last executing test programs:

10m31.960636927s ago: executing program 4 (id=5):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000001880), 0x40101, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

10m30.398584559s ago: executing program 4 (id=12):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x11, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

10m28.387459965s ago: executing program 4 (id=17):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
openat$userio(0xffffffffffffff9c, 0x0, 0xc0141, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x12, 0x0, @fd_index=0x9, 0x7ff, 0x0, 0x80000000, 0xc, 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

10m21.852692037s ago: executing program 4 (id=29):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
getdents64(r1, &(0x7f0000001f00)=""/4093, 0xffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31)

10m18.080590998s ago: executing program 4 (id=35):
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

10m14.47183625s ago: executing program 4 (id=41):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x1f, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="c75a713cac8d64b969e8f5c119f8c7622b09482bcdb2c7e6b23bd741c4dfe10c514abd159241a86f8fc63ed4b79b4a82b3f86dae82588b5d11504b5198c9d1798a9eca113daf0a0de8e2b65e0ec8262d325b1353a1055e0f26ed25cee51d5ede03a744b79422b2d6f0c2e296dcabd5740682de3e9f3f05be8280455f40787ad333b7a2d78ca005703739ab342c53d084bf4d5ac088d9bc834616feba92f237"], 0x0)

10m13.198931214s ago: executing program 32 (id=41):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x1f, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="c75a713cac8d64b969e8f5c119f8c7622b09482bcdb2c7e6b23bd741c4dfe10c514abd159241a86f8fc63ed4b79b4a82b3f86dae82588b5d11504b5198c9d1798a9eca113daf0a0de8e2b65e0ec8262d325b1353a1055e0f26ed25cee51d5ede03a744b79422b2d6f0c2e296dcabd5740682de3e9f3f05be8280455f40787ad333b7a2d78ca005703739ab342c53d084bf4d5ac088d9bc834616feba92f237"], 0x0)

9m38.415331014s ago: executing program 0 (id=107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

9m37.369611411s ago: executing program 0 (id=108):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x86, 0xfff, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83c})
dup(r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd4, 0x35})
close_range(r0, 0xffffffffffffffff, 0x0)

9m37.200642405s ago: executing program 0 (id=109):
socket$netlink(0x10, 0x3, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})

9m36.18409024s ago: executing program 0 (id=112):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
tkill(r3, 0x11)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840), 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

9m35.063555096s ago: executing program 0 (id=113):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r3, 0x1}, 0x20)

9m33.99356621s ago: executing program 0 (id=115):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

9m15.239723933s ago: executing program 33 (id=115):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

3m24.315192264s ago: executing program 6 (id=810):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
umount2(0x0, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r3, 0xa)
setresgid(0xee00, 0xee01, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaa<F\x87\xb7\xbf\x8a\xe0\xbc\x9c\xa5\xc5\xda3_\xc7\t\x8f\xa1\xc3\x1c3u\xac\x05\x16\x04*S\xdby\xd6\xe1\xa0\xb3/\xae\xccPO\xfa\xe6\x19A\xc5!YU+@\xc4~\x1f\x93\xf0\x92\xd4\xf6\x06z\x13\xa7\x0e\xdf\x0f\x04\x00\x00\x00>dP\xf8\xab\xa0#')

3m22.263188025s ago: executing program 6 (id=814):
unshare(0x22020600)
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)
mknod$loop(0x0, 0x6000, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
semget$private(0x0, 0x3, 0x555)
semop(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @none}, 0x8)

3m21.914261167s ago: executing program 6 (id=817):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x48}}, 0x0)

3m19.827481171s ago: executing program 6 (id=819):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010101}, 0x3, 0x0, 0x0, 0x2}}, 0x26)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

3m18.380165556s ago: executing program 6 (id=822):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0)
move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES8=r1, @ANYRES64=r1], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'veth0_to_batadv\x00', @random="c0778384c8ca"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)

3m14.505058385s ago: executing program 6 (id=827):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x400}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)

2m59.281387517s ago: executing program 34 (id=827):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x400}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)

2m8.775300706s ago: executing program 2 (id=939):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
syz_open_dev$video(0x0, 0xc000, 0x0)
syz_open_dev$I2C(0x0, 0x80, 0x274100)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000)
ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})

2m7.207006357s ago: executing program 2 (id=941):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$rtc(0xffffff9c, 0x0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
mlockall(0x5)

2m6.079530128s ago: executing program 2 (id=944):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$netlink(0x10, 0x3, 0x0)

2m4.649046385s ago: executing program 2 (id=946):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

2m3.366680357s ago: executing program 2 (id=947):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901)
move_mount(r4, 0x0, r4, 0x0, 0x262)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x1, 0x0)
getpgrp(0x0)

2m1.941962102s ago: executing program 2 (id=949):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
unshare(0x22020600)
r0 = epoll_create1(0x80000)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), &(0x7f0000000100)={[0x5]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
request_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)='\x00', 0xfffffffffffffffa)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0xc09, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0x24, 0x2}}, 0x20}}, 0x0)
keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x101000)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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")

1m46.720313042s ago: executing program 35 (id=949):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
unshare(0x22020600)
r0 = epoll_create1(0x80000)
epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), &(0x7f0000000100)={[0x5]}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
request_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)='\x00', 0xfffffffffffffffa)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0xc09, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0x24, 0x2}}, 0x20}}, 0x0)
keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')
syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x101000)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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")

