last executing test programs:

5m34.098437281s ago: executing program 32 (id=38):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "03ef7506ecbef970"}, 0x3}}, @CGW_FILTER={0xc}]}, 0x38}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xffffff16, 0xfe7e)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

5m4.53328394s ago: executing program 33 (id=212):
truncate(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0x30000000)
r0 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70")
fchdir(r1)

4m39.167016226s ago: executing program 3 (id=338):
socket$inet_udp(0x2, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101080)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16, 0x0, 0x0, 0x9}]}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000010940)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)

4m38.872765522s ago: executing program 34 (id=338):
socket$inet_udp(0x2, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101080)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16, 0x0, 0x0, 0x9}]}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000010940)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)

4m31.836119569s ago: executing program 35 (id=377):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x20c})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x8, 0x2, 0x1, 0x0, @irqchip={0x85, 0x2ff317ca}}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m24.336708376s ago: executing program 36 (id=410):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0xe000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m22.154105625s ago: executing program 37 (id=417):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000)
r2 = accept4$unix(r0, 0x0, 0x0, 0x80000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
recvfrom$unix(r2, &(0x7f0000000240)=""/239, 0xef, 0x40010040, 0x0, 0x2f)

4m20.811734855s ago: executing program 2 (id=424):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003801400020062617461647630000000000000000000080001"], 0x50}}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786e", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

4m19.406191676s ago: executing program 2 (id=433):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d"], 0x0, 0x52}, 0x28)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0xffffffffffffffa1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m18.869580729s ago: executing program 2 (id=436):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2821}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x4c}}, 0x80)
write$tun(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="4103082c1116480401020220c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016", 0x61, 0x880, 0x0, 0x0)

4m18.151834174s ago: executing program 2 (id=438):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x3}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@orlov}]}, 0x2, 0x45c, &(0x7f0000000b40)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

4m17.679129175s ago: executing program 38 (id=439):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0xc044801)
sendmsg$nl_generic(r0, 0x0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

4m17.390405041s ago: executing program 2 (id=442):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private2, @remote, @local, 0x800001, 0x9, 0xfffe, 0x100, 0x5ffffffe, 0x6820213})
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4)
r3 = dup(r2)
bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)

4m16.923525792s ago: executing program 2 (id=444):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x1}}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x2000003, 0x103032, 0xffffffffffffffff, 0xf7e29000)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000403512108240000102030109026e0003017fa006080b0002012030230904000000010130000a2401100a000a00000009040100f6ff02"], 0x0)

4m16.634028078s ago: executing program 39 (id=444):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x1}}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x2000003, 0x103032, 0xffffffffffffffff, 0xf7e29000)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000403512108240000102030109026e0003017fa006080b0002012030230904000000010130000a2401100a000a00000009040100f6ff02"], 0x0)

3m58.59252213s ago: executing program 3 (id=445):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x37800, 0x0, 0x800, 0xfffffffffffffffc, 0x80fffff, 0x9}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x3, 0x6a9}, 0x0, 0x0)

3m57.70922066s ago: executing program 3 (id=556):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x8000001d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x2, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0x8003, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x8, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x8a13, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x2800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3m57.346422258s ago: executing program 3 (id=558):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)

3m57.146346673s ago: executing program 3 (id=560):
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

3m56.657450224s ago: executing program 3 (id=564):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

3m56.451825428s ago: executing program 40 (id=564):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

2m54.280021214s ago: executing program 5 (id=955):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145)

2m52.954651624s ago: executing program 5 (id=959):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@grpquota}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x91, 0x14f5, &(0x7f0000001580)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m52.167447442s ago: executing program 5 (id=966):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3b)

2m51.663735593s ago: executing program 5 (id=967):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1081a, &(0x7f0000000a00)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT, @ANYRES32], 0x21, 0x14fd, &(0x7f0000003f40)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x1f00, 0x0, 0x0, r2}])
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fdatasync(r3)

2m49.782345875s ago: executing program 5 (id=973):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x7ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
fstat(r2, 0x0)

2m49.361531044s ago: executing program 5 (id=979):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r3 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000140)='stack\x00')
pread64(r4, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009)

2m48.332543117s ago: executing program 41 (id=979):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r3 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000000140)='stack\x00')
pread64(r4, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009)

2m18.61214922s ago: executing program 4 (id=1145):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xebf1}, 0x8)

2m17.801883958s ago: executing program 4 (id=1148):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5})

2m17.594866072s ago: executing program 4 (id=1152):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r2, 0x400, 0x1)
truncate(&(0x7f0000000100)='./file1\x00', 0x7)
close_range(r0, 0xffffffffffffffff, 0x2000000000000)

2m13.978534693s ago: executing program 4 (id=1165):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
unshare(0x22020600)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)

2m13.827966896s ago: executing program 4 (id=1158):
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4)
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1)

2m13.555100493s ago: executing program 4 (id=1160):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8)

2m13.324529117s ago: executing program 42 (id=1160):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8)

1m58.653519915s ago: executing program 9 (id=1233):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x842, 0x4)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20)

1m58.497110679s ago: executing program 9 (id=1234):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

1m58.286457503s ago: executing program 9 (id=1235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x203e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xffffffffffffffda, 0x0, {0x80000, 0x0, 0x100, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
writev(r2, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000001000)='<', 0x1}], 0x2)

1m58.012337609s ago: executing program 9 (id=1236):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x891, 0x340, {0x77359400}, {}, {0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0xb, 0x2, 0x0, 0x0, "0a7c7f0dc3f5eeab1c90d7f1281e2b311069803045c6e2e7c652262e39e89272d2424a0902303bc5e6ee70a9eb045336d93ae80eaf2cce5d6832029b3c214da1"}}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x14000)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m57.817491884s ago: executing program 9 (id=1237):
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r6)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r0, r7)

1m55.345545178s ago: executing program 9 (id=1251):
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$kcm(0x2c, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)

1m54.442660219s ago: executing program 43 (id=1251):
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$kcm(0x2c, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)

6.805851049s ago: executing program 8 (id=2011):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x83}, 0x8010)
read$alg(r1, &(0x7f0000000000)=""/35, 0x23)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

4.48062777s ago: executing program 7 (id=2024):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

4.373752903s ago: executing program 7 (id=2025):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80)

4.340456884s ago: executing program 8 (id=2027):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sendmmsg$unix(r3, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000000}}], 0x1, 0x4018080)

4.206164947s ago: executing program 0 (id=2029):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000801)
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfc}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x47b2}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xd04a}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008801}, 0x20040000)
socket$nl_rdma(0x10, 0x3, 0x14)
shutdown(r0, 0x1)

4.205385247s ago: executing program 7 (id=2031):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

4.02981292s ago: executing program 0 (id=2032):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xff76, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)

3.674443679s ago: executing program 0 (id=2035):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r0, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8)
close(r2)

3.650335719s ago: executing program 7 (id=2036):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
waitid(0x0, r0, 0x0, 0x8, &(0x7f0000000780))

3.302979027s ago: executing program 0 (id=2038):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x83}, 0x8010)
read$alg(r1, &(0x7f0000000000)=""/35, 0x23)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.839917657s ago: executing program 1 (id=2042):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x2, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[], 0x0)

2.69410696s ago: executing program 7 (id=2044):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x6, 0x0, &(0x7f0000000380)="fc5cc45c4907", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.665005331s ago: executing program 6 (id=2045):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x2e12, 0x8001, 0x1, 0x3})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}]}}]}, 0x170}}, 0x24040004)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4)

2.609456652s ago: executing program 1 (id=2046):
syz_emit_ethernet(0x7c, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
syz_usb_connect(0x0, 0x24, &(0x7f0000001880)={{0x12, 0x1, 0x201, 0x34, 0x49, 0x4f, 0x40, 0x1a0a, 0x102, 0x9c8d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x4e, 0x0, 0xc7, "", [{{0x9, 0x4, 0xd5, 0x9, 0x0, 0x4e, 0x32, 0x89, 0x5}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x20000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00')
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

2.540958404s ago: executing program 7 (id=2047):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r3, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2c9b, 0x20, "0000609300"})

2.456546646s ago: executing program 6 (id=2049):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/10, 0xa}, 0xfffffff8}], 0x1, 0x40010102, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)

2.319651049s ago: executing program 8 (id=2050):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x4040050)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x81, 0xb, 0x4, 0x7, 0x4, 0x7, 0x8, 0x4, r2}, 0x20)

2.190890732s ago: executing program 8 (id=2051):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
sendmsg$sock(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.913508298s ago: executing program 1 (id=2052):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x2)
fchdir(r1)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x1d9442, 0x2c)
getdents64(r2, &(0x7f0000000000)=""/49, 0x31)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

1.80149207s ago: executing program 0 (id=2053):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x712, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1802}])
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

1.753264371s ago: executing program 1 (id=2054):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x20000800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x4}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1.549951436s ago: executing program 6 (id=2055):
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-'], 0xfe33)

1.37746185s ago: executing program 1 (id=2056):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe)
sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

1.338611691s ago: executing program 6 (id=2057):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.275346202s ago: executing program 1 (id=2058):
socket$inet(0x2, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)

1.173084904s ago: executing program 6 (id=2059):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x58}}, 0x2)
socket(0x10, 0x3, 0x0)

1.172794074s ago: executing program 8 (id=2060):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

134.464907ms ago: executing program 8 (id=2061):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

75.351088ms ago: executing program 0 (id=2062):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}})

0s ago: executing program 6 (id=2063):
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xc000002, 0x0, 0x0, 0x0, 0x6})
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

kernel console output (not intermixed with test programs):

bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.510571][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.577282][ T8851] ipt_CLUSTERIP: Please specify destination IP
[  252.682420][  T155] bond0 (unregistering): Released all slaves
[  252.759670][ T8820] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1009'.
[  252.773268][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.780489][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.833081][ T8821] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1009'.
[  252.848436][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.855603][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.864531][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.871623][ T8821] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.933394][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'.
[  252.954011][ T8847] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.962999][ T8847] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.971758][ T8847] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.980530][ T8847] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.031263][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'.
[  253.069320][ T8821] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1009'.
[  253.162882][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.170096][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.159123][ T8872] loop0: detected capacity change from 0 to 736
[  254.312663][ T8872] rock: directory entry would overflow storage
[  254.329145][ T8872] rock: sig=0x3b10, size=4, remaining=3
[  254.442737][ T4299] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  254.608888][ T8883] siw: device registration error -23
[  254.867851][ T4299] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.885794][ T4299] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  255.137729][ T4299] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  255.139263][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'.
[  255.158070][ T4299] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.199289][ T4299] usb 10-1: Product: syz
[  255.210661][ T4299] usb 10-1: Manufacturer: syz
[  255.235987][ T4299] usb 10-1: SerialNumber: syz
[  255.283680][ T4299] usb 10-1: config 0 descriptor??
[  255.415650][ T8900] netlink: 'syz.0.1033': attribute type 10 has an invalid length.
[  255.528743][ T8900] 8021q: adding VLAN 0 to HW filter on device team0
[  255.551919][ T8868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  255.571231][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  255.577578][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  255.579852][ T8900] bond0: (slave team0): Enslaving as an active interface with an up link
[  255.656688][ T8905] netlink: 'syz.0.1033': attribute type 10 has an invalid length.
[  255.708092][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1033'.
[  255.753360][ T8905] device team0 entered promiscuous mode
[  255.771163][ T8905] device team_slave_0 entered promiscuous mode
[  255.789297][ T8905] device team_slave_1 entered promiscuous mode
[  255.811431][ T8905] bond0: (slave team0): Releasing backup interface
[  255.862148][ T8905] bridge0: port 3(team0) entered blocking state
[  255.878129][ T8905] bridge0: port 3(team0) entered disabled state
[  257.134676][ T4299] usb 10-1: USB disconnect, device number 4
[  257.416864][ T8952] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  257.431428][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'.
[  257.471171][ T8962] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.480326][ T8962] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.489138][ T8962] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.497928][ T8962] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.846784][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'.
[  258.827733][ T8984] kvm: pic: level sensitive irq not supported
[  258.849319][ T8984] kvm: pic: single mode not supported
[  258.880121][ T8984] kvm: pic: single mode not supported
[  258.885774][ T8984] kvm: pic: level sensitive irq not supported
[  258.944135][ T8984] kvm: pic: single mode not supported
[  258.950388][ T8984] kvm: pic: single mode not supported
[  258.955867][ T8984] kvm: pic: level sensitive irq not supported
[  259.253475][ T8992] loop1: detected capacity change from 0 to 4096
[  259.290166][ T8994] ipt_CLUSTERIP: Please specify destination IP
[  259.433591][ T8992] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  259.509449][   T26] audit: type=1800 audit(1784821120.048:53): pid=8992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1059" name="file1" dev="loop1" ino=15 res=0 errno=0
[  259.546978][ T8981] loop4: detected capacity change from 0 to 32768
[  260.033171][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.183087][ T9031] netlink: 'syz.6.1057': attribute type 12 has an invalid length.
[  260.558603][   T26] audit: type=1326 audit(1784821121.098:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.1061" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x0
[  260.882087][ T9063] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1064'.
[  261.029354][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'.
[  261.419259][ T9087] netlink: 'syz.4.1069': attribute type 2 has an invalid length.
[  262.920418][ T9091] loop1: detected capacity change from 0 to 32768
[  263.913809][ T3853] device veth0_macvtap entered promiscuous mode
[  264.322370][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1084'.
[  264.552824][    T7] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  264.745077][ T9161] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=2648458468 (10593833872 ns) > initial count (10212520180 ns). Using initial count to start timer.
[  265.074783][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  265.093144][    T7] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  265.106772][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  265.116064][    T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.133633][ T9178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  265.141495][    T7] usb 10-1: Product: syz
[  265.147524][    T7] usb 10-1: Manufacturer: syz
[  265.170589][    T7] usb 10-1: SerialNumber: syz
[  265.218354][ T9178] bond0: (slave bond_slave_0): Releasing backup interface
[  265.247640][ T9178] bond0: (slave bond_slave_1): Releasing backup interface
[  265.280722][ T9178] device team_slave_0 left promiscuous mode
[  265.287662][    T7] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  265.349511][ T9178] team0: Port device team_slave_0 removed
[  265.366145][ T9178] device team_slave_1 left promiscuous mode
[  265.406391][ T9178] team0: Port device team_slave_1 removed
[  265.426154][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.442866][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.466597][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.493659][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.548454][ T9178] bond1: (slave ip6gretap1): Releasing backup interface
[  265.619302][ T9178] bond3: (slave veth3): Releasing backup interface
[  265.992964][    T7] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  266.397379][   T13] usb 10-1: USB disconnect, device number 5
[  266.768341][ T9210] loop0: detected capacity change from 0 to 32768
[  267.073195][    T7] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  267.081347][    T7] ath9k_htc: Failed to initialize the device
[  267.111306][ T9236] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1102'.
[  267.145168][ T9238] netlink: 11834 bytes leftover after parsing attributes in process `syz.6.1101'.
[  267.166543][   T13] usb 10-1: ath9k_htc: USB layer deinitialized
[  267.199508][ T9240] netlink: 'syz.6.1101': attribute type 25 has an invalid length.
[  267.251689][ T9240] netlink: 'syz.6.1101': attribute type 27 has an invalid length.
[  267.265913][ T9240] netlink: 'syz.6.1101': attribute type 28 has an invalid length.
[  267.304805][ T9240] netlink: 'syz.6.1101': attribute type 29 has an invalid length.
[  267.352532][ T9240] netlink: 'syz.6.1101': attribute type 30 has an invalid length.
[  267.391495][ T9244] loop0: detected capacity change from 0 to 512
[  267.549791][ T9244] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  267.582901][ T9244] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.258477][ T9311] device bridge0 entered promiscuous mode
[  269.531297][ T9326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  269.543785][ T9327] binder: BINDER_SET_CONTEXT_MGR already set
[  269.560635][ T9326] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  269.582300][ T9327] binder: 9325:9327 ioctl 4018620d 200000004a80 returned -16
[  269.625187][ T9326] netlink: 'syz.9.1121': attribute type 10 has an invalid length.
[  269.645467][ T9326] device syz_tun entered promiscuous mode
[  269.690876][ T9326] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  269.726834][ T9336] loop0: detected capacity change from 0 to 256
[  269.860857][ T9336] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.914967][   T26] audit: type=1800 audit(1784821130.458:55): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1123" name="file1" dev="loop0" ino=1048643 res=0 errno=0
[  269.985604][   T26] audit: type=1800 audit(1784821130.458:56): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1123" name="file1" dev="loop0" ino=1048643 res=0 errno=0
[  270.054559][ T9341] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200)
[  270.111667][ T9341] FAT-fs (loop0): Filesystem has been set read-only
[  270.304855][ T9334] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2057)
[  270.549121][ T9359] ceph: No mds server is up or the cluster is laggy
[  270.565260][ T8770] libceph: connect (1)[c::]:6789 error -101
[  270.571279][ T8770] libceph: mon0 (1)[c::]:6789 connect error
[  271.046924][ T9378] binder: BINDER_SET_CONTEXT_MGR already set
[  271.073207][ T9378] binder: 9377:9378 ioctl 4018620d 200000000040 returned -16
[  271.231523][ T9386] device bridge_slave_1 left promiscuous mode
[  271.247602][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.278629][ T9386] device bridge_slave_0 left promiscuous mode
[  271.294100][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.349252][ T9386] bond0: (slave bridge0): Releasing backup interface
[  271.446420][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1135'.
[  271.480546][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1135'.
[  271.628869][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  271.656439][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  271.669519][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  271.680834][ T9399] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  271.704961][ T9404] netlink: 'syz.4.1137': attribute type 10 has an invalid length.
[  271.721114][ T9404] device syz_tun entered promiscuous mode
[  271.847713][ T9409] loop9: detected capacity change from 0 to 256
[  271.913797][ T9409] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.947917][   T26] audit: type=1800 audit(1784821132.488:57): pid=9409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1138" name="file1" dev="loop9" ino=1048644 res=0 errno=0
[  272.059034][   T26] audit: type=1800 audit(1784821132.488:58): pid=9409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1138" name="file1" dev="loop9" ino=1048644 res=0 errno=0
[  272.090972][ T9415] FAT-fs (loop9): error, invalid FAT chain (i_pos 196, last_block 8200)
[  272.105318][ T9415] FAT-fs (loop9): Filesystem has been set read-only
[  272.488071][ T9408] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2057)
[  273.193299][ T5530] Bluetooth: hci3: command 0x0406 tx timeout
[  273.228606][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  273.251937][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  273.273925][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  273.424810][ T9456] kvm: pic: non byte write
[  273.450267][ T9455] netlink: 'syz.6.1151': attribute type 10 has an invalid length.
[  273.542769][ T5530] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  273.802798][ T5530] usb 10-1: Using ep0 maxpacket: 16
[  273.942785][ T5530] usb 10-1: config 0 has an invalid interface number: 34 but max is 0
[  273.951016][ T5530] usb 10-1: config 0 has no interface number 0
[  273.966755][ T5530] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  273.977355][ T5530] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  274.192973][ T5530] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  274.202543][ T5530] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.220503][ T5530] usb 10-1: Product: syz
[  274.225091][ T5530] usb 10-1: Manufacturer: syz
[  274.229829][ T5530] usb 10-1: SerialNumber: syz
[  274.244629][ T5530] usb 10-1: config 0 descriptor??
[  274.263034][ T9449] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  274.271542][ T9449] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  274.506618][ T9449] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  274.518175][ T9449] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  274.753538][ T5530] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  276.476429][ T5530] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  276.486999][ T5530] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  276.503722][ T5530] asix: probe of 10-1:0.34 failed with error -71
[  276.528103][ T5530] usb 10-1: USB disconnect, device number 6
[  277.215613][ T9647] ipt_CLUSTERIP: Please specify destination IP
[  277.344901][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1159'.
[  277.721000][ T9640] loop0: detected capacity change from 0 to 32768
[  279.924764][ T9687] lo speed is unknown, defaulting to 1000
[  280.068143][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1171'.
[  280.104739][ T9698] tipc: Failed to remove unknown binding: 66,0,0/32767:1743598332/1743598333
[  280.150646][ T9698] tipc: Failed to remove unknown binding: 66,0,0/32767:1743598332/1743598333
[  280.394823][ T9715] device wg1 entered promiscuous mode
[  280.464946][ T9687] chnl_net:caif_netlink_parms(): no params data found
[  280.704312][ T9687] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.711506][ T9687] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.719830][ T9687] device bridge_slave_0 entered promiscuous mode
[  280.728372][ T9687] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.735600][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.744071][ T9687] device bridge_slave_1 entered promiscuous mode
[  280.796904][ T9687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.819283][ T9687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.859830][ T9687] team0: Port device team_slave_0 added
[  280.884636][ T9687] team0: Port device team_slave_1 added
[  280.930577][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.940189][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.992748][ T9687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.014503][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.021479][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.099036][ T9687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.195683][ T9687] device hsr_slave_0 entered promiscuous mode
[  281.209896][ T9687] device hsr_slave_1 entered promiscuous mode
[  281.216959][ T9687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.231108][ T9687] Cannot create hsr debugfs directory
[  281.876695][ T4235] Bluetooth: hci2: command 0x0409 tx timeout
[  282.010410][ T9687] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  282.027302][ T9687] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  282.067472][ T9687] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  282.112420][ T9687] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  282.351840][ T9687] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.410824][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  282.430746][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  282.448264][ T9687] 8021q: adding VLAN 0 to HW filter on device team0
