[  279.795287][T10330] bond2: (slave veth0_virt_wifi): making interface the new active one
[  279.900412][ T4285] Bluetooth: hci4: unknown advertising packet type: 0x17
[  279.900633][ T4285] Bluetooth: hci4: Dropping invalid advertising data
[  279.909625][T10330] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  280.138085][T10334] bond2: (slave veth0_virt_wifi): Releasing active interface
[  280.798838][T10345] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1793'.
[  280.918213][T10345] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1793'.
[  283.135402][T10368] netlink: 'syz.0.1803': attribute type 1 has an invalid length.
[  283.453261][T10368] 8021q: adding VLAN 0 to HW filter on device bond3
[  283.638565][T10373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.691490][T10373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.704273][T10383] fuse: Bad value for 'fd'
[  283.719147][T10373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.743725][T10373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.811455][T10373] bond3: (slave geneve2): making interface the new active one
[  283.869223][T10373] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  283.917012][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  286.284762][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  286.495998][T10418] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.506628][T10418] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.517003][T10418] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.527047][T10418] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.894365][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  287.025379][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  293.275638][T10491] netlink: 'syz.7.1846': attribute type 1 has an invalid length.
[  293.507351][T10491] 8021q: adding VLAN 0 to HW filter on device bond2
[  293.701540][T10497] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  293.920169][T10502] bond2: (slave geneve4): making interface the new active one
[  294.102827][T10502] bond2: (slave geneve4): Enslaving as an active interface with an up link
[  294.172390][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  294.179899][T10502] syz.7.1846 (10502) used greatest stack depth: 18960 bytes left
[  294.749454][T10519] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1856'.
[  295.153460][T10526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1857'.
[  296.926501][T10539] overlayfs: failed to clone upperpath
[  296.968471][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'.
[  297.615326][T10553] bond0: (slave syz_tun): Releasing backup interface
[  297.687395][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  297.733405][T10553] device team0 left promiscuous mode
[  297.766524][T10553] device team_slave_1 left promiscuous mode
[  297.800506][T10553] bridge0: port 3(team0) entered disabled state
[  297.878433][T10553] bond0: (slave dummy0): Releasing backup interface
[  297.930832][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  297.969665][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  298.011604][T10553] device bridge_slave_0 left promiscuous mode
[  298.042121][T10553] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.131404][T10553] device bridge_slave_1 left promiscuous mode
[  298.142122][T10553] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.210613][T10553] bond0: (slave bond_slave_0): Releasing backup interface
[  298.294208][T10553] bond0: (slave bond_slave_1): Releasing backup interface
[  298.623966][T10553] team0: Port device team_slave_1 removed
[  298.720175][T10553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.798330][T10553] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.860128][T10553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.941914][T10553] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.175954][T10553] team0: Port device bridge1 removed
[  299.252865][T10553] bond3: (slave veth5): Releasing backup interface
[  299.431422][T10553] team0: Port device vlan0 removed
[  299.495615][T10553] bond4: (slave geneve2): Releasing active interface
[  299.563022][T10553] device geneve2 left promiscuous mode
[  299.721952][T10555] team0: Port device ip6gre1 added
[  300.300263][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'.
[  303.060715][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'.
[  303.306951][T10630] 8021q: adding VLAN 0 to HW filter on device bond6
[  303.531811][T10635] 8021q: adding VLAN 0 to HW filter on device bond6
[  303.558122][T10635] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  303.630996][T10635] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  303.728687][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  303.903576][T10636] device wireguard0 entered promiscuous mode
[  303.977830][T10636] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  303.990936][T10636] bond6: (slave wireguard0): Error -95 calling set_mac_address
[  310.454552][T10726] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1912'.
[  310.864919][T10730] netlink: 'syz.9.1914': attribute type 4 has an invalid length.
[  310.933281][T10730] netlink: 'syz.9.1914': attribute type 17 has an invalid length.
[  311.065526][T10730] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  311.858999][T10739] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1918'.
[  312.051885][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1920'.
[  312.441757][T10746] netlink: 'syz.4.1921': attribute type 1 has an invalid length.
[  312.986715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  312.997368][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  313.006704][    T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!!
[  313.017246][    T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!!
[  313.026715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #186!!!
[  313.037398][    T0] NOHZ tick-stop error: local softirq work is pending, handler #186!!!
[  313.046775][    T0] NOHZ tick-stop error: local softirq work is pending, handler #186!!!
[  315.482829][T10747] 8021q: adding VLAN 0 to HW filter on device bond8
[  315.568488][T10747] bond7: (slave bond8): making interface the new active one
[  315.740489][T10747] bond7: (slave bond8): Enslaving as an active interface with an up link
[  315.996216][T10750] bond7: (slave gretap1): Enslaving as a backup interface with an up link
[  316.084393][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1921'.
[  316.145312][T10760] 8021q: adding VLAN 0 to HW filter on device bond7
[  317.014669][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  317.021952][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  324.631836][T10859] SET target dimension over the limit!
[  327.480379][T10895] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  327.614833][T10895] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  327.725814][T10895] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  327.807966][T10895] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  327.861222][T10895] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  327.941206][T10895] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  329.884873][T10917] netlink: 'syz.2.1974': attribute type 6 has an invalid length.
[  329.971569][T10920] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  330.762191][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  330.925146][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  331.015828][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  331.112820][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  331.180946][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  331.273945][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  331.488584][T10943] netlink: 'syz.9.1984': attribute type 1 has an invalid length.
[  331.639848][T10945] device bond1 entered promiscuous mode
[  331.681789][T10945] 8021q: adding VLAN 0 to HW filter on device bond1
[  331.753645][T10946] device bridge2 entered promiscuous mode
[  331.761901][T10946] bond1: (slave bridge2): Enslaving as a backup interface with an up link
[  331.857028][ T4839] net_ratelimit: 10 callbacks suppressed
[  331.857060][ T4839] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  332.055851][T10953] bond4: (slave veth7): Enslaving as an active interface with a down link
[  332.086975][ T4816] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  332.099060][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  332.168412][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'.
[  332.191837][T10955] 8021q: adding VLAN 0 to HW filter on device bond4
[  333.896899][T10983] overlayfs: failed to clone upperpath
[  334.419869][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2002'.
[  334.684613][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'.
[  337.178459][T11031] fuse: Bad value for 'fd'
[  338.590701][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2023'.
[  339.696138][ T4283] kernel read not supported for file [userfaultfd] (pid: 4283 comm: kworker/1:3)
[  343.777638][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'.
[  343.992110][T11079] device ip6gre1 entered promiscuous mode
[  344.075584][T11105] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  344.163890][T11105] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  344.304211][T11106] device macvlan2 entered promiscuous mode
[  344.347831][T11106] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  344.449500][T11111] netlink: 'syz.0.2042': attribute type 3 has an invalid length.
[  344.481393][T11111] netlink: 'syz.0.2042': attribute type 3 has an invalid length.
[  345.080698][T11126] netlink: 'syz.4.2046': attribute type 1 has an invalid length.
[  345.362883][T11126] 8021q: adding VLAN 0 to HW filter on device bond9
[  345.411828][T11128] device gretap2 entered promiscuous mode
[  345.427133][T11128] bond9: (slave gretap2): making interface the new active one
[  345.456167][T11128] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  345.475019][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  346.534075][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2054'.
[  348.691842][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  348.707545][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  348.795398][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  348.928071][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  348.952653][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  349.027301][T11161] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  351.677332][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'.