9.974981396s ago: executing program 5 (id=1139):
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r4, 0xfffffffc}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x128, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

8.08453973s ago: executing program 1 (id=1140):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="003b6377e43d96ad0d6a86b1a6b5f1ce24b4434d72dce8f1fcd03e21b2089f5b7b"], 0x1, 0xa10, &(0x7f0000001540)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34524742}})
semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000003c0)=""/34)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7ff, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0x100000000, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x8, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]})
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c})

8.021191585s ago: executing program 5 (id=1141):
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141500)
io_setup(0x8, &(0x7f0000000200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, 0x0)
io_submit(r0, 0x0, &(0x7f0000002340))
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)

7.964998593s ago: executing program 3 (id=1142):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffdb3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

6.633771085s ago: executing program 3 (id=1143):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x40)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

6.529278579s ago: executing program 5 (id=1144):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3fe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$rtc(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mlockall(0x5)

6.060921586s ago: executing program 3 (id=1145):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3fe000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$rtc(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mlockall(0x5)

5.440308685s ago: executing program 5 (id=1146):
socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000380)={0x20080522}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x34}}, 0x4004010)
munlockall()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x14040044)

5.426094666s ago: executing program 1 (id=1147):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
request_key(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, 0x0, 0x0)
listen(r3, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0xf2, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000000)="2e000300010000", 0x7)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)

5.401311525s ago: executing program 3 (id=1148):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000050000", @ANYRES32, @ANYBLOB="000021000000000020000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x1e, 0x1, 0x0)
write$binfmt_misc(r2, &(0x7f0000000400), 0x2000011a)
recvmmsg$unix(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20012140, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)

4.271460218s ago: executing program 3 (id=1149):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0xfd2, 0x3, 0x3}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
r2 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
unshare(0x2a020400)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x3)
close(0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

3.645221464s ago: executing program 1 (id=1150):
fsopen(&(0x7f0000000100)='vfat\x00', 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socket(0x1, 0x803, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

3.324970632s ago: executing program 1 (id=1151):
r0 = socket(0x2, 0x2, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0xfffffffd)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x2)
writev(r2, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$clear(0x3, 0xfffffffffffffffd)
bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e)

2.998484711s ago: executing program 1 (id=1152):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd26, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0xfffffffffffffffe, 0x4000000000000004}, 0x400, 0x0, 0x0, 0x1}}, 0xb8}}, 0x20048050)
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x5}}}}}}}, 0x0)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}, {&(0x7f0000000600)=ANY=[], 0x4d8}, {&(0x7f0000002b00)=ANY=[], 0x1e20}], 0x3, 0x0, 0x0, 0x4008084}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_setup(0x5c47, &(0x7f0000000240)={0x0, 0x6871, 0x10000, 0x0, 0x70}, &(0x7f0000000040), &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [<r6=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6})

1.074993088s ago: executing program 5 (id=1153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad000000000140000"], 0x7c}}, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_type(r4, &(0x7f0000000100), 0x9)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

992.757862ms ago: executing program 1 (id=1154):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080)
sendmmsg$alg(r5, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x2010)

816.902878ms ago: executing program 3 (id=1155):
fchown(0xffffffffffffffff, 0x0, 0xee01)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$inet6(0xa, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
r1 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000000)={0x2}, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r3 = memfd_create(&(0x7f0000000280)='/dev/loop#\x00', 0x3)
fallocate(r3, 0x0, 0x0, 0x200401)
fcntl$addseals(r3, 0x409, 0x4)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r4, &(0x7f0000000a80), 0x12)

0s ago: executing program 5 (id=1156):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000080)={0x0, "3959bae38505b6494a3cfc779b880d79fa136923747b50cd06010a66418f40ec", 0x2})
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xa0040, 0x0)
ioctl$TIOCSERGETLSR(r1, 0x5459, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff00000800084000000000050001000600000011000300686173683a6e65742c6e6574000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x5, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000800})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r6, 0x0, &(0x7f0000000380)="19", 0x1, 0x1})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x3, r6, 0x0, &(0x7f0000000240)="ec", 0x1, 0x9e42})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0)

kernel console output (not intermixed with test programs):