[  282.497829][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  282.517961][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  282.553553][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.560878][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.588027][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  282.612349][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  282.639474][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.646581][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.670936][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  282.700311][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  282.751117][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  282.789510][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  282.832468][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  282.858694][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  282.875041][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  282.893395][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  282.910833][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  282.933647][ T9687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  282.952164][ T9687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  282.970415][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  282.984898][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  283.003766][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  283.052758][ T4235] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  283.229753][ T9771] loop0: detected capacity change from 0 to 512
[  283.285420][ T9771] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  283.306937][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  283.313285][ T4235] usb 10-1: Using ep0 maxpacket: 32
[  283.325961][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  283.352450][ T9687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.414835][ T9771] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters
[  283.458778][ T4235] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  283.483900][ T4235] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  283.520840][ T9771] EXT4-fs (loop0): Remounting filesystem read-only
[  283.528221][ T9771] Quota error (device loop0): write_blk: dquota write failed
[  283.530351][ T4235] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  283.552890][ T9771] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  283.575888][ T9771] Quota error (device loop0): write_blk: dquota write failed
[  283.600187][ T4235] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  283.623941][ T9771] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  283.655624][ T4235] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  283.672896][ T9771] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1189: Failed to acquire dquot type 1
[  283.704922][ T4235] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  283.725114][ T9771] EXT4-fs (loop0): Remounting filesystem read-only
[  283.731962][ T9771] EXT4-fs (loop0): 1 truncate cleaned up
[  283.762212][ T4235] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  283.778389][ T9771] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,max_dir_size_kb=0x0000000000000006,resgid=0x00000000000000002. Quota mode: writeback.
[  283.815405][ T4235] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.882305][ T4235] usb 10-1: config 0 descriptor??
[  283.889930][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  283.903914][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  283.962907][ T4299] Bluetooth: hci2: command 0x041b tx timeout
[  283.971820][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  283.981575][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  283.997841][ T9687] device veth0_vlan entered promiscuous mode
[  284.013505][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  284.025148][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  284.047174][ T9687] device veth1_vlan entered promiscuous mode
[  284.090663][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  284.091362][ T6104] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  284.108527][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  284.150567][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  284.159965][ T4235] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  284.175042][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  284.190283][ T6104] EXT4-fs (loop0): Remounting filesystem read-only
[  284.199600][ T9687] device veth0_macvtap entered promiscuous mode
[  284.216098][ T4235] usb 10-1: USB disconnect, device number 7
[  284.222536][ T6104] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  284.257913][ T4235] usblp0: removed
[  284.268895][ T9687] device veth1_macvtap entered promiscuous mode
[  284.276121][ T6104] EXT4-fs (loop0): Remounting filesystem read-only
[  284.322760][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  284.337568][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  284.369493][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.385840][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.398758][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.412387][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.424600][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.437615][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.450739][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.467528][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.480309][ T9687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.499056][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  284.508322][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  284.525964][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.538916][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.549590][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.560717][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.571305][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.588506][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.609639][ T9687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.635847][ T9687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.650537][ T9687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.669248][  T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.690921][  T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.708764][ T4235] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  284.721311][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  284.742534][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  284.775720][ T9687] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.792816][ T9687] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.801553][ T9687] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.834621][ T9687] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.871355][  T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.893223][  T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.953722][ T4235] usb 10-1: Using ep0 maxpacket: 32
[  284.976306][  T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.002229][  T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.043752][ T9684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.051985][ T9684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.068654][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  285.073635][ T4235] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  285.093800][ T4235] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  285.115126][ T4235] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  285.129401][ T4235] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  285.149864][ T4235] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  285.172471][ T4235] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  285.194403][ T4235] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  285.212939][ T4235] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.239933][  T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  285.257700][ T4235] usb 10-1: config 0 descriptor??
[  285.268963][  T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.296202][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.324338][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.346173][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  285.493589][ T9825] binder_alloc: 9824: binder_alloc_buf size -560 failed, no address space
[  285.559440][ T9825] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  285.570933][ T4235] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  285.611034][  T154] tipc: Left network mode
[  285.766369][  T154] bond1: (slave ip6gretap1): Releasing backup interface
[  285.831398][ T9835] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  286.039228][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'.
[  286.048443][ T5530] Bluetooth: hci2: command 0x040f tx timeout
[  286.168945][ T9851] lo speed is unknown, defaulting to 1000
[  286.260192][ T9860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  286.316563][ T9860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.356961][ T9860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.381104][ T9860] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  286.474811][ T9871] netlink: 'syz.7.1203': attribute type 10 has an invalid length.
[  286.510732][ T9871] device syz_tun entered promiscuous mode
[  286.696517][ T9851] chnl_net:caif_netlink_parms(): no params data found
[  286.936022][ T4299] usb 10-1: USB disconnect, device number 8
[  286.977877][ T4299] usblp0: removed
[  286.991970][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.065499][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.115349][ T9851] device bridge_slave_0 entered promiscuous mode
[  287.185797][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.216755][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.239141][ T9851] device bridge_slave_1 entered promiscuous mode
[  287.349005][ T9890] loop7: detected capacity change from 0 to 32768
[  287.356562][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.402821][ T9890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1211 (9890)
[  287.424801][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.491299][ T9890] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  287.531169][ T9890] BTRFS info (device loop7): using free space tree
[  287.547110][  T154] device hsr_slave_0 left promiscuous mode
[  287.562167][  T154] device hsr_slave_1 left promiscuous mode
[  287.568564][ T9890] BTRFS info (device loop7): has skinny extents
[  287.576420][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.609687][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.647159][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.671723][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.715904][  T154] bridge0: port 3(team0) entered disabled state
[  287.737365][  T154] device bridge_slave_1 left promiscuous mode
[  287.778323][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.786881][  T154] device bridge_slave_0 left promiscuous mode
[  287.794159][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.833884][  T154] device veth1_macvtap left promiscuous mode
[  287.839966][  T154] device veth0_macvtap left promiscuous mode
[  287.887957][ T9890] BTRFS info (device loop7): enabling ssd optimizations
[  287.896993][  T154] device veth1_vlan left promiscuous mode
[  287.917831][  T154] device veth0_vlan left promiscuous mode
[  288.124276][ T4366] Bluetooth: hci2: command 0x0419 tx timeout
[  288.156652][ T9890] loop7: detected capacity change from 32768 to 0
[  288.182758][   T26] audit: type=1800 audit(1784821148.718:59): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1211" name="file1" dev="loop7" ino=261 res=0 errno=0
[  288.193288][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[  288.211344][  T154] bond1 (unregistering): Released all slaves
[  288.481372][  T154] device team_slave_1 left promiscuous mode
[  288.696440][  T154] team0 (unregistering): Port device team_slave_1 removed
[  288.710161][  T154] device team_slave_0 left promiscuous mode
[  288.719620][  T154] team0 (unregistering): Port device team_slave_0 removed
[  288.735158][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.759913][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.858938][  T154] bond0 (unregistering): Released all slaves
[  288.932710][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1214'.
[  289.153060][ T9851] team0: Port device team_slave_0 added
[  289.160408][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1218'.
[  289.210933][ T9851] team0: Port device team_slave_1 added
[  289.304212][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.311201][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.666973][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.292903][   T13] Bluetooth: hci0: command 0x041b tx timeout
[  290.295672][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.350627][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.532497][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.827155][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'.
[  290.876171][ T9851] device hsr_slave_0 entered promiscuous mode
[  290.896109][ T9851] device hsr_slave_1 entered promiscuous mode
[  290.912935][ T9851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  290.939344][ T9851] Cannot create hsr debugfs directory
[  291.170175][T10015] lo speed is unknown, defaulting to 1000
[  291.673617][ T9851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  291.699690][ T9851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  291.741796][ T9851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  291.783550][ T9851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  291.942943][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.972163][ T9851] 8021q: adding VLAN 0 to HW filter on device team0
[  292.002130][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  292.014642][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  292.032830][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  292.048068][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  292.066841][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  292.101600][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.108736][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.152852][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  292.169532][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  292.193430][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  292.235577][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.242695][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.333127][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  292.358960][ T4265] Bluetooth: hci0: command 0x040f tx timeout
[  292.366450][T10045] loop7: detected capacity change from 0 to 512
[  292.401903][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  292.513675][T10039] block device autoloading is deprecated and will be removed.
[  292.522099][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.583657][T10045] EXT4-fs (loop7): external journal device major/minor numbers have changed
[  292.611949][T10046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.708439][T10046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  292.783731][T10045] block device autoloading is deprecated and will be removed.
[  292.792360][T10045] EXT4-fs (loop7): couldn't read superblock of external journal
[  292.803316][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  292.825887][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  292.868196][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  292.908076][T10059] <
[  292.920950][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  292.937819][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  292.980921][ T9851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  293.033494][ T9851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  293.113864][T10056] netlink: 'syz.1.1229': attribute type 10 has an invalid length.
[  293.183554][T10056] device syz_tun entered promiscuous mode