[  352.040284][T11185] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.425841][T11194] overlayfs: failed to clone upperpath
[  352.748644][T11193] device bond3 entered promiscuous mode
[  352.862881][T11196] device vcan0 entered promiscuous mode
[  352.937954][T11196] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  353.027686][T11196] bond3: (slave vcan0): Error -95 calling set_mac_address
[  353.183650][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2076'.
[  353.293337][T11204] IPv6: sit2: Disabled Multicast RS
[  355.814057][T11240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2090'.
[  356.070017][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'.
[  356.318571][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'.
[  367.191192][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'.
[  370.169209][T11399] netlink: 'syz.2.2142': attribute type 10 has an invalid length.
[  370.245488][T11399] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.253913][T11399] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.451015][T11399] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.459200][T11399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.467733][T11399] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.476021][T11399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.593001][T11399] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  370.692072][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2142'.
[  370.781724][T11405] device bridge_slave_1 left promiscuous mode
[  370.904043][T11405] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.077035][T11405] device bridge_slave_0 left promiscuous mode
[  371.084409][T11405] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.450437][T11405] bond0: (slave bridge0): Releasing backup interface
[  373.273717][T11431] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  373.482217][T11436] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11437] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11436]
[  375.649424][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  375.959392][T11479] fuse: Bad value for 'fd'
[  378.454357][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  378.469724][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  378.623969][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'.
[  378.801243][T11514] overlayfs: failed to clone lowerpath
[  379.236093][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'.
[  379.787765][   T26] audit: type=1326 audit(1779241152.042:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.7.2181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x0
[  380.944771][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  380.983279][T11550] fuse: Bad value for 'fd'
[  380.998539][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  381.084159][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  381.141289][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  381.207305][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  381.228553][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  381.972468][T11559] overlayfs: failed to clone lowerpath
[  382.026205][T11563] overlayfs: failed to clone lowerpath
[  384.598768][T11599] netlink: 'syz.9.2202': attribute type 1 has an invalid length.
[  384.849194][T11599] 8021q: adding VLAN 0 to HW filter on device bond2
[  385.198636][T11605] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.326893][T11605] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.447589][T11605] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.527843][T11605] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.614682][T11605] bond2: (slave geneve2): making interface the new active one
[  385.684605][T11605] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  385.747224][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  385.778855][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2206'.
[  385.967434][T11611] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  386.845877][T11635] overlayfs: failed to clone upperpath
[  386.911936][T11636] overlayfs: failed to clone upperpath
[  388.359962][T11649] sctp: [Deprecated]: syz.4.2219 (pid 11649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.359962][T11649] Use struct sctp_sack_info instead
[  391.038803][T11697] netlink: 'syz.9.2230': attribute type 4 has an invalid length.
[  395.189259][T11745] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2249'.
[  395.428701][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2249'.
[  395.545482][T11752] bond5: (slave ip6gretap1): no link monitoring support
[  395.581688][T11752] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  396.402560][T11770] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  397.359309][T11788] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2262'.
[  397.414437][T11788] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2262'.
[  397.471093][T11788] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2262'.
[  397.535321][T11789] IPv6: NLM_F_CREATE should be specified when creating new route
[  399.895138][   T26] audit: type=1804 audit(1779241172.192:596): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2274" name="bus" dev="ramfs" ino=60237 res=1 errno=0
[  399.980775][T11813] netlink: 452 bytes leftover after parsing attributes in process `syz.9.2272'.
[  400.056597][   T26] audit: type=1804 audit(1779241172.242:597): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2274" name="bus" dev="ramfs" ino=60237 res=1 errno=0
[  400.568979][T11831] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) !
[  400.872872][T11829] team0: Port device team_slave_0 removed
[  405.737599][T11870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  405.854969][T11877] IPVS: Error joining to the multicast group
[  405.888234][T11870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.021038][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.732168][T11892] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  407.743612][T11906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2305'.
[  408.394301][T11918] netlink: 1276 bytes leftover after parsing attributes in process `syz.7.2308'.
[  409.799508][T11942] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2317'.
[  413.344922][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2329'.
[  415.022323][T11977] device vcan0 entered promiscuous mode
[  417.733175][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2343'.
[  417.759133][ T4285] Bluetooth: hci2: Invalid handle: 0xff00 > 0x0eff
[  420.865934][T12065] bond10: (slave ip6gretap1): making interface the new active one
[  420.876139][T12065] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  420.929670][T12068] device bridge3 entered promiscuous mode
[  423.032881][   T26] audit: type=1326 audit(1779241195.332:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12078 comm="syz.4.2362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a2139ce59 code=0x0
[  426.271366][T12136] device bond11 entered promiscuous mode
[  429.795575][T12204] device bridge0 entered promiscuous mode
[  434.724657][T12269] netlink: 'syz.0.2420': attribute type 10 has an invalid length.
[  434.791279][T12272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2420'.
[  435.790044][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'.
[  438.881999][T12312] netlink: 1272 bytes leftover after parsing attributes in process `syz.9.2432'.
[  439.898390][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  439.905724][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  440.115416][T12321] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  442.969760][T12346] device bond3 entered promiscuous mode
[  446.098607][T12376] fuse: Bad value for 'fd'
[  446.806319][T12384] netlink: 'syz.9.2457': attribute type 10 has an invalid length.
[  446.848559][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2457'.
[  446.937271][T12387] device bridge_slave_1 left promiscuous mode
[  446.987432][T12387] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.058346][T12387] device bridge_slave_0 left promiscuous mode
[  447.066021][T12387] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.156448][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2460'.
[  454.195012][   T26] audit: type=1326 audit(1779241226.492:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  454.388973][   T26] audit: type=1326 audit(1779241226.522:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  454.417945][   T26] audit: type=1326 audit(1779241226.522:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  454.539192][   T26] audit: type=1326 audit(1779241226.522:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  454.748063][   T26] audit: type=1326 audit(1779241226.522:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  454.897652][   T26] audit: type=1326 audit(1779241226.522:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  455.039866][   T26] audit: type=1326 audit(1779241226.522:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  455.222353][   T26] audit: type=1326 audit(1779241226.532:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  455.436862][   T26] audit: type=1326 audit(1779241226.532:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  455.620530][   T26] audit: type=1326 audit(1779241226.532:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.2.2473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f028259ce59 code=0x7ffc0000
[  456.995030][T12477] overlayfs: failed to clone lowerpath
[  457.067607][T12473] overlayfs: failed to clone lowerpath
[  458.904731][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2489'.
[  459.154829][T12500] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  462.538189][T12538] overlayfs: failed to clone upperpath
[  464.182611][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  464.182771][   T26] audit: type=1326 audit(1779241236.482:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  464.394754][   T26] audit: type=1326 audit(1779241236.492:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  464.535234][   T26] audit: type=1326 audit(1779241236.532:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  464.678860][   T26] audit: type=1326 audit(1779241236.532:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  464.787497][   T26] audit: type=1326 audit(1779241236.532:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  465.007042][   T26] audit: type=1326 audit(1779241236.532:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  465.077538][T12562] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  465.127500][T12562] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  465.176892][   T26] audit: type=1326 audit(1779241236.532:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  465.291061][   T26] audit: type=1326 audit(1779241236.532:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  465.414947][   T26] audit: type=1326 audit(1779241236.532:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  465.455621][   T26] audit: type=1326 audit(1779241236.532:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  474.144229][T12619] dns_resolver: Unsupported server list version (6)
[  483.705819][ T4870] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.001794][ T4870] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.224529][ T4870] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.571154][ T4870] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.351910][T12719] 8021q: VLANs not supported on sit0
[  494.037823][T12738] netlink: 'syz.9.2570': attribute type 12 has an invalid length.