 T7344] FAT-fs (loop3): Directory bread(block 64) failed
[  235.029434][ T7344] FAT-fs (loop3): Directory bread(block 65) failed
[  235.036205][ T7344] FAT-fs (loop3): Directory bread(block 66) failed
[  235.042727][ T7344] FAT-fs (loop3): Directory bread(block 67) failed
[  235.049386][ T7344] FAT-fs (loop3): Directory bread(block 68) failed
[  235.056644][ T7344] FAT-fs (loop3): Directory bread(block 69) failed
[  235.063335][ T7344] FAT-fs (loop3): Directory bread(block 70) failed
[  235.069941][ T7344] FAT-fs (loop3): Directory bread(block 71) failed
[  235.076578][ T7344] FAT-fs (loop3): Directory bread(block 72) failed
[  235.083090][ T7344] FAT-fs (loop3): Directory bread(block 73) failed
[  235.125762][ T3454] bond0 (unregistering): Released all slaves
[  235.377285][ T7213] team0: Port device team_slave_1 added
[  236.188460][ T3454] hsr_slave_0: left promiscuous mode
[  236.205650][ T3454] hsr_slave_1: left promiscuous mode
[  236.223545][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.245329][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.608698][ T3454] team0 (unregistering): Port device team_slave_1 removed
[  237.679797][ T3454] team0 (unregistering): Port device team_slave_0 removed
[  237.905167][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  238.029705][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.038167][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.066180][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.084397][ T7233] chnl_net:caif_netlink_parms(): no params data found
[  238.092754][ T5902] usb 4-1: Using ep0 maxpacket: 32
[  238.104048][ T7368] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.293'.
[  238.125553][ T5902] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  238.139996][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.159362][ T5902] usb 4-1: config 0 has no interface number 0
[  238.166312][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.226470][ T5902] usb 4-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c
[  238.257544][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.278240][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.288874][ T5902] usb 4-1: Product: syz
[  238.293157][ T5902] usb 4-1: Manufacturer: syz
[  238.303068][ T5902] usb 4-1: SerialNumber: syz
[  239.115559][ T5902] usb 4-1: config 0 descriptor??
[  239.586583][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.596829][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.610983][ T5902] mos7840 4-1:0.186: missing endpoints
[  239.997887][   T56] usb 4-1: USB disconnect, device number 3
[  240.205829][ T7213] hsr_slave_0: entered promiscuous mode
[  240.214688][ T7213] hsr_slave_1: entered promiscuous mode
[  240.223097][ T7213] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.231301][ T7213] Cannot create hsr debugfs directory
[  241.213604][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.287481][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.335134][ T7233] bridge_slave_0: entered allmulticast mode
[  241.447164][ T7233] bridge_slave_0: entered promiscuous mode
[  242.562289][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.616272][ T7415] program syz.1.303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.627155][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.640885][ T7233] bridge_slave_1: entered allmulticast mode
[  243.312230][ T7233] bridge_slave_1: entered promiscuous mode
[  243.913409][ T7415] program syz.1.303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.110317][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.553708][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.987610][ T7233] team0: Port device team_slave_0 added
[  247.050267][ T7233] team0: Port device team_slave_1 added
[  248.847397][ T7480] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  248.873623][ T7480] CIFS mount error: No usable UNC path provided in device string!
[  248.873623][ T7480] 
[  248.884590][ T7480] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  249.113015][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.134890][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.236083][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.253214][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.262772][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.290863][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.096132][ T7504] xt_policy: output policy not valid in PREROUTING and INPUT
[  251.401379][ T7233] hsr_slave_0: entered promiscuous mode
[  251.416475][ T7233] hsr_slave_1: entered promiscuous mode
[  251.430010][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.140288][ T7233] Cannot create hsr debugfs directory
[  254.903847][ T7213] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  255.008623][ T7213] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  255.072340][ T7213] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  255.147664][ T7213] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  255.162236][ T3454] bridge_slave_1: left allmulticast mode
[  255.170237][ T3454] bridge_slave_1: left promiscuous mode
[  255.178770][ T3454] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.190469][ T3454] bridge_slave_0: left allmulticast mode
[  255.196900][ T3454] bridge_slave_0: left promiscuous mode
[  255.202665][ T3454] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.597781][ T3454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.609093][ T3454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.620288][ T3454] bond0 (unregistering): Released all slaves
[  255.665307][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.671844][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.758025][ T3454] hsr_slave_0: left promiscuous mode
[  255.764246][ T3454] hsr_slave_1: left promiscuous mode
[  255.770729][ T3454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.778361][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.788307][ T3454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.805168][ T3454] veth1_macvtap: left promiscuous mode
[  255.810797][ T3454] veth0_macvtap: left promiscuous mode
[  255.817386][ T3454] veth1_vlan: left promiscuous mode
[  255.822648][ T3454] veth0_vlan: left promiscuous mode
[  256.169723][ T3454] team0 (unregistering): Port device team_slave_1 removed
[  256.206885][ T3454] team0 (unregistering): Port device team_slave_0 removed
[  256.672374][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.751437][ T7213] 8021q: adding VLAN 0 to HW filter on device team0
[  256.772707][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.779921][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.817020][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.824158][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.065870][ T7233] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  257.088907][ T7233] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  257.116314][ T7233] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  257.142228][ T7233] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  257.260238][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.389104][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.430740][ T7233] 8021q: adding VLAN 0 to HW filter on device team0
[  257.449650][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.456856][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.489569][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.496758][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.704858][ T7213] veth0_vlan: entered promiscuous mode
[  257.745811][ T7213] veth1_vlan: entered promiscuous mode
[  257.826301][ T7213] veth0_macvtap: entered promiscuous mode
[  257.839258][ T7213] veth1_macvtap: entered promiscuous mode
[  257.870615][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.892423][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.926714][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.936520][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.962831][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.990582][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.041874][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.131232][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.160319][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.217866][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.252039][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.333505][ T7233] veth0_vlan: entered promiscuous mode