[  293.350376][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  293.374183][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  293.424023][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  293.478852][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  293.497352][T10073] loop7: detected capacity change from 0 to 1024
[  293.509370][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  293.563870][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  293.573701][T10070] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  293.617195][T10073] EXT4-fs (loop7): Ignoring removed oldalloc option
[  293.672749][T10070] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  293.712910][T10073] EXT4-fs (loop7): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  293.722338][T10073] EXT4-fs (loop7): Couldn't mount because of unsupported optional features (40000)
[  294.040333][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  294.060229][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  294.109583][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  294.198074][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  294.231771][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  294.303790][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  294.319627][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  294.346766][ T9851] device veth0_vlan entered promiscuous mode
[  294.374452][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  294.383092][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  294.418317][ T9851] device veth1_vlan entered promiscuous mode
[  294.433261][ T4232] Bluetooth: hci0: command 0x0419 tx timeout
[  294.490462][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  294.507454][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  294.554774][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  294.588769][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  294.609675][ T9851] device veth0_macvtap entered promiscuous mode
[  294.676764][ T9851] device veth1_macvtap entered promiscuous mode
[  294.856873][ T6304] bond0: (slave syz_tun): Releasing backup interface
[  294.872889][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.898238][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.928661][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.941696][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.953059][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.972716][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.993148][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.016215][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.041503][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.059125][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  295.075781][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  295.093384][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  295.111269][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  295.147087][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.179209][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.202704][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.247253][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.270813][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.283467][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.293970][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  295.305029][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  295.326724][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.695262][ T9851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.940114][ T9851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.169584][ T9851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.178388][ T9851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.236383][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.271425][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  296.450604][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.473694][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.481287][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  296.579895][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1255'.
[  296.623950][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.643421][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.670135][  T154] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.732102][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  296.782390][  T154] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.864354][T10143] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1257'.
[  296.899597][  T154] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.979527][T10149] loop7: detected capacity change from 0 to 512
[  297.014690][  T154] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.229418][T10152] lo speed is unknown, defaulting to 1000
[  297.370230][   T26] audit: type=1326 audit(1784821157.908:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.534977][   T26] audit: type=1326 audit(1784821157.948:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.571271][  T154] tipc: Left network mode
[  297.659993][   T26] audit: type=1326 audit(1784821157.948:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.684603][   T26] audit: type=1326 audit(1784821157.948:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.722870][   T26] audit: type=1326 audit(1784821157.958:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.777915][   T26] audit: type=1326 audit(1784821157.958:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.820106][T10152] chnl_net:caif_netlink_parms(): no params data found
[  297.861786][   T26] audit: type=1326 audit(1784821157.958:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.940225][ T4514] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  297.948211][   T26] audit: type=1326 audit(1784821157.958:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  297.978326][   T26] audit: type=1326 audit(1784821157.958:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  298.010486][   T26] audit: type=1326 audit(1784821157.958:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbcbf667e99 code=0x7ffc0000
[  298.056819][T10176] loop0: detected capacity change from 0 to 512
[  298.145820][T10176] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[  298.145820][T10176] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  298.145820][T10176] 
[  298.164400][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.164488][T10152] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.166886][T10152] device bridge_slave_0 entered promiscuous mode
[  298.223146][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.244937][T10152] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.254490][T10152] device bridge_slave_1 entered promiscuous mode
[  298.278489][T10176] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  298.303025][T10176] EXT4-fs (loop0): Unrecognized mount option "uid<00000000000000000000" or missing value
[  298.342931][ T4514] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  298.358310][ T4514] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.372251][T10152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.398098][T10152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.409674][ T4514] usb 8-1: config 0 descriptor??
[  298.475223][ T4514] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  298.576141][T10152] team0: Port device team_slave_0 added
[  298.609787][T10152] team0: Port device team_slave_1 added
[  298.707676][T10152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.731219][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.757632][T10152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.779731][T10152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.786958][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.822944][T10152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.993462][T10152] device hsr_slave_0 entered promiscuous mode
[  299.030408][T10152] device hsr_slave_1 entered promiscuous mode
[  299.044196][T10152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.064291][T10152] Cannot create hsr debugfs directory
[  299.073826][ T4265] Bluetooth: hci3: command 0x0409 tx timeout
[  300.267695][  T154] device hsr_slave_0 left promiscuous mode
[  300.279233][  T154] device hsr_slave_1 left promiscuous mode
[  300.306307][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.322224][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.338435][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.346363][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.367719][  T154] device veth1_macvtap left promiscuous mode
[  300.376173][  T154] device veth0_macvtap left promiscuous mode
[  300.382430][  T154] device veth1_vlan left promiscuous mode
[  300.388645][ T4514] usb 8-1: USB disconnect, device number 2
[  300.395731][  T154] device veth0_vlan left promiscuous mode
[  300.687442][  T154] team0 (unregistering): Port device team_slave_1 removed
[  300.701444][  T154] team0 (unregistering): Port device team_slave_0 removed
[  300.718552][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.735982][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.807920][  T154] bond0 (unregistering): Released all slaves
[  301.063280][T10248] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  301.152836][ T4514] Bluetooth: hci3: command 0x041b tx timeout
[  301.262737][ T4407] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  301.523080][ T4407] usb 8-1: Using ep0 maxpacket: 32
[  301.662859][ T4407] usb 8-1: config 0 has an invalid interface number: 188 but max is 0
[  301.691456][ T4407] usb 8-1: config 0 has no interface number 0
[  301.713492][ T4407] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  301.745892][T10152] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  301.781248][T10152] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  301.803862][T10152] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  301.834283][T10152] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  301.923042][ T4407] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  301.945455][ T4407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.968145][T10267] loop0: detected capacity change from 0 to 32768
[  301.972773][ T4407] usb 8-1: Product: syz
[  301.982123][ T4407] usb 8-1: Manufacturer: syz
[  301.990731][ T4407] usb 8-1: SerialNumber: syz
[  302.017286][ T4407] usb 8-1: config 0 descriptor??
[  302.024137][T10152] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.047192][T10249] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  302.056928][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.074259][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.092550][T10152] 8021q: adding VLAN 0 to HW filter on device team0
[  302.112860][T10267] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1294 (10267)
[  302.128281][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.150020][T10267] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  302.161078][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.188027][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.190510][T10267] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  302.195170][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.251740][T10267] BTRFS info (device loop0): use zstd compression, level 3
[  302.268694][T10249] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  302.292823][T10267] BTRFS info (device loop0): use no compression
[  302.299124][T10267] BTRFS info (device loop0): using free space tree
[  302.321097][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.344536][T10267] BTRFS info (device loop0): has skinny extents
[  302.367366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.386892][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.410648][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.417791][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.535484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  302.566473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.609536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  302.634004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  302.644109][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  302.665937][T10267] BTRFS info (device loop0): enabling ssd optimizations
[  302.669276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.694432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  302.731130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  302.756760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  302.770396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  302.780654][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  302.792441][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.142489][ T4177] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4177)
[  303.181888][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.204770][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  303.233081][   T13] Bluetooth: hci3: command 0x040f tx timeout
[  303.240411][T10152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.905951][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  303.934699][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  303.935673][T10361] 9pnet_virtio: no channels available for device syz
[  304.000333][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  304.015931][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  304.045576][T10152] device veth0_vlan entered promiscuous mode
[  304.056952][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  304.077568][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  304.138519][T10152] device veth1_vlan entered promiscuous mode
[  304.218194][T10152] device veth0_macvtap entered promiscuous mode
[  304.238151][T10369] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1305'.
[  304.277843][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  304.292927][ T4407] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  304.302190][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  304.326639][ T4407] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  304.348144][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  304.372816][ T4407] asix: probe of 8-1:0.188 failed with error -71
[  304.385201][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  304.423037][ T4407] usb 8-1: USB disconnect, device number 3
[  304.429465][T10152] device veth1_macvtap entered promiscuous mode
[  304.474533][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  304.505138][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  304.544864][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.598221][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.622731][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.659134][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.689574][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.720603][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.740931][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.761797][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.795598][T10152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.838410][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.892746][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.942973][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.993348][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.027074][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.068064][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.102748][T10152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.134709][T10152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.216179][T10152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.255755][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  305.281227][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  305.291890][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  305.306149][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  305.314287][ T4514] Bluetooth: hci3: command 0x0419 tx timeout