[  494.081088][T12744] netlink: 'syz.2.2571': attribute type 1 has an invalid length.
[  494.293919][T12744] 8021q: adding VLAN 0 to HW filter on device bond4
[  494.519954][T12747] bond4: (slave geneve3): making interface the new active one
[  494.657090][T12747] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  494.863700][T12758] syz.9.2574 sent an empty control message without MSG_MORE.
[  494.912362][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  495.624171][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'.
[  501.332399][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  501.340170][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  502.892591][ T4870] device hsr_slave_0 left promiscuous mode
[  502.918426][ T4870] device hsr_slave_1 left promiscuous mode
[  502.964851][ T4870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.065424][ T4870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.169728][ T4870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.321749][ T4870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.028271][ T4870] device veth1_macvtap left promiscuous mode
[  504.085384][ T4870] device veth0_macvtap left promiscuous mode
[  504.141524][ T4870] device veth1_vlan left promiscuous mode
[  504.207132][ T4870] device veth0_vlan left promiscuous mode
[  509.396354][T12880] fuse: Unknown parameter 'group_id00000000000000000000'
[  510.259523][ T4870] team0 (unregistering): Port device team_slave_1 removed
[  510.383488][ T4870] team0 (unregistering): Port device team_slave_0 removed
[  511.571754][T12858] netlink: 'syz.9.2602': attribute type 10 has an invalid length.
[  511.604033][T12863] netlink: 'syz.2.2603': attribute type 4 has an invalid length.
[  511.626397][T12864] netlink: 'syz.2.2603': attribute type 4 has an invalid length.
[  511.717680][T12873] netlink: 'syz.0.2606': attribute type 1 has an invalid length.
[  511.739925][T12874] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  511.832079][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2608'.
[  512.014903][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'.
[  512.092165][T12895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2613'.
[  512.140691][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'.
[  512.248469][T12895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2613'.
[  512.422833][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2617'.
[  512.855841][T12913] 8021q: adding VLAN 0 to HW filter on device bond5
[  512.903166][T12913] bond4: (slave bond5): Enslaving as an active interface with an up link
[  513.923521][T12930] virtio-fs: tag </dev/md0> not found
[  515.693614][T12954] overlayfs: failed to get inode (-116)
[  515.818885][T12954] overlayfs: failed to get inode (-116)
[  520.666594][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2642'.
[  527.070948][T13048] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  527.123343][T13048] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  527.186812][T13048] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  527.247702][T13048] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.024040][T13083] tmpfs: Bad value for 'nr_blocks'
[  529.112320][T13087] overlayfs: './file0' not a directory
[  530.361367][T13110] netlink: 'syz.2.2667': attribute type 1 has an invalid length.
[  530.838454][T13111] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  530.877620][T13111] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  530.980019][T13111] bond5: (slave vxcan3): making interface the new active one
[  531.096939][T13111] bond5: (slave vxcan3): Enslaving as an active interface with an up link
[  531.520088][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'.
[  532.077879][T13110] bond5 (unregistering): (slave vxcan3): Releasing backup interface
[  532.241105][T13110] bond5 (unregistering): Released all slaves
[  541.828659][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2697'.
[  543.018132][T13243] IPVS: lc: FWM 3 0x00000003 - no destination available
[  547.328435][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2718'.
[  550.007563][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  550.007595][   T26] audit: type=1804 audit(1779241322.312:624): pid=13338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2724" name="bus" dev="ramfs" ino=65751 res=1 errno=0
[  550.226988][   T26] audit: type=1804 audit(1779241322.402:625): pid=13338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2724" name="bus" dev="ramfs" ino=65751 res=1 errno=0
[  551.459031][T13356] fuse: Bad value for 'fd'
[  551.492436][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'.
[  552.552185][T13379] dns_resolver: Unsupported server list version (6)
[  559.755399][T13446] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2753'.
[  563.189774][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  563.197008][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  563.821366][T13472] netlink: 'syz.4.2760': attribute type 1 has an invalid length.
[  563.878452][T13472] netlink: 'syz.4.2760': attribute type 2 has an invalid length.
[  564.441458][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2761'.
[  566.811251][T13484] bond7 (unregistering): Released all slaves
[  568.919181][T13511] device bridge_slave_0 entered promiscuous mode
[  568.926687][T13511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  569.085413][T13511] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  569.237656][   T26] audit: type=1804 audit(1779241341.542:626): pid=13523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2771" name="bus" dev="ramfs" ino=66019 res=1 errno=0
[  569.365042][   T26] audit: type=1804 audit(1779241341.572:627): pid=13523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2771" name="bus" dev="ramfs" ino=66019 res=1 errno=0
[  569.532160][T13529] netlink: 'syz.4.2773': attribute type 1 has an invalid length.
[  569.673091][T13533] overlayfs: failed to clone upperpath
[  569.948130][T13529] 8021q: adding VLAN 0 to HW filter on device bond12
[  570.395722][T13529] bond12: (slave ip6gretap2): making interface the new active one
[  570.497531][T13529] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link
[  573.635231][T13573] netlink: 'syz.7.2784': attribute type 12 has an invalid length.
[  573.974726][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2785'.
[  577.668149][T13615] fuse: Bad value for 'fd'
[  581.479445][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2807'.
[  582.813233][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2810'.
[  582.869438][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2810'.
[  588.852819][T13701] fuse: Bad value for 'fd'
[  597.665295][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2829'.
[  597.812782][T13767] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  599.263185][T13786] tmpfs: Bad value for 'nr_inodes'
[  603.127191][   T26] audit: type=1326 audit(1779241375.422:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  603.311752][   T26] audit: type=1326 audit(1779241375.462:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  603.551222][   T26] audit: type=1326 audit(1779241375.462:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  604.054297][   T26] audit: type=1326 audit(1779241375.582:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  606.052613][   T26] audit: type=1326 audit(1779241375.582:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  606.088045][   T26] audit: type=1326 audit(1779241375.582:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  606.139583][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2844'.
[  606.377201][   T26] audit: type=1326 audit(1779241375.592:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  606.583905][   T26] audit: type=1326 audit(1779241375.592:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  606.809509][   T26] audit: type=1326 audit(1779241375.592:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  607.250646][   T26] audit: type=1326 audit(1779241375.642:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz.7.2841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  610.377402][T13850] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  613.927336][T13870] netlink: 'syz.0.2860': attribute type 32 has an invalid length.
[  613.977107][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'.
[  614.080660][T13870] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  619.150715][T13914] autofs4:pid:13914:autofs_fill_super: called with bogus options
[  621.672486][T13939] batman_adv: batadv0: Interface deactivated: dummy0
[  621.680700][T13939] batman_adv: batadv0: Removing interface: dummy0
[  621.695684][T13939] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  621.706435][T13939] bond0: (slave bond_slave_0): Releasing backup interface
[  621.732748][T13939] bond0: (slave bond_slave_1): Releasing backup interface
[  621.775869][T13939] team0: Port device team_slave_1 removed
[  621.783408][T13939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  621.821514][T13939] bond1: (slave bond2): Releasing backup interface
[  621.905049][T13939] bond3: (slave geneve2): Releasing active interface
[  621.927028][T13939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.937327][T13939] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.947561][T13939] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  621.957936][T13939] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  622.008786][T13939] bond4: (slave veth7): Releasing active interface
[  622.100706][T13940] team0: Mode changed to "loadbalance"
[  622.669291][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2879'.
[  625.192726][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  625.211772][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  625.625310][T13964] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2881'.