[  259.452385][ T7233] veth1_vlan: entered promiscuous mode
[  259.590562][ T7233] veth0_macvtap: entered promiscuous mode
[  260.207969][ T7233] veth1_macvtap: entered promiscuous mode
[  260.243907][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.308701][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.364460][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.402341][   T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.266079][   T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.499751][ T1040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.805000][   T30] audit: type=1800 audit(1750710844.075:39): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.330" name="bus" dev="overlay" ino=36 res=0 errno=0
[  262.211994][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.212403][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.801767][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.865008][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.882429][   T30] audit: type=1800 audit(1750710847.045:40): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.339" name="bus" dev="overlay" ino=529 res=0 errno=0
[  267.816036][ T7678] loop6: detected capacity change from 0 to 256
[  268.556049][ T7685] batadv_slave_1: entered promiscuous mode
[  268.720432][ T7679] batadv_slave_1: left promiscuous mode
[  268.962137][ T7678] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  272.827213][ T7737] netlink: 2 bytes leftover after parsing attributes in process `syz.5.352'.
[  275.544685][ T7737] delete_channel: no stack
[  275.816361][ T1040] wlan0: Trigger new scan to find an IBSS to join
[  276.783311][ T7783] netlink: 'syz.5.362': attribute type 1 has an invalid length.
[  276.791711][ T7783] netlink: 'syz.5.362': attribute type 4 has an invalid length.
[  276.799734][ T7783] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.362'.
[  276.811276][ T7783] netlink: 'syz.5.362': attribute type 1 has an invalid length.
[  276.818973][ T7783] netlink: 'syz.5.362': attribute type 4 has an invalid length.
[  276.826654][ T7783] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.362'.
[  280.275100][ T7802] 9pnet: Could not find request transport: f0x0000000000000003
[  280.910860][ T1099] wlan0: Trigger new scan to find an IBSS to join
[  283.991459][   T36] wlan0: Creating new IBSS network, BSSID c6:d9:10:ef:bd:52
[  285.855128][ T5947] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  287.187953][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  287.196384][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short
[  287.217303][ T5947] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  289.050040][ T7896] loop3: detected capacity change from 0 to 128
[  289.069878][ T5947] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  289.093874][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.811608][ T5947] usb 2-1: can't set config #7, error -71
[  290.422224][ T5947] usb 2-1: USB disconnect, device number 3
[  291.575305][ T7921] ip6t_srh: unknown srh invflags 7D00
[  295.880179][ T7960] openvswitch: netlink: IP tunnel dst address not specified
[  296.664509][ T7966] loop3: detected capacity change from 0 to 2048
[  296.694563][ T7966] NILFS (loop3): invalid segment: Inconsistency found
[  296.712557][ T7966] NILFS (loop3): trying rollback from an earlier position
[  297.781573][ T7966] NILFS (loop3): recovery complete
[  297.891567][ T7981] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.202897][ T7997] overlayfs: missing 'lowerdir'
[  303.442976][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  303.475009][ T8019] netlink: 'syz.1.416': attribute type 7 has an invalid length.
[  303.554153][ T8019] netlink: 'syz.1.416': attribute type 8 has an invalid length.
[  303.595526][ T8027] loop6: detected capacity change from 0 to 2048
[  303.625334][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'.
[  303.680160][ T8027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.795234][ T8019] team0: entered promiscuous mode
[  303.800443][ T8019] team_slave_0: entered promiscuous mode
[  304.291350][ T8019] team_slave_1: entered promiscuous mode
[  304.309357][ T8019] bond0: entered promiscuous mode
[  304.314756][ T8019] bond_slave_0: entered promiscuous mode
[  304.343904][ T8019] bond_slave_1: entered promiscuous mode
[  304.401566][ T8019] gretap0: entered promiscuous mode
[  304.461767][ T8019] 8021q: adding VLAN 0 to HW filter on device hsr1
[  305.352324][ T8042] loop5: detected capacity change from 0 to 512
[  305.433657][ T8042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.446320][ T8042] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.854994][ T7233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.094091][ T8071] CIFS mount error: No usable UNC path provided in device string!
[  307.094091][ T8071] 
[  307.393841][ T8071] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  314.122098][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  314.884946][ T8111] bridge0: port 3(syz_tun) entered blocking state
[  314.891733][ T8111] bridge0: port 3(syz_tun) entered disabled state
[  314.921291][   T30] audit: type=1326 audit(1750710896.855:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeab58e929 code=0x7ffc0000
[  315.143256][ T8111] syz_tun: entered allmulticast mode
[  315.804931][   T30] audit: type=1326 audit(1750710896.865:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8099 comm="syz.5.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeab58e929 code=0x7ffc0000
[  315.880699][ T8111] syz_tun: entered promiscuous mode
[  315.905847][ T8111] bridge0: port 3(syz_tun) entered blocking state
[  315.912546][ T8111] bridge0: port 3(syz_tun) entered forwarding state
[  317.076297][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.085480][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.092910][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.102337][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.110104][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.117874][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.126096][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.209954][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.220856][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.235036][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.245368][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.252847][ T5917] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0
[  317.271028][ T5917] hid-generic 0002:0004:0009.0001: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[  318.423971][ T8143] fido_id[8143]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  322.241563][ T8179] loop3: detected capacity change from 0 to 2048
[  322.847292][ T8188] UBIFS error (pid: 8188): cannot open "c:::", error -22
[  322.913022][ T8179] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  328.901820][ T8242] loop5: detected capacity change from 0 to 8
[  330.264993][ T8255] netlink: 'syz.2.462': attribute type 11 has an invalid length.
[  330.272754][ T8255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.462'.
[  331.167872][ T8258] loop3: detected capacity change from 0 to 128
[  331.300202][ T8258] FAT-fs (loop3): error, invalid access to FAT (entry 0x0ffffff6)
[  333.036350][ T8273] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  338.899053][ T8315] overlayfs: missing 'lowerdir'
[  340.620945][ T8350] loop3: detected capacity change from 0 to 4096
[  340.744063][ T8350] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  341.450370][ T8350] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  341.602328][ T7282] udevd[7282]: incorrect nilfs2 checksum on /dev/loop3
[  341.635226][ T8367] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  343.457601][   T30] audit: type=1800 audit(1750710925.735:43): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.485" name="file2" dev="loop3" ino=16 res=0 errno=0
[  344.298588][   T49] bond1: (slave ip6gretap1): link status up again after 0 ms
[  344.366752][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  344.731362][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  344.864702][ T8398] dns_resolver: Unsupported server list version (0)