[  305.332370][T10152] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.398463][T10152] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.433146][T10152] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.453896][T10152] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.713287][ T9684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.721401][ T9684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.522935][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  306.621651][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.642638][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.687694][T10410] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  306.734663][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  306.829628][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  306.899175][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  306.964386][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  307.051947][T10412] device bridge_slave_0 left promiscuous mode
[  307.070882][T10412] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.203300][T10412] device bridge_slave_1 left promiscuous mode
[  307.231602][T10412] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.273955][T10412] bond0: (slave bond_slave_0): Releasing backup interface
[  307.350455][T10412] bond0: (slave bond_slave_1): Releasing backup interface
[  307.638511][T10443] loop7: detected capacity change from 0 to 512
[  307.715613][T10412] team0: Port device team_slave_0 removed
[  307.777850][T10443] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5
[  307.777850][T10443] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  307.777850][T10443] 
[  307.821573][T10443] EXT4-fs (loop7): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  307.842993][T10443] EXT4-fs (loop7): Unrecognized mount option "uid<00000000000000000000" or missing value
[  307.871886][T10412] team0: Port device team_slave_1 removed
[  307.916612][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.943251][T10412] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.962298][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.027228][T10412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.130877][T10418] team0: Mode changed to "loadbalance"
[  308.318810][T10462] 9pnet_virtio: no channels available for device syz
[  308.541458][T10472] loop8: detected capacity change from 0 to 512
[  308.631621][T10472] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1328: invalid indirect mapped block 4294967295 (level 1)
[  308.662801][T10472] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1328: invalid indirect mapped block 4294967295 (level 1)
[  308.677759][ T4407] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  308.725625][T10472] EXT4-fs (loop8): 2 truncates cleaned up
[  308.743252][T10472] EXT4-fs (loop8): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  308.832796][   T13] Bluetooth: hci4: command 0x0406 tx timeout
[  309.132705][   T13] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  309.148836][ T4407] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  309.170349][ T4407] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  309.195121][ T4407] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  309.217744][ T4407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.263211][T10466] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  309.495866][   T13] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.539246][   T13] usb 9-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00
[  309.551836][   T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.609891][   T13] usb 9-1: config 0 descriptor??
[  309.639195][T10502] overlayfs: failed to clone upperpath
[  309.668945][   T13] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  309.871835][   T13] usb 9-1: USB disconnect, device number 2
[  309.964430][ T4407] usb 8-1: USB disconnect, device number 4
[  310.051396][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'.
[  310.419832][T10536] 9pnet_virtio: no channels available for device syz
[  311.608554][T10584] netlink: 'syz.8.1351': attribute type 1 has an invalid length.
[  311.849463][T10594] netlink: 'syz.8.1351': attribute type 10 has an invalid length.
[  311.889384][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1351'.
[  311.928907][T10594] device dummy0 entered promiscuous mode
[  313.585085][T10625] overlayfs: failed to clone upperpath
[  313.748623][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1365'.
[  313.796660][T10635] loop7: detected capacity change from 0 to 16
[  313.871192][T10635] erofs: (device loop7): mounted with root inode @ nid 36.
[  313.980967][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 327679 of nid 36
[  314.043053][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 79 @ nid 36
[  314.072781][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 78 @ nid 36
[  314.119426][T10641] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36
[  314.177184][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 76 @ nid 36
[  314.218970][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36
[  314.262763][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 75 @ nid 36
[  314.310953][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36
[  314.357328][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 74 @ nid 36
[  314.402901][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 303103 of nid 36
[  314.462816][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 73 @ nid 36
[  314.502692][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36
[  314.523032][T10657] "syz.1.1368" (10657) uses obsolete ecb(arc4) skcipher
[  314.530218][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 72 @ nid 36
[  314.603223][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 71 @ nid 36
[  314.669681][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36
[  314.708468][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 70 @ nid 36
[  314.748157][T10641] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36
[  314.796852][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 65 @ nid 36
[  314.837002][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36
[  314.872784][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 64 @ nid 36
[  314.910890][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36
[  314.943851][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 63 @ nid 36
[  314.977397][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 61 @ nid 36
[  315.012695][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 60 @ nid 36
[  315.021793][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 59 @ nid 36
[  315.098816][T10641] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.131060][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 58 @ nid 36
[  315.168196][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 57 @ nid 36
[  315.205878][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 56 @ nid 36
[  315.245766][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 55 @ nid 36
[  315.277138][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 54 @ nid 36
[  315.318433][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 53 @ nid 36
[  315.329023][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 49 @ nid 36
[  315.338391][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 48 @ nid 36
[  315.359546][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 47 @ nid 36
[  315.405003][T10641] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.435293][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 46 @ nid 36
[  315.458559][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 45 @ nid 36
[  315.523623][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 44 @ nid 36
[  315.572671][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 43 @ nid 36
[  315.581753][T10641] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.653094][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 42 @ nid 36
[  315.662199][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 41 @ nid 36
[  315.744357][T10641] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.782705][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 40 @ nid 36
[  315.791793][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 39 @ nid 36
[  315.869548][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 38 @ nid 36
[  315.922880][T10641] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  315.932216][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 31 @ nid 36
[  316.003585][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 27 @ nid 36
[  316.031591][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 26 @ nid 36
[  316.062488][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 25 @ nid 36
[  316.096010][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36
[  316.122728][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 23 @ nid 36
[  316.150992][T10641] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[  316.178682][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 16 @ nid 36
[  316.218215][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  316.262695][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 15 @ nid 36
[  316.310159][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  316.345951][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 14 @ nid 36
[  316.378343][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  316.409290][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 13 @ nid 36
[  316.422180][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  316.438337][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 8 @ nid 36
[  316.472766][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 6 @ nid 36
[  316.512284][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 5 @ nid 36
[  316.546831][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 36
[  316.577422][T10641] erofs: (device loop7): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  316.612447][T10641] erofs: (device loop7): z_erofs_readahead: readahead error at page 0 @ nid 36
[  316.646474][T10641] handle_bad_sector: 1 callbacks suppressed
[  316.646489][T10641] attempt to access beyond end of device
[  316.646489][T10641] loop7: rw=524288, want=312, limit=16
[  316.713295][T10641] attempt to access beyond end of device
[  316.713295][T10641] loop7: rw=524288, want=1049280, limit=16
[  316.751380][T10641] attempt to access beyond end of device
[  316.751380][T10641] loop7: rw=524288, want=736, limit=16
[  316.795956][T10641] attempt to access beyond end of device
[  316.795956][T10641] loop7: rw=524288, want=776, limit=16
[  316.835956][T10641] attempt to access beyond end of device
[  316.835956][T10641] loop7: rw=524288, want=848, limit=16
[  316.874962][T10641] attempt to access beyond end of device
[  316.874962][T10641] loop7: rw=524288, want=13478624104, limit=16
[  316.930040][T10641] attempt to access beyond end of device
[  316.930040][T10641] loop7: rw=524288, want=13478624080, limit=16
[  316.978244][T10641] attempt to access beyond end of device
[  316.978244][T10641] loop7: rw=524288, want=56, limit=16
[  316.999893][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  317.006240][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  317.041081][T10641] attempt to access beyond end of device
[  317.041081][T10641] loop7: rw=524288, want=40, limit=16
[  317.096282][T10641] attempt to access beyond end of device
[  317.096282][T10641] loop7: rw=524288, want=96, limit=16
[  317.493900][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1381'.
[  318.436613][T10756] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.1390'.
[  318.462773][T10756] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1390'.
[  319.657543][T10790] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  319.863367][ T4235] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  319.910845][T10800] loop0: detected capacity change from 0 to 256
[  320.081866][T10800] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  320.246678][ T4235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.270213][ T4235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.331769][ T4235] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  320.377950][ T4235] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  320.399248][ T4235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.818562][ T4235] usb 8-1: config 0 descriptor??
[  321.289717][T10823] lo speed is unknown, defaulting to 1000
[  321.311959][ T4235] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  321.394113][ T4235] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  322.200424][T10854] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  322.376822][T10860] xt_hashlimit: size too large, truncated to 1048576
[  323.519259][ T4363] usb 8-1: USB disconnect, device number 5
[  326.491235][T11025] overlayfs: failed to clone upperpath
[  326.738659][T11042] "syz.6.1427" (11042) uses obsolete ecb(arc4) skcipher
[  326.865327][T11054] netlink: 'syz.0.1430': attribute type 1 has an invalid length.
[  326.896281][T11054] 8021q: adding VLAN 0 to HW filter on device bond1
[  326.950836][T11048] loop7: detected capacity change from 0 to 4096
[  326.962249][T11054] bond1: (slave veth3): Enslaving as an active interface with a down link
[  327.061560][T11054] bond1: (slave dummy0): making interface the new active one
[  327.078589][T11048] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  327.095629][T11054] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  327.151221][   T26] kauditd_printk_skb: 146 callbacks suppressed
[  327.151234][   T26] audit: type=1800 audit(1784821187.688:216): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1429" name="file1" dev="loop7" ino=15 res=0 errno=0
[  327.196250][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  327.211609][T11061] netlink: 'syz.0.1430': attribute type 10 has an invalid length.
[  327.219991][T11061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1430'.
[  327.229275][T11061] device dummy0 entered promiscuous mode
[  327.256075][T11061] bond1: (slave dummy0): Releasing active interface
[  328.255695][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1444'.
[  328.333109][T11106] 8021q: adding VLAN 0 to HW filter on device bond4
[  328.441669][   T26] audit: type=1326 audit(1784821188.978:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.7.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5697cfce99 code=0x0
[  329.814018][T11157] loop8: detected capacity change from 0 to 32768
[  330.172352][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'.
[  330.244883][T11189] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.353113][ T4514] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  330.857683][T11227] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1471'.
[  330.883014][ T4514] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  330.912435][ T4514] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  330.933282][ T4514] usb 8-1: Product: syz
[  330.937479][ T4514] usb 8-1: Manufacturer: syz
[  330.942082][ T4514] usb 8-1: SerialNumber: syz
[  330.993053][ T4514] usb 8-1: config 0 descriptor??
[  331.554243][T11246] kvm: pic: level sensitive irq not supported
[  331.555016][T11246] kvm: pic: single mode not supported
[  331.564466][T11246] kvm: pic: single mode not supported
[  331.569860][T11246] kvm: pic: level sensitive irq not supported
[  331.602169][T11246] kvm: pic: single mode not supported
[  331.618991][T11246] kvm: pic: single mode not supported
[  331.624643][T11246] kvm: pic: level sensitive irq not supported
[  332.728582][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  332.782971][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  332.811356][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  332.848703][T11281] device bridge_slave_0 left promiscuous mode
[  332.889471][T11281] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.915965][T11281] device bridge_slave_1 left promiscuous mode
[  332.935411][T11281] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.978880][T11281] bond0: (slave bond_slave_0): Releasing backup interface
[  333.028179][T11281] bond0: (slave bond_slave_1): Releasing backup interface
[  333.045655][ T5531] usb 8-1: USB disconnect, device number 6