[  625.746618][T13965] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  628.930559][T14004] 9pnet: p9_errstr2errno: server reported unknown error ��'I�$�۷=�
[  636.686460][T14043] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  638.085982][T14088] Invalid option length (62363) for dns_resolver key
[  639.073672][T14093] bridge0: port 1(vlan1) entered blocking state
[  639.167814][T14093] bridge0: port 1(vlan1) entered disabled state
[  639.279010][T14093] device vlan1 entered promiscuous mode
[  639.320486][T14093] device bond0 entered promiscuous mode
[  645.319059][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  645.403232][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  645.486434][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  645.585137][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  645.843757][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  645.953426][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  646.550416][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  647.014882][   T26] kauditd_printk_skb: 52 callbacks suppressed
[  647.014916][   T26] audit: type=1107 audit(1779241418.962:690): pid=14147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  647.048440][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  647.177872][T14136] bond0: (slave bond_slave_0): Releasing backup interface
[  647.520697][T14136] bond0: (slave bond_slave_1): Releasing backup interface
[  649.660382][T14136] team0: Port device team_slave_0 removed
[  649.744863][T14136] team0: Port device team_slave_1 removed
[  649.841769][T14136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.901697][T14136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  651.569246][T14136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  651.611096][T14136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  651.923617][T14174] xt_recent: hitcount (33554435) is larger than allowed maximum (255)
[  651.984831][T14136] team0: Port device vlan0 removed
[  652.025589][T14136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  652.081625][   T26] audit: type=1326 audit(1779241424.382:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  652.155294][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2935'.
[  652.158274][T14136] bond1: (slave geneve2): Releasing active interface
[  652.322279][   T26] audit: type=1326 audit(1779241424.382:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  652.493985][T14136] bond4: (slave geneve3): Releasing active interface
[  652.668674][ T4873] tipc: Resetting bearer <eth:team0>
[  652.837139][   T26] audit: type=1326 audit(1779241424.392:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f15e01592ac code=0x7ffc0000
[  656.847779][   T26] audit: type=1326 audit(1779241424.392:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f15e015930e code=0x7ffc0000
[  657.087146][   T26] audit: type=1326 audit(1779241424.392:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f15e019caeb code=0x7ffc0000
[  657.377162][   T26] audit: type=1326 audit(1779241424.392:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  657.661851][   T26] audit: type=1326 audit(1779241424.392:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  657.971364][   T26] audit: type=1326 audit(1779241424.442:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  658.077206][T14201] netlink: 'syz.0.2940': attribute type 15 has an invalid length.
[  658.140512][   T26] audit: type=1326 audit(1779241424.442:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  658.195994][   T26] audit: type=1326 audit(1779241424.452:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  658.384376][   T26] audit: type=1326 audit(1779241424.452:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  658.635390][   T26] audit: type=1326 audit(1779241424.452:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  659.661255][   T26] audit: type=1326 audit(1779241424.452:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  659.924824][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  659.977607][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  659.990721][   T26] audit: type=1326 audit(1779241424.452:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  660.019633][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  660.103976][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  665.677409][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  665.688943][    C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2
[  665.736340][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  665.750779][   T26] audit: type=1326 audit(1779241424.452:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  665.949170][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  666.112263][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  666.167483][   T26] audit: type=1326 audit(1779241424.612:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  666.327188][   T26] audit: type=1326 audit(1779241424.612:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  666.365794][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  666.904753][   T26] audit: type=1326 audit(1779241424.612:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  666.934788][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  666.967004][   T26] audit: type=1326 audit(1779241424.612:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  667.217882][   T26] audit: type=1326 audit(1779241424.692:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  668.709230][   T26] audit: type=1326 audit(1779241424.692:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  668.757115][T14220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  668.928981][T14220] team0: Port device ip6gre1 removed
[  669.046853][   T26] audit: type=1326 audit(1779241424.692:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  669.053403][T14220] bond7: (slave bond8): Releasing backup interface
[  669.287018][   T26] audit: type=1326 audit(1779241424.692:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  669.379947][T14220] bond7: (slave bond8): the permanent HWaddr of slave - 96:94:e6:20:98:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  669.455516][   T26] audit: type=1326 audit(1779241424.692:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.7.2935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e019ce59 code=0x7ffc0000
[  669.577158][T14220] bond7: (slave gretap1): making interface the new active one
[  669.826327][T14220] bond7: (slave gretap1): Releasing backup interface
[  670.055719][T14220] bond9: (slave gretap2): Releasing active interface
[  670.258401][T14220] bond10: (slave ip6gretap1): Releasing active interface
[  670.561108][T14220] bond12: (slave ip6gretap2): Releasing active interface
[  670.817037][T14220] device vlan1 left promiscuous mode
[  670.823209][T14220] device bond0 left promiscuous mode
[  670.872158][T14220] bridge0: port 1(vlan1) entered disabled state
[  670.939955][ T4839] tipc: Resetting bearer <eth:team0>
[  671.225730][T14258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  671.285433][T14258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  671.298215][T14258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  671.315845][T14258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  671.339348][T14258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  671.350027][T14258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  671.456850][T14220] syz.4.2949 (14220) used greatest stack depth: 16848 bytes left
[  673.412348][ T4289] Bluetooth: hci5: command 0x0409 tx timeout
[  674.201938][T14298] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  676.610922][T14258] Bluetooth: hci5: command 0x041b tx timeout
[  676.972759][T14256] chnl_net:caif_netlink_parms(): no params data found
[  678.009536][T14256] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.218412][T14322] x_tables: duplicate underflow at hook 2
[  678.644708][T14256] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.089731][T14258] Bluetooth: hci5: command 0x040f tx timeout
[  679.175321][T14256] device bridge_slave_0 entered promiscuous mode
[  679.347006][T14256] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.412975][T14256] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.497412][T14256] device bridge_slave_1 entered promiscuous mode
[  679.795345][T14256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  679.948747][T14256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.521771][T14256] team0: Port device team_slave_0 added
[  680.556306][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  680.590332][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  680.601768][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  680.621810][T14256] team0: Port device team_slave_1 added
[  680.628834][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  680.639576][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  680.649114][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  681.103228][T14256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.152049][T14256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.191859][ T4289] Bluetooth: hci5: command 0x0419 tx timeout
[  681.446769][T14256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.602037][T14256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.602263][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'.
[  681.627500][T14256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.836526][T14256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  683.873345][T14258] Bluetooth: hci4: command 0x0409 tx timeout
[  685.395437][T14256] device hsr_slave_0 entered promiscuous mode
[  685.458100][T14256] device hsr_slave_1 entered promiscuous mode
[  685.514949][T14256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  685.552900][T14256] Cannot create hsr debugfs directory
[  685.651557][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  685.659122][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  685.887331][T14258] Bluetooth: hci4: command 0x041b tx timeout
[  686.402920][ T4869] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.961038][ T4869] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.363845][ T4869] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.472990][T14330] chnl_net:caif_netlink_parms(): no params data found
[  687.722199][ T4869] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.968563][T14258] Bluetooth: hci4: command 0x040f tx timeout
[  689.328019][T14389] netlink: 'syz.0.2978': attribute type 3 has an invalid length.
[  689.418530][T14389] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2978'.
[  690.047360][T14258] Bluetooth: hci4: command 0x0419 tx timeout
[  690.151865][T14397] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2979'.