[  345.387292][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  345.524975][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  346.500797][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  346.684980][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  346.795473][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  347.486570][   T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  347.637633][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  348.021439][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  349.511195][   T36] net_ratelimit: 2 callbacks suppressed
[  349.511208][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  349.930166][ T5841] Bluetooth: hci5: command 0x0406 tx timeout
[  349.936523][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  350.070649][ T8434] loop1: detected capacity change from 0 to 1024
[  350.285394][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  350.703936][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  350.824958][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  352.673959][ T8441] syz.6.504 (8441): drop_caches: 2
[  352.778734][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  352.926880][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  352.987520][ T8469] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  353.265563][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  353.983919][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  354.066481][ T8480] overlayfs: failed to clone upperpath
[  354.113652][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  354.279016][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  355.854511][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  355.987929][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  356.288390][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  356.485205][ T8511] loop3: detected capacity change from 0 to 256
[  356.710519][ T8511] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  356.757890][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  357.195634][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  357.369073][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  357.902082][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  357.945073][ T8524] loop5: detected capacity change from 0 to 64
[  358.138962][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  358.784707][ T8524] hfs: unable to locate alternate MDB
[  358.891077][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  358.924979][ T8524] hfs: continuing without an alternate MDB
[  359.064747][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  359.265631][ T8537] loop6: detected capacity change from 0 to 32768
[  359.349473][   T30] audit: type=1800 audit(1750710941.665:44): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.523" name="file1" dev="loop5" ino=18 res=0 errno=0
[  359.538075][ T8537] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  361.080290][ T8537] XFS (loop6): Ending clean mount
[  361.173983][   T60] net_ratelimit: 3 callbacks suppressed
[  361.174013][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  361.289244][ T8555] loop3: detected capacity change from 0 to 1024
[  361.338799][ T8537] XFS (loop6): Quotacheck needed: Please wait.
[  361.483902][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  361.734503][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  361.865681][ T8537] XFS (loop6): Quotacheck: Done.
[  363.769898][ T7213] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  364.461195][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  364.655184][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  364.865829][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  365.105819][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  365.361681][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  365.655889][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  365.845175][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  366.180808][ T8583] loop1: detected capacity change from 0 to 8
[  366.281824][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  366.296912][ T8583] SQUASHFS error: xz decompression failed, data probably corrupt
[  366.304697][ T8583] SQUASHFS error: Failed to read block 0x108: -5
[  366.311586][ T8583] SQUASHFS error: Unable to read metadata cache entry [106]
[  366.319028][ T8583] SQUASHFS error: Unable to read inode 0x11f
[  366.475921][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  366.817874][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  366.988171][ T8571] loop3: detected capacity change from 0 to 32768
[  367.161274][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  367.394127][ T8571] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  367.394437][ T8571] (syz.3.527,8571,1):ocfs2_initialize_super:2227 ERROR: status = -12
[  367.412435][ T8571] (syz.3.527,8571,1):ocfs2_fill_super:1177 ERROR: status = -12
[  367.423204][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  367.843918][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  368.370988][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  368.490076][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  368.802280][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  369.098085][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  371.423318][   T12] net_ratelimit: 7 callbacks suppressed
[  371.423337][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  371.843312][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  372.209593][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  372.427347][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  373.183228][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  373.458316][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  373.718976][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  373.895115][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  374.055703][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  374.235259][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  376.485257][ T1155] net_ratelimit: 11 callbacks suppressed
[  376.485284][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  376.615727][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  376.757024][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  376.875084][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  377.006389][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  377.198629][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  377.591804][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  377.907468][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  378.156853][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  378.315480][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  379.049135][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  379.055643][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  380.627789][  T927] IPVS: starting estimator thread 0...
[  380.886513][ T8700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  380.995094][ T8701] IPVS: using max 42 ests per chain, 100800 per kthread
[  381.136345][   T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  382.884746][   T49] net_ratelimit: 11 callbacks suppressed
[  382.884766][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  383.084342][ T8726] overlayfs: workdir and upperdir must reside under the same mount
[  383.319009][ T8729] loop3: detected capacity change from 0 to 256
[  383.338653][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  384.635562][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  384.750321][ T8729] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  384.926586][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  385.937357][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  386.444668][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  386.566860][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  386.718108][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  389.150364][ T8768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.341189][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  390.003630][ T8798] gtp0: entered promiscuous mode