[  333.186704][T11281] team0: Port device team_slave_0 removed
[  333.286724][T11281] team0: Port device team_slave_1 removed
[  333.311287][T11281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.339250][T11281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.369866][T11281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.377747][T11281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.412186][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'.
[  333.476433][T11288] 8021q: adding VLAN 0 to HW filter on device bond2
[  333.493531][T11301] overlayfs: failed to clone upperpath
[  333.692694][ T5531] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  333.820660][T11314] lo speed is unknown, defaulting to 1000
[  333.935328][ T4407] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  334.072936][ T5531] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.091697][ T5531] usb 8-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00
[  334.102387][ T5531] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.144187][ T5531] usb 8-1: config 0 descriptor??
[  334.216176][ T5531] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  334.382831][ T4407] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.415346][ T4407] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.446063][ T4407] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  334.489405][ T4407] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  334.498915][ T4407] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.543131][ T4407] usb 9-1: config 0 descriptor??
[  334.571535][ T5531] usb 8-1: USB disconnect, device number 7
[  335.038830][ T4407] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  335.070094][ T4407] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  335.482884][ T4235] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  335.653498][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'.
[  335.701895][T11404] 8021q: adding VLAN 0 to HW filter on device bond2
[  335.932443][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  335.970767][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  335.998230][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.014206][ T4235] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  336.034585][ T4235] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.055618][T11415] device bridge_slave_0 left promiscuous mode
[  336.073786][ T4235] usb 8-1: Product: syz
[  336.078001][ T4235] usb 8-1: Manufacturer: syz
[  336.091493][T11415] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.107654][ T4235] usb 8-1: SerialNumber: syz
[  336.131849][T11415] device bridge_slave_1 left promiscuous mode
[  336.157096][T11415] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.165785][ T4235] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  336.220466][T11415] bond0: (slave bond_slave_0): Releasing backup interface
[  336.260172][T11415] bond0: (slave bond_slave_1): Releasing backup interface
[  336.350006][T11415] team0: Port device team_slave_0 removed
[  336.392014][T11415] team0: Port device team_slave_1 removed
[  336.428080][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.443139][T11415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.455236][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.463759][T11415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.535683][ T4364] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  336.772866][ T4235] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  336.824463][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1501'.
[  336.838956][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  336.875227][T11443] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  336.952759][ T4407] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  337.187750][ T4514] usb 9-1: USB disconnect, device number 3
[  337.792715][ T4235] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  337.827471][ T4235] ath9k_htc: Failed to initialize the device
[  337.880885][T11454] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  337.920024][    T7] usb 8-1: USB disconnect, device number 8
[  337.978747][    T7] usb 8-1: ath9k_htc: USB layer deinitialized
[  338.007116][T11458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  338.017849][T11454] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  338.065814][T11461] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  338.765488][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1510'.
[  339.310600][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880602f9000: rx timeout, send abort
[  339.819072][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880602f9000: abort rx timeout. Force session deactivation
[  340.403445][T11521] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  340.435856][T11521] sch_tbf: burst 593 is lower than device lo mtu (65550) !
[  341.518828][T11590] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1538'.
[  341.545338][T11587] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1538'.
[  341.812516][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1543'.
[  342.828350][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  342.843426][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  342.851406][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  342.943460][ T5531] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  343.019434][T11630] netlink: 'syz.6.1551': attribute type 1 has an invalid length.
[  343.088784][T11634] bond5: (slave geneve3): Error -99 calling set_mac_address
[  343.883372][ T4407] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  344.732748][ T4265] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  344.792149][T11667] loop7: detected capacity change from 0 to 32768
[  344.882302][T11667] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  344.982710][ T4265] usb 9-1: Using ep0 maxpacket: 16
[  345.029597][T11667] (syz.7.1557,11667,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  345.069512][T11667] fuse: Bad value for 'fd'
[  345.102887][ T4265] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[  345.124326][ T4265] usb 9-1: config 0 has no interface number 0
[  345.147204][ T4265] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  345.178999][ T4265] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  345.201017][ T9687] ocfs2: Unmounting device (7,7) on (node local)
[  345.365929][ T4265] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  345.385515][ T4265] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.430689][ T4265] usb 9-1: Product: syz
[  345.446507][ T4265] usb 9-1: Manufacturer: syz
[  345.472781][ T4265] usb 9-1: SerialNumber: syz
[  345.500637][ T4265] usb 9-1: config 0 descriptor??
[  345.545836][T11680] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  345.579711][T11680] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  345.839736][T11680] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  345.865039][T11680] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  346.122851][ T4265] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  346.159598][T11722] loop0: detected capacity change from 0 to 40427
[  346.264447][T11722] F2FS-fs (loop0): Found nat_bits in checkpoint
[  346.470755][T11722] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  346.589164][T11722] handle_bad_sector: 1 callbacks suppressed
[  346.589180][T11722] attempt to access beyond end of device
[  346.589180][T11722] loop0: rw=2049, want=45104, limit=40427
[  346.777862][ T9851] attempt to access beyond end of device
[  346.777862][ T9851] loop0: rw=2049, want=45112, limit=40427
[  347.902794][ T4265] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  347.932320][ T4265] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  347.976580][ T4265] asix: probe of 9-1:0.34 failed with error -71
[  348.007437][ T4265] usb 9-1: USB disconnect, device number 4
[  348.730513][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1589'.
[  349.627233][T11811] loop8: detected capacity change from 0 to 1024
[  349.749537][T11811] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  350.983508][T11845] kvm: pic: non byte write
[  352.849474][T11926] loop8: detected capacity change from 0 to 512
[  352.866412][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  352.913351][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  352.922439][T11926] EXT4-fs (loop8): external journal device major/minor numbers have changed
[  352.931700][T11933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  352.953784][T11933] device bridge_slave_0 left promiscuous mode
[  352.964688][T11926] EXT4-fs (loop8): couldn't read superblock of external journal
[  352.980366][T11933] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.006719][T11933] device bridge_slave_1 left promiscuous mode
[  353.024647][T11933] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.137801][T11933] bond0: (slave bond_slave_0): Releasing backup interface
[  353.218058][T11933] bond0: (slave bond_slave_1): Releasing backup interface
[  353.315153][T11933] team0: Port device team_slave_0 removed
[  353.340380][T11933] team0: Port device team_slave_1 removed
[  353.360172][T11933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.380378][T11933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.398570][T11933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.415731][T11933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.462820][T11941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  353.471199][T11941] IPv6: NLM_F_CREATE should be set when creating new route
[  355.928281][T11945] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.937317][T11945] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.947648][T11945] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.956872][T11945] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.137150][T11964] tipc: Started in network mode
[  356.142244][T11964] tipc: Node identity 4, cluster identity 4711
[  356.168167][T11964] tipc: Node number set to 4
[  356.176612][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1624'.
[  356.228545][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1625'.
[  356.247278][T11989] overlayfs: failed to clone upperpath
[  356.500434][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1634'.
[  357.778135][T12028] netlink: 'syz.8.1638': attribute type 1 has an invalid length.
[  357.967510][T12028] device bond2 entered promiscuous mode
[  358.053409][T12028] 8021q: adding VLAN 0 to HW filter on device bond2
[  358.110786][T11992] loop7: detected capacity change from 0 to 32768
[  358.137578][T12031] device veth7 entered promiscuous mode
[  358.161436][T12031] bond2: (slave veth7): making interface the new active one
[  358.197557][T11992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1629 (11992)
[  358.251041][T12031] bond2: (slave veth7): Enslaving as an active interface with an up link
[  358.281453][T11992] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  358.294235][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  358.359799][T11992] BTRFS info (device loop7): using free space tree
[  358.382689][T11992] BTRFS info (device loop7): has skinny extents
[  358.777143][T11992] BTRFS info (device loop7): enabling ssd optimizations
[  360.200142][T12140] loop7: detected capacity change from 0 to 512
[  360.350951][T12140] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  360.383877][T12140] ext4 filesystem being mounted at /80/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.421966][T12140] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.1653: Unrecognised inode hash code 20
[  360.437158][T12140] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1653: Corrupt directory, running e2fsck is recommended
[  360.451276][T12140] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.1653: Unrecognised inode hash code 20
[  360.464326][T12140] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1653: Corrupt directory, running e2fsck is recommended
[  360.478881][T12140] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:106: comm syz.7.1653: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18
[  361.527415][T12201] bridge0: port 1(syz_tun) entered blocking state
[  361.562895][T12201] bridge0: port 1(syz_tun) entered disabled state
[  361.588635][T12205] loop7: detected capacity change from 0 to 512
[  361.607328][T12201] device syz_tun entered promiscuous mode
[  361.619877][T12201] bridge0: port 1(syz_tun) entered blocking state
[  361.626444][T12201] bridge0: port 1(syz_tun) entered forwarding state
[  361.640575][T12199] lo speed is unknown, defaulting to 1000
[  361.679784][T12205] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 33619980: comm syz.7.1673: invalid block
[  361.714184][T12204] 8021q: adding VLAN 0 to HW filter on device batadv1
[  361.723955][T12204] bridge0: port 2(batadv1) entered blocking state
[  361.752251][T12205] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1673: invalid indirect mapped block 10 (level 1)
[  361.777937][T12204] bridge0: port 2(batadv1) entered disabled state
[  361.788953][T12205] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1673: invalid indirect mapped block 8 (level 1)
[  361.810586][T12204] device batadv1 entered promiscuous mode
[  361.823078][T12204] bridge0: port 2(batadv1) entered blocking state
[  361.829738][T12204] bridge0: port 2(batadv1) entered forwarding state
[  361.843076][T12205] EXT4-fs (loop7): 1 truncate cleaned up
[  361.851443][T12205] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  361.974832][T12205] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters
[  362.087216][T12217] loop8: detected capacity change from 0 to 1024
[  362.203854][ T4519] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  362.213836][ T4519] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  362.282135][T12217] EXT4-fs (loop8): Ignoring removed oldalloc option
[  362.302882][T12217] EXT4-fs (loop8): Unrecognized mount option "fscontext=staff_u" or missing value
[  362.534433][T12231] team0: Port device vlan2 added
[  362.652176][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1678'.
[  362.832785][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1678'.
[  363.420971][T12273] autofs4:pid:12273:autofs_fill_super: pipe file descriptor does not contain proper ops
[  363.614804][T12282] lo speed is unknown, defaulting to 1000
[  363.862743][ T4363] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  364.152725][ T4363] usb 9-1: Using ep0 maxpacket: 8
[  364.292857][ T4363] usb 9-1: config 0 has no interfaces?
[  364.463029][ T4363] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  364.475936][ T4363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.511125][ T4363] usb 9-1: Product: syz
[  364.519996][ T4363] usb 9-1: Manufacturer: syz
[  364.534843][ T4363] usb 9-1: SerialNumber: syz
[  364.571867][ T4363] usb 9-1: config 0 descriptor??
[  364.972113][ T4363] usb 9-1: USB disconnect, device number 5
[  365.674806][T12339] gfs2: gfs2 mount does not exist
[  365.946964][T12352] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  366.044193][T12357] netlink: 'syz.6.1711': attribute type 1 has an invalid length.
[  366.101168][T12357] 8021q: adding VLAN 0 to HW filter on device bond6
[  366.112529][T12358] overlayfs: metacopy with no lower data found - abort lookup (/file0)
[  367.297388][T12384] device bridge0 entered promiscuous mode
[  367.395944][T12375] kvm: pic: non byte write
[  367.556503][T12398] tipc: Started in network mode
[  367.578433][T12398] tipc: Node identity ce2d95fc854f, cluster identity 4711
[  367.613687][T12398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.797357][T12402] device syzkaller0 entered promiscuous mode
[  367.919881][T12409] lo speed is unknown, defaulting to 1000
[  367.967864][T12397] tipc: Resetting bearer <eth:syzkaller0>
[  367.987316][T12410] loop8: detected capacity change from 0 to 4096
[  368.062875][T12410] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512)
[  368.146562][T12397] tipc: Disabling bearer <eth:syzkaller0>
[  368.170419][T12410] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  368.193388][T12410] ntfs3: loop8: Failed to load $Extend.