[  690.432628][T14330] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.447631][T14330] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.517400][T14330] device bridge_slave_0 entered promiscuous mode
[  690.570262][T14330] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.628817][T14330] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.687239][T14330] device bridge_slave_1 entered promiscuous mode
[  690.985140][T14330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.084465][T14330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.898248][T14330] team0: Port device team_slave_0 added
[  692.403089][T14330] team0: Port device team_slave_1 added
[  692.587939][T14330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  692.638759][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  692.817130][T14330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  693.201413][T14330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  693.246799][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.810774][T14330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.816043][ T4869] bond5: (slave ip6gretap1): Releasing backup interface
[  696.476541][T14330] device hsr_slave_0 entered promiscuous mode
[  696.590898][T14330] device hsr_slave_1 entered promiscuous mode
[  696.614304][T14330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  696.650117][T14330] Cannot create hsr debugfs directory
[  696.681732][T14462] netlink: 'syz.0.2991': attribute type 4 has an invalid length.
[  696.770445][T14463] netlink: 'syz.0.2991': attribute type 4 has an invalid length.
[  698.488264][T14256] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  698.529883][T14256] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  698.619370][T14256] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  699.987285][T14256] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  709.606197][T14256] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.831388][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  709.861267][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  709.921958][T14256] 8021q: adding VLAN 0 to HW filter on device team0
[  710.022291][ T4869] device hsr_slave_0 left promiscuous mode
[  710.078100][ T4869] device hsr_slave_1 left promiscuous mode
[  710.490495][ T4869] device veth1_macvtap left promiscuous mode
[  710.526927][ T4869] device veth0_macvtap left promiscuous mode
[  710.534145][ T4869] device veth1_vlan left promiscuous mode
[  710.569267][ T4869] device veth0_vlan left promiscuous mode
[  711.542118][ T4869] bond6 (unregistering): Released all slaves
[  711.684802][ T4869] bond5 (unregistering): Released all slaves
[  711.804206][ T4869] bond4 (unregistering): Released all slaves
[  711.843565][ T4869] bond3 (unregistering): Released all slaves
[  711.882613][ T4869] bond2 (unregistering): (slave geneve4): Releasing active interface
[  712.185184][ T4869] bond2 (unregistering): Released all slaves
[  712.212208][ T4869] bond1 (unregistering): Released all slaves
[  713.153671][ T4869] bond0 (unregistering): Released all slaves
[  714.292256][ T4869] team0 (unregistering): Port device team_slave_1 removed
[  714.389776][ T4869] team0 (unregistering): Port device team_slave_0 removed
[  715.116529][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  715.128887][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  715.139789][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.148217][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.195180][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'.
[  715.890763][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  715.910457][T14634] raw_sendmsg: syz.0.3027 forgot to set AF_INET. Fix it!
[  715.920322][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  715.936339][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  715.959281][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.967545][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  716.016300][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  716.122929][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  716.175497][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  716.223342][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  716.279533][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  716.361683][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  716.427844][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  716.496070][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  716.600147][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  716.701729][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  716.745930][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  716.832114][T14256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  716.901420][T14330] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  717.004974][T14330] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  717.730082][T14330] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  717.878696][T14330] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  720.187862][T14330] 8021q: adding VLAN 0 to HW filter on device bond0
[  720.299865][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  720.328211][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  720.390045][T14330] 8021q: adding VLAN 0 to HW filter on device team0
[  720.466236][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  720.506173][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  720.562369][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.570673][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  720.654747][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  720.750307][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  720.829282][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  720.885992][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.894352][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  720.966444][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  721.033306][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  721.353917][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  721.397292][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  721.439405][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  723.358651][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  723.718986][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  723.902820][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  723.931459][T14697] 9pnet_fd: Insufficient options for proto=fd
[  723.967669][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  724.008037][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  724.141704][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  725.889038][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  726.028834][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  726.161129][T14256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  726.557731][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  726.602386][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  726.954991][ T4869] team0: Port device netdevsim0 removed
[  728.230556][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  728.267938][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  728.311850][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  728.390622][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  728.459809][T14256] device veth0_vlan entered promiscuous mode
[  728.795515][T14738] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  728.809452][T14741] sch_tbf: burst 6281 is lower than device lo mtu (11337746) !
[  729.439995][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  729.466202][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  729.570382][T14330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  731.183487][T14756] tipc: Failed to remove unknown binding: 66,0,0/0:2995966191/2995966193
[  731.193332][T14756] tipc: Failed to remove unknown binding: 66,0,0/0:2995966191/2995966192
[  731.205881][T14756] tipc: Failed to remove unknown binding: 66,0,0/0:2995966191/2995966193
[  731.215643][T14756] tipc: Failed to remove unknown binding: 66,0,0/0:2995966191/2995966192
[  731.878566][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  731.891797][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  731.903471][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  731.969827][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  731.998785][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  732.021693][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  734.138182][T14258] Bluetooth: hci0: command 0x0409 tx timeout
[  734.490478][   T26] kauditd_printk_skb: 47 callbacks suppressed
[  734.490510][   T26] audit: type=1326 audit(1779241506.792:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  734.553621][T14785] syz.0.3058 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  734.862083][   T26] audit: type=1326 audit(1779241506.852:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.177253][   T26] audit: type=1326 audit(1779241507.032:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.398118][   T26] audit: type=1326 audit(1779241507.032:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.578051][   T26] audit: type=1326 audit(1779241507.052:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.606362][   T26] audit: type=1326 audit(1779241507.052:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.634782][   T26] audit: type=1326 audit(1779241507.052:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.672393][   T26] audit: type=1326 audit(1779241507.052:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.846453][   T26] audit: type=1326 audit(1779241507.052:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  735.936086][   T26] audit: type=1326 audit(1779241507.052:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.0.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedc99ce59 code=0x7ffc0000
[  736.207639][T14258] Bluetooth: hci0: command 0x041b tx timeout
[  736.539392][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  736.557541][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  736.589405][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  736.617942][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  736.628100][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  736.636680][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  738.300236][T14258] Bluetooth: hci0: command 0x040f tx timeout
[  738.347163][T14765] chnl_net:caif_netlink_parms(): no params data found
[  738.697730][T14258] Bluetooth: hci4: command 0x0409 tx timeout
[  741.069574][T14258] Bluetooth: hci0: command 0x0419 tx timeout
[  741.076564][T14258] Bluetooth: hci4: command 0x041b tx timeout
[  741.684299][T14869] "syz.0.3071" (14869) uses obsolete ecb(arc4) skcipher
[  742.532609][T14765] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.555937][T14765] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.582721][T14765] device bridge_slave_0 entered promiscuous mode
[  742.659137][T14765] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.707011][T14765] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.756296][T14765] device bridge_slave_1 entered promiscuous mode
[  742.957725][T14877] overlayfs: failed to clone upperpath
[  743.035883][ T4869] device hsr_slave_0 left promiscuous mode
[  743.060362][ T4869] device hsr_slave_1 left promiscuous mode
[  743.101192][ T4869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  743.142381][ T4869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  743.167215][T14258] Bluetooth: hci4: command 0x040f tx timeout
[  743.532273][T14883] xt_hashlimit: invalid rate
[  743.915793][ T4869] bond4 (unregistering): (slave bond5): Releasing backup interface
[  743.934734][ T4869] bond5 (unregistering): Released all slaves
[  743.959898][ T4869] bond4 (unregistering): Released all slaves
[  743.983100][ T4869] bond3 (unregistering): Released all slaves
[  744.044349][ T4869] bond2 (unregistering): (slave geneve2): Releasing active interface
[  744.498750][ T4869] bond2 (unregistering): Released all slaves
[  744.588446][ T4869] bond1 (unregistering): (slave bridge2): Removing an active aggregator
[  744.617833][ T4869] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  744.653223][ T4869] device bridge2 left promiscuous mode
[  745.867938][T14258] Bluetooth: hci4: command 0x0419 tx timeout
[  746.005705][ T4869] bond1 (unregistering): Released all slaves
[  746.420755][T14894] netlink: 'syz.4.3078': attribute type 1 has an invalid length.