[  390.625480][ T8801] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  390.978169][ T8768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.457108][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  393.114669][ T8768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.187552][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  393.327273][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  393.355193][ T5840] Bluetooth: hci2: unknown advertising packet type: 0x5f
[  393.496875][ T8768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.556067][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  393.585965][ T8833] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  393.737572][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  393.935285][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  394.245123][   T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.254007][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  394.360193][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.479163][ T8843] loop6: detected capacity change from 0 to 128
[  394.490439][ T8843] adfs: Bad value for 'uid'
[  394.495571][ T8843] adfs: Bad value for 'uid'
[  394.778396][ T8843] loop6: detected capacity change from 0 to 128
[  394.852437][ T8843] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  394.878184][ T8843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.047319][   T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.112182][   T60] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.340498][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  395.532587][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  395.888986][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  396.132195][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  396.448822][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  396.824396][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  397.015631][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  397.166516][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  397.195303][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  397.342587][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  397.379968][ T5894] usb 2-1: Using ep0 maxpacket: 8
[  397.411313][ T5894] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  397.503072][ T5894] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  397.512788][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.569639][ T5894] usb 2-1: Product: syz
[  397.573953][ T5894] usb 2-1: Manufacturer: syz
[  397.665195][ T5894] usb 2-1: SerialNumber: syz
[  397.961473][ T5894] usb 2-1: config 0 descriptor??
[  398.096593][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  398.841975][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.017350][    C0] EXT4-fs (loop4): error count since last fsck: 4
[  399.024128][    C0] EXT4-fs (loop4): last error at time 1750710679: ext4_lookup:1791: inode 2
[  399.138163][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.211900][ T8893] lo speed is unknown, defaulting to 1000
[  399.217990][ T8893] lo speed is unknown, defaulting to 1000
[  399.227068][ T8893] lo speed is unknown, defaulting to 1000
[  399.239808][ T8893] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  399.258829][ T8893] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  399.820044][ T8893] lo speed is unknown, defaulting to 1000
[  399.836175][ T8893] lo speed is unknown, defaulting to 1000
[  399.850592][ T8893] lo speed is unknown, defaulting to 1000
[  399.864622][ T8893] lo speed is unknown, defaulting to 1000
[  399.879013][ T8893] lo speed is unknown, defaulting to 1000
[  400.266130][ T5840] Bluetooth: hci3: unexpected event for opcode 0x040d
[  400.559235][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'.
[  400.568178][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.599'.
[  400.577065][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'.
[  400.586051][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'.
[  400.635324][   T60] net_ratelimit: 7 callbacks suppressed
[  400.635344][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  400.636825][ T8903] loop6: detected capacity change from 0 to 32768
[  400.815704][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  400.830563][ T8903] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  400.830585][ T8903]   allowing incompatible features above 0.0: (unknown version)
[  400.830595][ T8903]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  400.870437][ T8903] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  400.878843][ T8903] bcachefs (loop6): initializing new filesystem
[  400.895787][ T8903] bcachefs (loop6): going read-write
[  400.914260][ T8903] bcachefs (loop6): marking superblocks
[  400.939589][ T8903] bcachefs (loop6): initializing freespace
[  400.950845][ T8903] bcachefs (loop6): done initializing freespace
[  400.960952][ T8903] bcachefs (loop6): reading snapshots table
[  400.967080][ T8903] bcachefs (loop6): reading snapshots done
[  400.985725][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  401.013113][ T8903] bcachefs (loop6): done starting filesystem
[  401.199265][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  401.280126][ T5895] usb 2-1: USB disconnect, device number 4
[  401.291826][   T30] audit: type=1326 audit(1750710983.385:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.362051][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  401.568128][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  401.648180][ T8903] syz.6.597 (8903) used greatest stack depth: 15672 bytes left
[  401.805840][   T30] audit: type=1326 audit(1750710983.385:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.805885][   T30] audit: type=1326 audit(1750710983.385:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.805925][   T30] audit: type=1326 audit(1750710983.555:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.805965][   T30] audit: type=1326 audit(1750710983.555:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.806003][   T30] audit: type=1326 audit(1750710983.595:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.806041][   T30] audit: type=1326 audit(1750710983.595:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.806079][   T30] audit: type=1326 audit(1750710983.595:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.806116][   T30] audit: type=1326 audit(1750710983.595:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.6.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f470958e929 code=0x7ffc0000
[  401.866109][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  401.873010][ T7213] bcachefs (loop6): shutting down
[  401.873119][ T7213] bcachefs (loop6): going read-only
[  401.873527][ T7213] bcachefs (loop6): finished waiting for writes to stop
[  402.019306][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  402.042089][ T7213] bcachefs (loop6): flushing journal and stopping allocators, journal seq 4
[  402.492708][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  402.595170][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  402.660411][ T7213] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4
[  402.675170][ T7213] bcachefs (loop6): clean shutdown complete, journal seq 5
[  402.676579][ T7213] bcachefs (loop6): marking filesystem clean
[  402.946530][ T7213] bcachefs (loop6): shutdown complete
[  403.731122][ T8938] tty tty1: ldisc open failed (-12), clearing slot 0
[  404.088129][ T8954] loop1: detected capacity change from 0 to 256
[  404.705884][ T8954] FAT-fs (loop1): Directory bread(block 64) failed
[  404.755104][ T8954] FAT-fs (loop1): Directory bread(block 65) failed
[  404.782165][ T8954] FAT-fs (loop1): Directory bread(block 66) failed
[  404.824218][ T8954] FAT-fs (loop1): Directory bread(block 67) failed
[  404.853883][ T8954] FAT-fs (loop1): Directory bread(block 68) failed
[  404.880118][ T8954] FAT-fs (loop1): Directory bread(block 69) failed
[  404.919922][ T8954] FAT-fs (loop1): Directory bread(block 70) failed
[  404.955090][ T8954] FAT-fs (loop1): Directory bread(block 71) failed
[  404.965274][ T8954] FAT-fs (loop1): Directory bread(block 72) failed
[  404.971817][ T8954] FAT-fs (loop1): Directory bread(block 73) failed
[  405.288124][ T8971] syz_tun: entered allmulticast mode
[  405.847205][ T8971] dvmrp1: entered allmulticast mode