[  368.279217][T12410] ntfs3: loop8: MftZone: unavailable
[  368.310685][T12410] ntfs3: loop8: MftZone: unavailable
[  368.346390][T12410] ntfs3: loop8: no free space to extend mft
[  368.373763][T12430] ntfs3: loop8: MftZone: unavailable
[  368.379120][T12430] ntfs3: loop8: no free space to extend mft
[  368.399976][T12410] ntfs3: loop8: MftZone: unavailable
[  368.440048][T12410] ntfs3: loop8: no free space to extend mft
[  369.661301][T12447] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  371.265684][T12493] gfs2: gfs2 mount does not exist
[  372.687508][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1748'.
[  373.135606][T12545] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  373.213596][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'.
[  373.974861][T12572] loop0: detected capacity change from 0 to 8192
[  374.006443][ T4177]  loop0: p1 p2 p3 p4[DM]
[  374.011124][ T4177] loop0: p1 size 835329 extends beyond EOD, truncated
[  374.050771][ T4177] loop0: p2 size 327680 extends beyond EOD, truncated
[  374.074210][ T4177] loop0: p3 start 1052673 is beyond EOD, truncated
[  374.083888][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1764'.
[  374.105628][T12578] overlayfs: metacopy with no lower data found - abort lookup (/file0)
[  374.114157][ T4177] loop0: p4 size 262144 extends beyond EOD, truncated
[  374.147621][T12572]  loop0: p1 p2 p3 p4[DM]
[  374.152290][T12572] loop0: p1 size 835329 extends beyond EOD, truncated
[  374.160567][T12572] loop0: p2 size 327680 extends beyond EOD, truncated
[  374.168494][T12572] loop0: p3 start 1052673 is beyond EOD, truncated
[  374.175113][T12572] loop0: p4 size 262144 extends beyond EOD, truncated
[  374.197871][ T3560]  loop0: p1 p2 p3 p4[DM]
[  374.202813][ T3560] loop0: p1 size 835329 extends beyond EOD, truncated
[  374.281013][ T3560] loop0: p2 size 327680 extends beyond EOD, truncated
[  374.320873][ T3560] loop0: p3 start 1052673 is beyond EOD, truncated
[  374.350481][ T3560] loop0: p4 size 262144 extends beyond EOD, truncated
[  374.456999][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  374.490489][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  374.539970][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  374.558725][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  374.576221][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  374.693252][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  374.725602][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  374.762321][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  374.804237][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  374.860963][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  374.876603][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  374.890306][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  374.931228][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  375.168031][T12605] bridge0: port 1(wlan1) entered blocking state
[  375.203050][T12605] bridge0: port 1(wlan1) entered disabled state
[  375.233863][T12605] device wlan1 entered promiscuous mode
[  375.363326][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1773'.
[  376.014819][T12635] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[  376.059428][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'.
[  376.993137][T12678] netlink: 'syz.6.1800': attribute type 1 has an invalid length.
[  377.039948][T12678] 8021q: adding VLAN 0 to HW filter on device bond7
[  377.085045][T12685] bond7: (slave dummy0): Enslaving as a backup interface with an up link
[  377.142720][    T9] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  377.173419][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  377.269846][T12678] netlink: 'syz.6.1800': attribute type 10 has an invalid length.
[  377.291558][ T4265] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  377.313473][ T4265] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  377.323424][T12678] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1800'.
[  377.352923][  T154] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  377.366094][T12678] device dummy0 entered promiscuous mode
[  377.387534][T12678] bond7: (slave dummy0): Removing an active aggregator
[  377.404959][T12678] bond7: (slave dummy0): Releasing backup interface
[  377.564085][T12697] overlayfs: failed to clone upperpath
[  378.121720][T12726] bond1: (slave ip6gretap1): making interface the new active one
[  378.178973][T12726] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  378.439202][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  378.445596][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  378.475819][T12752] IPVS: sh: FWM 3 0x00000003 - no destination available
[  378.828241][T12767] lo speed is unknown, defaulting to 1000
[  378.915924][T12776] tipc: Enabled bearer <udp:syz2>, priority 10
[  379.320023][T12801] loop8: detected capacity change from 0 to 2048
[  379.371221][T12799] APIC base relocation is unsupported by KVM
[  379.373773][T12801] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  379.390046][T12799] kvm: apic: phys broadcast and lowest prio
[  379.482674][T12801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  379.518262][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1824'.
[  380.193468][T12842] overlayfs: failed to clone upperpath
[  380.375386][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1837'.
[  380.490902][T12849] ipt_CLUSTERIP: Please specify destination IP
[  380.991207][T12873] netlink: 'syz.8.1842': attribute type 11 has an invalid length.
[  382.542611][T12948] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1861'.
[  382.816095][T12955] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  382.843522][T12955] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  383.038963][T10152] bridge0: port 1(syz_tun) entered disabled state
[  383.095179][T10152] device syz_tun left promiscuous mode
[  383.102768][T10152] bridge0: port 1(syz_tun) entered disabled state
[  383.858324][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'.
[  384.114904][T13008] overlayfs: failed to clone upperpath
[  384.123270][T13001] lo speed is unknown, defaulting to 1000
[  384.432053][T13001] chnl_net:caif_netlink_parms(): no params data found
[  384.510055][T13001] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.517475][T13001] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.526129][T13001] device bridge_slave_0 entered promiscuous mode
[  384.535101][T13001] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.542239][T13001] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.550780][T13001] device bridge_slave_1 entered promiscuous mode
[  384.575370][T13001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.590021][T13001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.630786][T13001] team0: Port device team_slave_0 added
[  384.639870][T13001] team0: Port device team_slave_1 added
[  384.659923][T13001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.666951][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.704076][T13001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.722229][T13001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.730330][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.757553][T13001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.823239][T13001] device hsr_slave_0 entered promiscuous mode
[  384.863062][T13001] device hsr_slave_1 entered promiscuous mode
[  384.878198][T13001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  384.902896][T13001] Cannot create hsr debugfs directory
[  385.271430][T13001] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.415758][T13001] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.458743][T13059] tipc: Failed to remove unknown binding: 66,1,1/4:2404322093/2404322095
[  385.572714][T13001] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.708979][T13001] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.922081][   T26] audit: type=1326 audit(1784821246.458:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.1.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbf667e99 code=0x7fc00000
[  385.997213][   T26] audit: type=1326 audit(1784821246.458:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.1.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbcbf667e99 code=0x7fc00000
[  386.671979][T13001] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  386.681709][T13001] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  386.695145][T13001] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  386.723217][T13001] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  386.775289][ T4265] Bluetooth: hci3: command 0x0409 tx timeout
[  387.017582][T13001] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.090302][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  387.107645][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  387.165074][T13001] 8021q: adding VLAN 0 to HW filter on device team0
[  387.203337][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  387.220720][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  387.254898][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.262040][ T4703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.289704][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  387.381475][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  387.409860][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  387.444125][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.451307][ T4703] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.506272][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  387.541041][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  387.557889][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  387.582327][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  387.594799][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  387.695317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  387.716400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  387.741373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  387.770861][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  387.803155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  387.832261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  387.875542][T13001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  388.266502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  388.280989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  388.304393][T13001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.599645][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1911'.
[  388.626501][T13156] device ip6gre1 entered promiscuous mode
[  388.685644][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  388.704440][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  388.721775][T13156] netlink: 'syz.1.1911': attribute type 6 has an invalid length.
[  388.741942][T13156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1911'.
[  388.785878][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  388.798192][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  388.820751][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  388.832254][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  388.840548][ T4265] Bluetooth: hci3: command 0x041b tx timeout
[  388.849175][T13001] device veth0_vlan entered promiscuous mode
[  388.879437][T13001] device veth1_vlan entered promiscuous mode
[  388.910308][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  388.934917][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  388.943514][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  388.974622][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  388.996194][T13001] device veth0_macvtap entered promiscuous mode
[  389.015994][T13001] device veth1_macvtap entered promiscuous mode
[  389.040423][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.072608][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.097624][T13001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.112386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  389.129216][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  389.139428][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  389.154690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  389.171884][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  389.185040][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.206846][T13001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.223681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  389.241465][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  389.254363][T13001] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.274281][T13001] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.296834][T13001] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.316096][T13001] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.456220][ T4703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.480334][ T4703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.515024][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  389.537597][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.550164][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.558733][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  389.748704][T13192] netlink: 'syz.1.1914': attribute type 1 has an invalid length.
[  389.756677][T13185] overlayfs: failed to clone lowerpath
[  389.850576][T13198] bond3: (slave geneve2): Error -99 calling set_mac_address
[  389.883468][T13204] fuse: Bad value for 'fd'
[  390.104303][T13205] loop8: detected capacity change from 0 to 32768
[  390.344960][T13205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1917 (13205)
[  390.372891][T13205] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  390.381714][T13205] BTRFS info (device loop8): turning on sync discard
[  390.388659][T13205] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  390.398120][T13205] BTRFS info (device loop8): use zstd compression, level 3
[  390.405457][T13205] BTRFS info (device loop8): turning on async discard
[  390.412700][T13205] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  390.423719][T13205] BTRFS info (device loop8): trying to use backup root at mount time
[  390.431917][T13205] BTRFS info (device loop8): enabling auto defrag
[  390.438892][T13205] BTRFS info (device loop8): using free space tree
[  390.445522][T13205] BTRFS info (device loop8): has skinny extents
[  390.915429][ T4511] Bluetooth: hci3: command 0x040f tx timeout
[  391.247601][T13231] netlink: 'syz.6.1923': attribute type 1 has an invalid length.
[  391.326829][T13231] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1923'.
[  391.415610][    T9] BTRFS warning (device loop8): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  391.507620][T13205] BTRFS warning (device loop8): failed to read root (objectid=2): -5
[  391.516470][    T9] BTRFS warning (device loop8): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  391.538479][T13205] BTRFS warning (device loop8): couldn't read tree root
[  391.546608][T13205] BTRFS error (device loop8): parent transid verify failed on 5255168 wanted 5 found 7
[  391.556614][T13205] BTRFS warning (device loop8): couldn't read tree root
[  391.579685][T13205] BTRFS info (device loop8): enabling ssd optimizations
[  391.587374][T13205] BTRFS info (device loop8): clearing free space tree
[  391.594280][T13205] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  391.604056][T13205] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  391.623790][T13205] BTRFS info (device loop8): creating free space tree
[  391.633320][T13205] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  391.642965][T13205] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  391.773556][T13205] netlink: 'syz.8.1917': attribute type 28 has an invalid length.
[  391.781444][T13205] netlink: 'syz.8.1917': attribute type 3 has an invalid length.
[  391.789575][T13205] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1917'.
[  392.072651][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'.
[  392.128039][T13279] overlayfs: workdir and upperdir must reside under the same mount