[  747.109032][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  747.115386][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  747.417339][ T4869] team0 (unregistering): Port device team_slave_1 removed
[  747.499214][ T4869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  747.586626][ T4869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.406583][ T4869] bond0 (unregistering): Released all slaves
[  748.460722][T14765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  748.474160][T14765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  748.515798][T14887] netlink: 'syz.2.3074': attribute type 4 has an invalid length.
[  748.635973][T14765] team0: Port device team_slave_0 added
[  748.665092][T14765] team0: Port device team_slave_1 added
[  748.768364][T14765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  748.804258][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  748.907250][T14765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  748.950308][T14809] chnl_net:caif_netlink_parms(): no params data found
[  749.036514][T14765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  749.056004][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  749.108562][T14765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  749.470795][T14765] device hsr_slave_0 entered promiscuous mode
[  749.529042][T14765] device hsr_slave_1 entered promiscuous mode
[  749.567751][T14765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  749.582061][T14765] Cannot create hsr debugfs directory
[  749.616990][T14929] netlink: 'syz.4.3084': attribute type 1 has an invalid length.
[  749.696487][T14929] 8021q: adding VLAN 0 to HW filter on device bond14
[  749.845266][T14931] bond14: (slave veth13): Enslaving as an active interface with a down link
[  749.983790][T14809] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.029445][T14809] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.242806][T14809] device bridge_slave_0 entered promiscuous mode
[  751.299865][T14936] bond14: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  751.439284][T14809] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.473253][T14809] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.501025][T14809] device bridge_slave_1 entered promiscuous mode
[  751.563921][T14951] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  751.577934][T14951] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  751.586625][T14951] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  751.645619][T14951] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  751.717627][T14951] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  751.767214][T14951] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  751.801263][T14951] tipc: Resetting bearer <eth:team0>
[  751.873532][T14951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  752.061250][T14809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  752.124854][T14809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  752.522062][T14809] team0: Port device team_slave_0 added
[  753.141825][T14809] team0: Port device team_slave_1 added
[  756.773558][T14809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  756.799307][T14809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  756.952412][T14809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  757.585634][T14809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  757.603242][T14809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  757.633379][T14809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.437671][T14809] device hsr_slave_0 entered promiscuous mode
[  758.499182][T14809] device hsr_slave_1 entered promiscuous mode
[  758.537254][T14809] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  758.545253][T14809] Cannot create hsr debugfs directory
[  758.873076][T15003] netlink: 'syz.4.3098': attribute type 2 has an invalid length.
[  761.000154][T15026] xt_hashlimit: max too large, truncated to 1048576
[  761.007711][T15026] xt_limit: Overflow, try lower: 0/0
[  764.671607][T15064] overlayfs: failed to clone upperpath
[  767.384286][T15088] netlink: 'syz.0.3115': attribute type 1 has an invalid length.
[  767.439779][T15088] 8021q: adding VLAN 0 to HW filter on device bond6
[  767.498658][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3115'.
[  767.518324][T15094] device bond6 entered promiscuous mode
[  767.563893][T14765] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  767.666141][T14765] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  768.193794][T14765] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  768.455246][T14765] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  769.500754][T15120] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  769.538229][T14809] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  769.584444][ T4869] device hsr_slave_0 left promiscuous mode
[  769.603254][ T4869] device hsr_slave_1 left promiscuous mode
[  769.660862][ T4869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.689172][ T4869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  769.751330][ T4869] device bridge_slave_1 left promiscuous mode
[  769.761029][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.781439][ T4869] device bridge_slave_0 left promiscuous mode
[  769.836740][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.906951][ T4869] device hsr_slave_0 left promiscuous mode
[  769.934839][ T4869] device hsr_slave_1 left promiscuous mode
[  769.963892][ T4869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  770.002463][ T4869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  770.031415][ T4869] device bridge_slave_1 left promiscuous mode
[  770.054709][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.097935][ T4869] device bridge_slave_0 left promiscuous mode
[  770.104389][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.261327][ T4869] device veth0_vlan left promiscuous mode
[  771.538054][ T4869] team0 (unregistering): Port device team_slave_1 removed
[  771.676453][ T4869] team0 (unregistering): Port device team_slave_0 removed
[  771.782350][ T4869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  771.904841][ T4869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  772.666112][ T4869] bond0 (unregistering): Released all slaves
[  773.366252][ T4869] team0 (unregistering): Port device team_slave_1 removed
[  773.450723][ T4869] team0 (unregistering): Port device team_slave_0 removed
[  773.528646][ T4869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.600423][ T4869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  774.104521][ T4869] bond0 (unregistering): Released all slaves
[  774.238657][T14809] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  774.259002][T14809] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  774.276456][T15131] netlink: 'syz.4.3123': attribute type 1 has an invalid length.
[  774.384851][T14809] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  774.491382][T14765] 8021q: adding VLAN 0 to HW filter on device bond0
[  774.575586][T14765] 8021q: adding VLAN 0 to HW filter on device team0
[  774.607201][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  774.616103][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  774.682051][T15162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3129'.
[  774.804428][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  774.821733][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  774.842259][T14859] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.849489][T14859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.865832][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  774.884496][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  774.895007][T14859] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.902210][T14859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  774.920729][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  774.942802][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  775.028484][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  775.074766][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  775.125768][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  775.148100][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  775.295962][T14765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  775.324337][T14765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  775.481645][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  775.500442][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  776.017837][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  776.058882][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  776.104729][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  776.158751][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  776.224092][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  776.303577][T14809] 8021q: adding VLAN 0 to HW filter on device bond0
[  776.463691][T14809] 8021q: adding VLAN 0 to HW filter on device team0
[  776.518650][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  776.531823][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  776.571161][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  776.608745][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  776.664789][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.672025][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  776.764306][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  776.826200][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  776.877853][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.885037][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  776.987733][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  777.063234][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  777.154278][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  777.260057][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  777.393186][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  777.467708][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  777.476598][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  777.534280][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  777.571194][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  777.624258][T14809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  777.672996][T14809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  777.691942][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  777.725059][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  777.745116][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  777.832955][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  777.859766][T14859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  777.893939][T14765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  778.053327][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  778.071539][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  778.120263][T14765] device veth0_vlan entered promiscuous mode
[  778.159050][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  778.183421][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  778.242459][T14765] device veth1_vlan entered promiscuous mode
[  778.272538][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  778.293252][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  778.316624][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  778.424815][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  778.437473][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  778.471316][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  778.501657][T14765] device veth0_macvtap entered promiscuous mode
[  778.542263][T14765] device veth1_macvtap entered promiscuous mode
[  778.699644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  778.740253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  778.897715][T14765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  778.916852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  778.956174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  779.013377][T14765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  779.043090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  779.084281][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  779.135668][T14765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  779.175184][T14765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  779.226606][T14765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  779.251174][T14765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  779.320872][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  779.355460][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  779.486021][T14809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  780.697355][ T4855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  780.766133][ T4855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  780.814789][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  780.902890][ T4837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  780.966787][ T4837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  781.702689][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  781.719067][T15237] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  782.595392][T15252] netlink: 'syz.1.2953': attribute type 9 has an invalid length.
[  782.604352][T15252] netlink: 'syz.1.2953': attribute type 7 has an invalid length.
[  782.613279][T15252] netlink: 'syz.1.2953': attribute type 8 has an invalid length.