[  405.946897][   T60] net_ratelimit: 21 callbacks suppressed
[  405.946914][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  406.157121][ T8970] syz_tun: left allmulticast mode
[  406.912254][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  407.056028][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  407.161729][ T8990] netlink: 'syz.1.610': attribute type 2 has an invalid length.
[  407.229151][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  407.435675][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  408.612327][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  409.338200][ T9002] loop5: detected capacity change from 0 to 128
[  409.346214][ T9002] adfs: Bad value for 'uid'
[  409.350736][ T9002] adfs: Bad value for 'uid'
[  409.975404][ T9008] loop5: detected capacity change from 0 to 128
[  410.306697][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  410.345369][ T9008] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  410.357822][ T9008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  410.418425][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  411.444967][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  411.595026][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  411.795179][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  412.077609][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  412.520723][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  414.507141][   T13] wlan1: Trigger new scan to find an IBSS to join
[  414.519273][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  415.113594][ T1099] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  415.128386][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  415.285320][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  415.729533][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  418.049228][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  418.272091][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  419.331766][ T3454] wlan1: Trigger new scan to find an IBSS to join
[  419.476440][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  419.736043][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  421.126907][ T9122] siw: device registration error -23
[  421.147211][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  422.844429][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'.
[  422.853708][ T9135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.868235][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  422.926724][ T9133] x_tables: duplicate underflow at hook 1
[  423.902336][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  424.175895][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  424.190844][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  424.233072][   T13] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  424.344644][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  424.892183][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  425.905526][   T10] usb 7-1: Using ep0 maxpacket: 16
[  425.999683][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  426.264984][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  426.681827][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  426.870481][   T10] usb 7-1: device descriptor read/all, error -71
[  427.105486][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  427.359366][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  428.177680][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  428.995873][ T1099] net_ratelimit: 2 callbacks suppressed
[  428.995892][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  429.608883][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  429.765713][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  429.989635][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  430.338945][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  431.212973][   T30] audit: type=1326 audit(1750711013.525:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff815f8e929 code=0x7ffc0000
[  431.551463][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  431.639362][   T30] audit: type=1326 audit(1750711013.525:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff815f8e929 code=0x7ffc0000
[  431.756616][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  431.781608][   T30] audit: type=1326 audit(1750711013.525:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff815f8e929 code=0x7ffc0000
[  431.940437][   T30] audit: type=1326 audit(1750711013.525:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff815f8e929 code=0x7ffc0000
[  432.193278][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  432.205065][   T30] audit: type=1326 audit(1750711013.525:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff815f8e929 code=0x7ffc0000
[  432.345092][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  432.786431][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  432.945095][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  433.057719][ T9221] syz.5.656: attempt to access beyond end of device
[  433.057719][ T9221] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  434.057690][ T3424] net_ratelimit: 4 callbacks suppressed
[  434.057723][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  435.065430][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  435.178072][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  435.295086][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  435.434437][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  436.492821][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  436.894066][   T30] audit: type=1804 audit(1750711018.985:59): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.659" name="/newroot/157/file0" dev="tmpfs" ino=843 res=1 errno=0
[  437.320063][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  437.558233][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  437.608672][ T9250] loop3: detected capacity change from 0 to 1024
[  437.841414][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  438.302191][ T9250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.348331][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  438.437112][ T9259] loop6: detected capacity change from 0 to 1024
[  438.525582][ T9250] netlink: 'syz.3.663': attribute type 4 has an invalid length.
[  439.625779][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  439.823452][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  440.042499][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.075785][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.350748][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  440.374393][   T36] hfsplus: b-tree write err: -5, ino 4
[  440.544564][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.556647][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  440.834896][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  441.612415][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  441.863409][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  442.153940][ T9294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.672'.
[  442.251683][ T9294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.672'.
[  442.280393][ T3454] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  442.485825][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  442.787023][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  443.565917][   T30] audit: type=1800 audit(1750711025.445:60): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.671" name="bus" dev="overlay" ino=863 res=0 errno=0
[  444.665972][   T60] net_ratelimit: 5 callbacks suppressed
[  444.665987][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  444.945296][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  445.226958][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  445.313545][ T9297] loop6: detected capacity change from 0 to 8192
[  445.349255][ T9297] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  445.360831][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  445.978778][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  446.115052][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  446.315141][ T9329] No control pipe specified