[  392.389979][T13295] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1934'.
[  393.076014][T13323] Bluetooth: hci3: command 0x0419 tx timeout
[  393.346577][T13342] loop0: detected capacity change from 0 to 128
[  395.059436][T13370] netlink: 'syz.1.1945': attribute type 27 has an invalid length.
[  395.067543][T13370] netlink: 'syz.1.1945': attribute type 4 has an invalid length.
[  395.086336][T13370] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1945'.
[  395.286674][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'.
[  395.385740][T13377] device bond0 entered promiscuous mode
[  395.433511][T13377] device batadv0 entered promiscuous mode
[  395.454116][T13377] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  395.473202][T13377] 8021q: adding VLAN 0 to HW filter on device hsr1
[  395.522738][T13381] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1949'.
[  395.852665][T13381] device bond0 left promiscuous mode
[  395.878447][T13381] bond0 (unregistering): Released all slaves
[  395.907550][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  396.014662][T13401] xt_TPROXY: Can be used only with -p tcp or -p udp
[  396.857976][T13408] overlayfs: failed to clone upperpath
[  397.037757][T13417] overlayfs: failed to clone upperpath
[  397.832258][T13475] syz.0.1973 sent an empty control message without MSG_MORE.
[  398.792360][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1981'.
[  398.827783][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'.
[  398.848832][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1981'.
[  398.881592][T13515] device veth0_macvtap left promiscuous mode
[  398.973689][ T4705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.037382][T13526] netlink: 'syz.7.1983': attribute type 4 has an invalid length.
[  399.180837][ T4705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.220905][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1987'.
[  399.233249][T13526] netlink: 'syz.7.1983': attribute type 4 has an invalid length.
[  399.350439][ T4705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.292591][    C0] sched: RT throttling activated
[  400.895568][ T4705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.982700][ T4705] device hsr_slave_0 left promiscuous mode
[  402.021047][ T4705] device hsr_slave_1 left promiscuous mode
[  402.043782][ T4705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.051254][ T4705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.167251][ T4705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.252098][ T4705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.425066][ T4705] device bridge_slave_1 left promiscuous mode
[  402.438922][T13562] overlayfs: './file0' not a directory
[  402.451997][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.478434][T13562] exfat: Deprecated parameter 'debug'
[  402.509950][ T4705] device bridge_slave_0 left promiscuous mode
[  402.519520][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.527066][T13562] /dev/loop6: Can't open blockdev
[  402.561521][ T4705] device veth1_macvtap left promiscuous mode
[  402.591086][ T4705] device veth0_macvtap left promiscuous mode
[  402.618921][ T4705] device veth1_vlan left promiscuous mode
[  402.652355][ T4705] device veth0_vlan left promiscuous mode
[  403.290345][T13626] loop0: detected capacity change from 0 to 128
[  403.336680][T13626] kvm: pic: non byte write
[  403.458521][ T4705] team0 (unregistering): Port device team_slave_1 removed
[  403.553818][ T4705] team0 (unregistering): Port device team_slave_0 removed
[  403.628349][ T4705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.700414][ T4705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.901373][T13642] loop8: detected capacity change from 0 to 1024
[  403.925978][T13642] EXT4-fs (loop8): Ignoring removed bh option
[  403.942550][T13642] EXT4-fs (loop8): Ignoring removed bh option
[  403.968453][T13642] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  404.063449][T13649] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.2010: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  404.063709][T13642] overlayfs: './file0' not a directory
[  404.091521][T13649] EXT4-fs (loop8): Remounting filesystem read-only
[  404.121541][ T4705] bond0 (unregistering): Released all slaves
[  404.211228][T13639] netem: change failed
[  404.367556][T13659] netlink: 'syz.0.2013': attribute type 1 has an invalid length.
[  404.416129][T13659] device bond0 entered promiscuous mode
[  404.423041][T13659] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.600308][T13659] bond0: (slave bridge3): making interface the new active one
[  404.639480][T13659] device bridge3 entered promiscuous mode
[  404.681210][T13659] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  404.706288][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  404.789968][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2015'.
[  405.067197][T13681] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  405.235310][T13681] device wlan1 left promiscuous mode
[  405.256634][T13681] bridge0: port 1(wlan1) entered disabled state
[  405.287330][T13681] bond1: (slave veth3): Releasing active interface
[  406.127602][T13327] Bluetooth: hci2: command 0x0406 tx timeout
[  406.205878][T13681] bond0: (slave bridge3): Releasing backup interface
[  406.251833][T13681] device bridge3 left promiscuous mode
[  406.478174][T13702] 8021q: adding VLAN 0 to HW filter on device bond8
[  406.563046][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2022'.
[  406.572058][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2022'.
[  406.632262][T13707] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.660480][T13707] bond8: (slave bond0): Enslaving as an active interface with a down link
[  406.812872][T13725] sch_fq: defrate 53322 ignored.
[  406.842154][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2031'.
[  406.868929][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'.
[  406.928925][T13729] 8021q: adding VLAN 0 to HW filter on device bond2
[  407.059824][T13732] 8021q: adding VLAN 0 to HW filter on device bond2
[  407.123337][T13732] bond2: (slave gre2): The slave device specified does not support setting the MAC address
[  407.175248][T13732] bond2: (slave gre2): Error -95 calling set_mac_address
[  407.594397][T13755] netlink: 'syz.1.2037': attribute type 11 has an invalid length.
[  408.417018][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2046'.
[  408.921603][   T26] audit: type=1326 audit(1784821269.458:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13803 comm="syz.8.2051" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72cafde99 code=0x0
[  408.975348][T13809] kvm: emulating exchange as write
[  409.496222][T13830] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.2055'.
[  409.754336][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'.
[  409.922033][T13847] device vlan2 entered promiscuous mode
[  411.075353][T13869] ------------[ cut here ]------------
[  411.112042][T13869] wlan1: Failed check-sdata-in-driver check, flags: 0x4
[  411.144167][T13869] WARNING: CPU: 0 PID: 13869 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550
[  411.199285][T13869] Modules linked in:
[  411.203332][T13869] CPU: 1 PID: 13869 Comm: syz.6.2063 Not tainted syzkaller #0
[  411.211314][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  411.221490][T13869] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  411.232096][T13869] Code: 42 7b f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 60 1e 39 8b 4c 89 e6 89 ea e8 45 5b 71 00 <0f> 0b e9 07 fd ff ff e8 09 24 36 f8 0f 0b e9 b1 fe ff ff e8 fd 23
[  411.259560][ T4512] Bluetooth: hci0: command 0x0406 tx timeout
[  411.276992][T13869] RSP: 0018:ffffc90003ebf240 EFLAGS: 00010246
[  411.292869][T13869] RAX: 3356cd31e4db8200 RBX: 0000000000400000 RCX: 0000000000080000
[  411.302120][T13869] RDX: ffffc90003a41000 RSI: 0000000000004ec9 RDI: 0000000000004eca
[  411.517088][T13869] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af
[  411.672346][T13869] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88801ec50000
[  411.952336][T13869] R13: ffff88801ec51290 R14: ffff88807e150e00 R15: ffff88801ec52268
[  411.988487][T13869] FS:  00007f09b08496c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  412.025482][T13869] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.032131][T13869] CR2: 00007fe72cd4d2f8 CR3: 0000000060e55000 CR4: 00000000003506f0
[  412.040243][T13869] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[  412.057067][T13869] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  412.065717][T13869] Call Trace:
[  412.069152][T13869]  <TASK>
[  412.072131][T13869]  ? netif_carrier_on+0xe1/0x120
[  412.077439][T13869]  ieee80211_ocb_leave+0x27f/0x320
[  412.082771][T13869]  __cfg80211_leave_ocb+0x219/0x400
[  412.088073][T13869]  cfg80211_leave_ocb+0x53/0x70
[  412.093337][T13869]  cfg80211_change_iface+0x4ec/0xe10
[  412.098674][T13869]  nl80211_set_interface+0x5b8/0x810
[  412.112677][T13869]  ? nl80211_dump_interface+0x560/0x560
[  412.118295][T13869]  ? mutex_lock_nested+0x17/0x20
[  412.142711][T13869]  ? nl80211_pre_doit+0x27b/0x540
[  412.147966][T13869]  genl_rcv_msg+0xd0b/0xfa0
[  412.152887][T13869]  ? genl_bind+0x370/0x370
[  412.157365][T13869]  ? __dev_queue_xmit+0x1b64/0x2e50
[  412.179164][T13869]  ? verify_lock_unused+0x140/0x140
[  412.184688][T13869]  ? dev_queue_xmit+0x20/0x20
[  412.202789][T13869]  ? nl80211_dump_interface+0x560/0x560
[  412.208415][T13869]  netlink_rcv_skb+0x1e9/0x430
[  412.239054][T13869]  ? genl_bind+0x370/0x370
[  412.243791][T13869]  ? netlink_ack+0xb10/0xb10
[  412.248445][T13869]  ? down_read+0x1aa/0x2e0
[  412.259959][T13869]  genl_rcv+0x24/0x40
[  412.264322][T13869]  netlink_unicast+0x78f/0x940
[  412.269210][T13869]  netlink_sendmsg+0x8ba/0xbe0
[  412.281947][T13869]  ? netlink_getsockopt+0x570/0x570
[  412.292691][T13869]  ? aa_sock_msg_perm+0x94/0x150
[  412.297688][T13869]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  412.329246][T13869]  ? security_socket_sendmsg+0x7c/0xa0
[  412.349599][T13869]  ? netlink_getsockopt+0x570/0x570
[  412.361536][T13869]  ____sys_sendmsg+0x5be/0x8f0
[  412.379090][T13869]  ? __sys_sendmsg_sock+0x30/0x30
[  412.389962][T13869]  ? import_iovec+0x6f/0xa0
[  412.395883][T13869]  ___sys_sendmsg+0x236/0x2e0
[  412.400689][T13869]  ? __sys_sendmsg+0x290/0x290
[  412.412123][T13869]  ? sock_do_ioctl+0x29d/0x320
[  412.420772][T13869]  __se_sys_sendmsg+0x1b7/0x2a0
[  412.431519][T13869]  ? __x64_sys_sendmsg+0x80/0x80
[  412.439127][T13869]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  412.450856][T13869]  ? lockdep_hardirqs_on+0x94/0x140
[  412.457422][T13869]  do_syscall_64+0x4c/0xa0
[  412.461953][T13869]  ? clear_bhb_loop+0x30/0x80
[  412.472243][T13869]  ? clear_bhb_loop+0x30/0x80
[  412.478557][T13869]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  412.490251][T13869] RIP: 0033:0x7f09b25f0e99
[  412.500361][T13869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.548088][T13869] RSP: 002b:00007f09b0849028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.557591][T13869] RAX: ffffffffffffffda RBX: 00007f09b2878fa0 RCX: 00007f09b25f0e99
[  412.577515][T13869] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  412.591379][T13869] RBP: 00007f09b2686eaf R08: 0000000000000000 R09: 0000000000000000
[  412.600785][T13869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.614984][T13869] R13: 00007f09b2879038 R14: 00007f09b2878fa0 R15: 00007ffd7544f3d8
[  412.627489][T13869]  </TASK>
[  412.630665][T13869] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  412.637964][T13869] CPU: 1 PID: 13869 Comm: syz.6.2063 Not tainted syzkaller #0
[  412.645438][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026
[  412.655509][T13869] Call Trace:
[  412.658801][T13869]  <TASK>
[  412.661755][T13869]  dump_stack_lvl+0x188/0x250
[  412.666485][T13869]  ? show_regs_print_info+0x20/0x20
[  412.671720][T13869]  ? load_image+0x410/0x410
[  412.676298][T13869]  panic+0x2f8/0x850
[  412.680264][T13869]  ? bpf_jit_dump+0xd0/0xd0
[  412.684810][T13869]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  412.691259][T13869]  __warn+0x248/0x2b0
[  412.695303][T13869]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  412.701747][T13869]  report_bug+0x1b9/0x2e0
[  412.706125][T13869]  handle_bug+0x3a/0x70
[  412.710313][T13869]  exc_invalid_op+0x16/0x40
[  412.714932][T13869]  asm_exc_invalid_op+0x16/0x20
[  412.719854][T13869] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  412.726932][T13869] Code: 42 7b f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 60 1e 39 8b 4c 89 e6 89 ea e8 45 5b 71 00 <0f> 0b e9 07 fd ff ff e8 09 24 36 f8 0f 0b e9 b1 fe ff ff e8 fd 23
[  412.746560][T13869] RSP: 0018:ffffc90003ebf240 EFLAGS: 00010246
[  412.752657][T13869] RAX: 3356cd31e4db8200 RBX: 0000000000400000 RCX: 0000000000080000
[  412.760652][T13869] RDX: ffffc90003a41000 RSI: 0000000000004ec9 RDI: 0000000000004eca
[  412.768643][T13869] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af
[  412.776679][T13869] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88801ec50000
[  412.784671][T13869] R13: ffff88801ec51290 R14: ffff88807e150e00 R15: ffff88801ec52268
[  412.792707][T13869]  ? netif_carrier_on+0xe1/0x120
[  412.797694][T13869]  ieee80211_ocb_leave+0x27f/0x320
[  412.802852][T13869]  __cfg80211_leave_ocb+0x219/0x400
[  412.808089][T13869]  cfg80211_leave_ocb+0x53/0x70
[  412.812989][T13869]  cfg80211_change_iface+0x4ec/0xe10
[  412.818315][T13869]  nl80211_set_interface+0x5b8/0x810
[  412.823668][T13869]  ? nl80211_dump_interface+0x560/0x560
[  412.829237][T13869]  ? mutex_lock_nested+0x17/0x20
[  412.834207][T13869]  ? nl80211_pre_doit+0x27b/0x540
[  412.839256][T13869]  genl_rcv_msg+0xd0b/0xfa0
[  412.843814][T13869]  ? genl_bind+0x370/0x370
[  412.848267][T13869]  ? __dev_queue_xmit+0x1b64/0x2e50
[  412.853497][T13869]  ? verify_lock_unused+0x140/0x140
[  412.858748][T13869]  ? dev_queue_xmit+0x20/0x20
[  412.863446][T13869]  ? nl80211_dump_interface+0x560/0x560
[  412.869046][T13869]  netlink_rcv_skb+0x1e9/0x430
[  412.873843][T13869]  ? genl_bind+0x370/0x370
[  412.878286][T13869]  ? netlink_ack+0xb10/0xb10
[  412.882908][T13869]  ? down_read+0x1aa/0x2e0
[  412.887370][T13869]  genl_rcv+0x24/0x40
[  412.891379][T13869]  netlink_unicast+0x78f/0x940
[  412.896186][T13869]  netlink_sendmsg+0x8ba/0xbe0
[  412.900996][T13869]  ? netlink_getsockopt+0x570/0x570
[  412.906314][T13869]  ? aa_sock_msg_perm+0x94/0x150
[  412.911289][T13869]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  412.916603][T13869]  ? security_socket_sendmsg+0x7c/0xa0
[  412.922102][T13869]  ? netlink_getsockopt+0x570/0x570
[  412.927332][T13869]  ____sys_sendmsg+0x5be/0x8f0
[  412.932145][T13869]  ? __sys_sendmsg_sock+0x30/0x30
[  412.937224][T13869]  ? import_iovec+0x6f/0xa0
[  412.941758][T13869]  ___sys_sendmsg+0x236/0x2e0
[  412.946471][T13869]  ? __sys_sendmsg+0x290/0x290
[  412.951274][T13869]  ? sock_do_ioctl+0x29d/0x320
[  412.956091][T13869]  __se_sys_sendmsg+0x1b7/0x2a0
[  412.960971][T13869]  ? __x64_sys_sendmsg+0x80/0x80
[  412.965957][T13869]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  412.971988][T13869]  ? lockdep_hardirqs_on+0x94/0x140
[  412.977244][T13869]  do_syscall_64+0x4c/0xa0
[  412.982026][T13869]  ? clear_bhb_loop+0x30/0x80
[  412.986750][T13869]  ? clear_bhb_loop+0x30/0x80
[  412.991458][T13869]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  412.997383][T13869] RIP: 0033:0x7f09b25f0e99
[  413.001825][T13869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.021458][T13869] RSP: 002b:00007f09b0849028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.029939][T13869] RAX: ffffffffffffffda RBX: 00007f09b2878fa0 RCX: 00007f09b25f0e99
[  413.037939][T13869] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  413.045939][T13869] RBP: 00007f09b2686eaf R08: 0000000000000000 R09: 0000000000000000
[  413.053961][T13869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.061959][T13869] R13: 00007f09b2879038 R14: 00007f09b2878fa0 R15: 00007ffd7544f3d8
[  413.069983][T13869]  </TASK>
[  413.073310][T13869] Kernel Offset: disabled
[  413.078079][T13869] Rebooting in 86400 seconds..