[  783.853210][T15260] loop1: detected capacity change from 0 to 256
[  784.007237][T15260] FAT-fs (loop1): Directory bread(block 64) failed
[  784.066876][T15260] FAT-fs (loop1): Directory bread(block 65) failed
[  784.073561][T15260] FAT-fs (loop1): Directory bread(block 66) failed
[  784.186987][T15260] FAT-fs (loop1): Directory bread(block 67) failed
[  784.231917][T15260] FAT-fs (loop1): Directory bread(block 68) failed
[  784.248339][T15260] FAT-fs (loop1): Directory bread(block 69) failed
[  784.307192][T15260] FAT-fs (loop1): Directory bread(block 70) failed
[  784.336813][T15260] FAT-fs (loop1): Directory bread(block 71) failed
[  784.344653][T15260] FAT-fs (loop1): Directory bread(block 72) failed
[  784.427519][T15260] FAT-fs (loop1): Directory bread(block 73) failed
[  787.018023][T15298] exfat: Deprecated parameter 'debug'
[  787.046531][T15298] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  787.051628][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  787.090120][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  787.124867][T15298] exFAT-fs (loop1): unable to read boot sector
[  787.152754][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  787.158139][T15298] exFAT-fs (loop1): failed to read boot sector
[  787.173201][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  787.195487][T14809] device veth0_vlan entered promiscuous mode
[  787.210287][T15298] exFAT-fs (loop1): failed to recognize exfat type
[  787.211833][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  787.242244][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  787.280452][T14809] device veth1_vlan entered promiscuous mode
[  787.393597][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  787.428674][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  787.488701][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  787.529753][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  787.768984][T14809] device veth0_macvtap entered promiscuous mode
[  787.839335][T14809] device veth1_macvtap entered promiscuous mode
[  788.143655][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.288586][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.514502][T14809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  788.780565][T14809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  789.318363][T14809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.357766][T14809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  789.657479][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  789.665784][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  789.762748][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  790.525418][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  790.577505][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  790.654223][T15338] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56
[  790.938189][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  791.073103][T14809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.147384][T14809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.156251][T14809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.165270][T14809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.517350][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.526416][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.612643][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  791.686509][ T4823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.714420][ T4823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.748769][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  792.357549][T15372] team0: No ports can be present during mode change
[  793.496183][T15382] syz.5.3181[15382] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  793.496292][T15382] syz.5.3181[15382] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  795.150621][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'.
[  795.561198][T15428] bond15: (slave bridge4): Enslaving as an active interface with an up link
[  795.618090][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3194'.
[  795.675344][T15430] device bond15 entered promiscuous mode
[  795.756943][T15430] device bridge4 entered promiscuous mode
[  795.787086][T15430] 8021q: adding VLAN 0 to HW filter on device bond15
[  797.461171][T15452] netlink: 'syz.0.3200': attribute type 1 has an invalid length.
[  797.970948][ T4318] libceph: connect (1)[c::]:6789 error -101
[  797.981561][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  798.341357][T15461] ceph: No mds server is up or the cluster is laggy
[  798.349881][ T4318] libceph: connect (1)[c::]:6789 error -101
[  798.356938][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  798.475796][T15478] xt_CT: You must specify a L4 protocol and not use inversions on it
[  905.976673][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  905.983677][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P15485/1:b..l
[  905.992433][    C1] 	(detected by 1, t=10502 jiffies, g=91953, q=41 ncpus=2)
[  905.999636][    C1] task:sed             state:R  running task     stack:23664 pid:15485 ppid:15484  flags:0x00004002
[  906.012173][    C1] Call Trace:
[  906.015596][    C1]  <TASK>
[  906.018619][    C1]  __schedule+0x11d1/0x40e0
[  906.023255][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  906.029279][    C1]  ? __sched_text_start+0x8/0x8
[  906.034138][    C1]  ? lock_chain_count+0x20/0x20
[  906.039019][    C1]  ? preempt_schedule_irq+0xb0/0x160
[  906.044338][    C1]  preempt_schedule_irq+0xbb/0x160
[  906.049471][    C1]  ? preempt_schedule_notrace+0x120/0x120
[  906.055202][    C1]  ? is_bpf_text_address+0x22/0x2a0
[  906.060489][    C1]  ? rcu_is_watching+0x11/0xa0
[  906.065337][    C1]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  906.071158][    C1]  irqentry_exit+0x63/0x70
[  906.075631][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  906.081702][    C1] RIP: 0010:__stack_depot_save+0x16c/0x460
[  906.087599][    C1] Code: ee bd 12 44 8b 25 08 ee bd 12 41 21 ec 4f 8b 2c e0 4d 85 ed 74 64 44 89 f9 eb 09 4d 8b 6d 00 4d 85 ed 74 56 41 39 6d 08 75 f1 <45> 39 7d 0c 75 eb 31 d2 49 8b 34 d6 49 3b 74 d5 18 75 de 48 ff c2
[  906.107255][    C1] RSP: 0018:ffffc900055cf5d8 EFLAGS: 00000246
[  906.113400][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000d
[  906.121377][    C1] RDX: 00000000d2d0eca9 RSI: 000000001343c5b5 RDI: 0000000000002800
[  906.129352][    C1] RBP: 00000000191b7e71 R08: ffff88823b400000 R09: 0000000000000001
[  906.137330][    C1] R10: 000000000f2e4c91 R11: fffffbfff1c3ff7e R12: 00000000000b7e71
[  906.145309][    C1] R13: ffff88802fdac430 R14: ffffc900055cf680 R15: 000000000000000d
[  906.153300][    C1]  ? __stack_depot_save+0x35/0x460
[  906.158439][    C1]  save_stack+0x12f/0x230
[  906.162850][    C1]  ? __reset_page_owner+0x1a0/0x1a0
[  906.168052][    C1]  ? free_unref_page_prepare+0x8b4/0x9a0
[  906.173712][    C1]  ? free_unref_page_list+0xbb/0x8e0
[  906.179008][    C1]  ? release_pages+0x1fa6/0x2220
[  906.184023][    C1]  ? tlb_flush_mmu+0x105/0x220
[  906.188833][    C1]  ? tlb_finish_mmu+0xf5/0x220
[  906.193607][    C1]  ? exit_mmap+0x384/0x960
[  906.198032][    C1]  ? __mmput+0x118/0x3c0
[  906.202339][    C1]  ? exit_mm+0x25a/0x360
[  906.206625][    C1]  ? do_exit+0x905/0x2480
[  906.210976][    C1]  ? do_group_exit+0x217/0x2d0
[  906.215751][    C1]  ? __x64_sys_exit_group+0x3b/0x40
[  906.220957][    C1]  ? do_syscall_64+0x4c/0xa0
[  906.225600][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  906.231685][    C1]  ? page_ext_get+0x1de/0x2a0
[  906.236374][    C1]  __reset_page_owner+0x51/0x1a0
[  906.241327][    C1]  free_unref_page_prepare+0x8b4/0x9a0
[  906.246801][    C1]  free_unref_page_list+0xbb/0x8e0
[  906.251942][    C1]  release_pages+0x1fa6/0x2220
[  906.256727][    C1]  ? lru_cache_disable+0x30/0x30
[  906.261675][    C1]  ? free_swap_cache+0xe5/0x590
[  906.266569][    C1]  tlb_flush_mmu+0x105/0x220
[  906.271193][    C1]  tlb_finish_mmu+0xf5/0x220
[  906.276073][    C1]  exit_mmap+0x384/0x960
[  906.280340][    C1]  ? vm_brk+0x20/0x20
[  906.284331][    C1]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  906.289986][    C1]  ? exit_mm+0x24a/0x360
[  906.294251][    C1]  ? uprobe_clear_state+0x274/0x290
[  906.299502][    C1]  ? mm_update_next_owner+0x525/0x650
[  906.304885][    C1]  __mmput+0x118/0x3c0
[  906.308967][    C1]  exit_mm+0x25a/0x360
[  906.313049][    C1]  ? do_exit+0x2480/0x2480
[  906.317473][    C1]  ? taskstats_exit+0x35a/0x9d0
[  906.322430][    C1]  do_exit+0x905/0x2480
[  906.326611][    C1]  ? put_task_struct+0x80/0x80
[  906.331381][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  906.337378][    C1]  ? lock_chain_count+0x20/0x20
[  906.342237][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  906.347277][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  906.352828][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  906.358821][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  906.364023][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  906.369230][    C1]  do_group_exit+0x217/0x2d0
[  906.373942][    C1]  __x64_sys_exit_group+0x3b/0x40
[  906.378985][    C1]  do_syscall_64+0x4c/0xa0
[  906.383411][    C1]  ? clear_bhb_loop+0x60/0xb0
[  906.388096][    C1]  ? clear_bhb_loop+0x60/0xb0
[  906.392784][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  906.398685][    C1] RIP: 0033:0x7fa47b0926c5
[  906.403103][    C1] RSP: 002b:00007ffc2a650238 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[  906.411523][    C1] RAX: ffffffffffffffda RBX: 00007fa47b193fe8 RCX: 00007fa47b0926c5
[  906.419498][    C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000
[  906.427470][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  906.435531][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  906.443502][    C1] R13: 0000000000000000 R14: 00007fa47b192680 R15: 00007fa47b194000
[  906.451488][    C1]  </TASK>
[  906.454509][    C1] rcu: rcu_preempt kthread starved for 10499 jiffies! g91953 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  906.465704][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  906.475668][    C1] rcu: RCU grace-period kthread stack dump:
[  906.481553][    C1] task:rcu_preempt     state:R  running task     stack:26864 pid:16    ppid:2      flags:0x00004000
[  906.492346][    C1] Call Trace:
[  906.495629][    C1]  <TASK>
[  906.498567][    C1]  __schedule+0x11d1/0x40e0
[  906.503092][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  906.508995][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  906.514903][    C1]  ? __sched_text_start+0x8/0x8
[  906.519789][    C1]  ? __mod_timer+0x91e/0xd00
[  906.524485][    C1]  schedule+0xb9/0x180
[  906.528565][    C1]  schedule_timeout+0x184/0x2d0
[  906.533428][    C1]  ? console_conditional_schedule+0x40/0x40
[  906.539323][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  906.545225][    C1]  ? update_process_times+0x1b0/0x1b0
[  906.550612][    C1]  ? prepare_to_swait_event+0x335/0x350
[  906.556333][    C1]  rcu_gp_fqs_loop+0x303/0x1340
[  906.561258][    C1]  ? rcu_gp_kthread+0x3b0/0x3b0
[  906.566115][    C1]  ? dump_blkd_tasks+0x810/0x810
[  906.571058][    C1]  ? rcu_gp_init+0x14e0/0x14e0
[  906.575824][    C1]  ? rcu_gp_cleanup+0xb41/0xc90
[  906.580688][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  906.585922][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  906.591132][    C1]  rcu_gp_kthread+0x99/0x3b0
[  906.595739][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  906.600859][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  906.606760][    C1]  ? __kthread_parkme+0x162/0x1c0
[  906.611873][    C1]  kthread+0x29d/0x330
[  906.615996][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  906.621114][    C1]  ? kthread_blkcg+0xd0/0xd0
[  906.625710][    C1]  ret_from_fork+0x1f/0x30
[  906.630201][    C1]  </TASK>
[  906.633226][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  906.639578][    C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0
[  906.646953][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  906.657009][    C1] Workqueue: events_unbound toggle_allocation_gate
[  906.663955][    C1] RIP: 0010:smp_call_function_many_cond+0xea2/0x1290
[  906.670688][    C1] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 f6 f6 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 82 f3 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 67 f3 0a
[  906.690295][    C1] RSP: 0018:ffffc90000107800 EFLAGS: 00000293
[  906.696364][    C1] RAX: ffffffff81779349 RBX: dffffc0000000000 RCX: ffff88813fec3b80
[  906.704338][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  906.712311][    C1] RBP: ffffc90000107960 R08: ffffffff90afa247 R09: 1ffffffff215f448
[  906.720284][    C1] R10: dffffc0000000000 R11: fffffbfff215f449 R12: 1ffff110171c8601
[  906.728261][    C1] R13: ffff8880b8f3bbc0 R14: 0000000000000000 R15: ffff8880b8e43008
[  906.736232][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  906.745169][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  906.751755][    C1] CR2: 0000001b2fc1aff8 CR3: 000000000c88e000 CR4: 00000000003506e0
[  906.759734][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  906.767708][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  906.775686][    C1] Call Trace:
[  906.778968][    C1]  <TASK>
[  906.781932][    C1]  ? kmem_cache_alloc_bulk+0x11a/0x4e0
[  906.787488][    C1]  ? text_poke_sync+0x20/0x20
[  906.792239][    C1]  ? smp_call_function_many+0x30/0x30
[  906.797615][    C1]  ? kmem_cache_alloc_bulk+0x11a/0x4e0
[  906.803081][    C1]  ? text_poke+0x90/0x90
[  906.807332][    C1]  ? trace_raw_output_contention_end+0xd0/0xd0
[  906.813495][    C1]  ? text_poke_loc_init+0x10f/0x5b0
[  906.818708][    C1]  ? text_poke_sync+0x20/0x20
[  906.823389][    C1]  on_each_cpu_cond_mask+0x3b/0x80
[  906.828505][    C1]  ? kmem_cache_alloc_bulk+0x11a/0x4e0
[  906.833974][    C1]  text_poke_bp_batch+0x2b7/0x850
[  906.839014][    C1]  ? arch_jump_label_transform_apply+0xe/0x20
[  906.845087][    C1]  ? text_poke_loc_init+0x5b0/0x5b0
[  906.850300][    C1]  ? arch_jump_label_transform_queue+0x76/0xd0
[  906.856475][    C1]  text_poke_finish+0x16/0x30
[  906.861257][    C1]  arch_jump_label_transform_apply+0x13/0x20
[  906.867255][    C1]  static_key_enable_cpuslocked+0x11f/0x240
[  906.873182][    C1]  static_key_enable+0x16/0x20
[  906.877963][    C1]  toggle_allocation_gate+0xba/0x470
[  906.883261][    C1]  ? show_object+0xa0/0xa0
[  906.887687][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  906.893773][    C1]  ? read_lock_is_recursive+0x10/0x10
[  906.899159][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  906.904366][    C1]  ? process_one_work+0x7b0/0x1160
[  906.909485][    C1]  process_one_work+0x8a2/0x1160
[  906.914719][    C1]  ? worker_detach_from_pool+0x240/0x240
[  906.920369][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  906.925410][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  906.930964][    C1]  ? kthread_data+0x4b/0xc0
[  906.935483][    C1]  worker_thread+0xaa2/0x1270
[  906.940190][    C1]  kthread+0x29d/0x330
[  906.944257][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[  906.949285][    C1]  ? kthread_blkcg+0xd0/0xd0
[  906.953888][    C1]  ret_from_fork+0x1f/0x30
[  906.958327][    C1]  </TASK>