[  446.914923][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  447.035196][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  447.049456][ T9329] loop5: detected capacity change from 0 to 2048
[  447.122123][ T9329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.139900][   T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  447.175898][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  447.265272][ T9348] loop6: detected capacity change from 0 to 256
[  448.187094][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  449.217177][ T9358] loop6: detected capacity change from 0 to 1024
[  449.321273][ T3424] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  449.413665][ T3424] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  449.545837][ T3424] EXT4-fs (loop5): This should not happen!! Data will be lost
[  449.545837][ T3424] 
[  449.556158][ T3424] EXT4-fs (loop5): Total free blocks count 0
[  449.562160][ T3424] EXT4-fs (loop5): Free/Dirty block details
[  449.568218][ T3424] EXT4-fs (loop5): free_blocks=4096
[  449.573456][ T3424] EXT4-fs (loop5): dirty_blocks=512
[  449.578899][ T3424] EXT4-fs (loop5): Block reservation details
[  449.585756][ T3424] EXT4-fs (loop5): i_reserved_data_blocks=32
[  449.596041][ T3424] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 494 with error 28
[  449.724480][ T9365] input: syz1 as /devices/virtual/input/input6
[  450.260473][   T13] net_ratelimit: 5 callbacks suppressed
[  450.260486][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  450.401444][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  450.599300][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  450.972847][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  451.668484][ T9385] futex_wake_op: syz.5.689 tries to shift op by -1; fix this program
[  451.685085][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  452.485151][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  452.646331][ T3424] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  452.789117][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  453.425722][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  453.578917][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  453.772184][ T9404] loop1: detected capacity change from 0 to 256
[  453.780259][ T9404] exfat: Unknown parameter ''
[  453.947958][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  454.574087][   T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  454.704980][ T5894] usb 6-1: Using ep0 maxpacket: 8
[  454.786708][ T5894] usb 6-1: config 0 has no interfaces?
[  454.825249][ T5894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  454.831338][ T9421] loop1: detected capacity change from 0 to 1024
[  454.834314][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.834336][ T5894] usb 6-1: Product: syz
[  454.834348][ T5894] usb 6-1: Manufacturer: syz
[  454.834361][ T5894] usb 6-1: SerialNumber: syz
[  455.302339][   T49] net_ratelimit: 6 callbacks suppressed
[  455.302358][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  455.484792][ T9425] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  455.491609][ T9425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  455.500118][ T9425] vhci_hcd vhci_hcd.0: Device attached
[  455.506030][ T9426] vhci_hcd: connection closed
[  455.588386][ T3468] vhci_hcd: stop threads
[  455.663460][ T5894] usb 6-1: config 0 descriptor??
[  455.851198][ T3468] vhci_hcd: release socket
[  455.930071][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  456.096248][ T3468] vhci_hcd: disconnect device
[  456.345805][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  456.458548][ T5894] usb 6-1: can't set config #0, error -71
[  456.497417][ T5894] usb 6-1: USB disconnect, device number 2
[  456.521608][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  456.675907][   T13] hfsplus: b-tree write err: -5, ino 4
[  457.283175][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  457.957224][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  458.252970][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  458.273508][ T9449] loop6: detected capacity change from 0 to 32768
[  459.261602][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  459.770109][ T6200] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  460.296940][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  460.908750][ T7127] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  460.988522][ T9449] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_write_sumit": -EINTR
[  460.988672][ T9449] bcachefs (loop6): shutdown complete
[  461.114932][ T7127] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  461.285433][ T7127] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  461.407263][   T60] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  461.586510][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  461.675219][ T9513] loop3: detected capacity change from 0 to 16
[  462.035661][ T9513] erofs (device loop3): mounted with root inode @ nid 36.
[  462.606564][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  462.782256][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  463.016529][ T9523] loop5: detected capacity change from 0 to 1024
[  463.273988][ T9503] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  463.295971][ T9513] erofs (device loop3): readahead error at folio 26 @ nid 36
[  463.303530][ T9513] erofs (device loop3): readahead error at folio 25 @ nid 36
[  463.312716][ T9513] erofs (device loop3): readahead error at folio 24 @ nid 36
[  463.320148][ T9513] erofs (device loop3): readahead error at folio 23 @ nid 36
[  463.327576][ T9513] erofs (device loop3): readahead error at folio 22 @ nid 36
[  463.335051][ T9513] erofs (device loop3): readahead error at folio 21 @ nid 36
[  463.342442][ T9513] erofs (device loop3): readahead error at folio 20 @ nid 36
[  463.349955][ T9513] erofs (device loop3): readahead error at folio 18 @ nid 36
[  463.357409][ T9513] erofs (device loop3): readahead error at folio 16 @ nid 36
[  463.366234][ T9513] erofs (device loop3): readahead error at folio 12 @ nid 36
[  463.373783][ T9513] syz.3.709: attempt to access beyond end of device
[  463.373783][ T9513] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16
[  463.387483][ T9513] syz.3.709: attempt to access beyond end of device
[  463.387483][ T9513] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  463.401364][ T9513] syz.3.709: attempt to access beyond end of device
[  463.401364][ T9513] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16
[  463.415785][ T9513] syz.3.709: attempt to access beyond end of device
[  463.415785][ T9513] loop3: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  464.584392][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  464.698361][   T36] hfsplus: b-tree write err: -5, ino 4
[  464.728934][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  464.876896][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.717'.
[  465.330508][ T9541] dummy0: entered promiscuous mode
[  465.337842][ T9541] macvtap1: entered promiscuous mode
[  465.343706][ T9541] macvtap1: entered allmulticast mode
[  465.517880][ T9541] dummy0: entered allmulticast mode
[  465.859473][ T9545] dummy0: left allmulticast mode
[  465.888000][ T9545] dummy0: left promiscuous mode
[  465.955741][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  466.171376][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  466.395168][ T9449] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[  466.535439][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  466.657652][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  466.815140][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  466.936725][ T9563] binder: 9561:9563 ioctl c00c620f 2000000002c0 returned -22
[  468.028572][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  468.416322][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  468.774443][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  469.605660][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  469.795921][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  470.362725][ T9595] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  470.978636][ T9503] net_ratelimit: 5 callbacks suppressed
[  470.978655][ T9503] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  471.000621][ T9591] loop5: detected capacity change from 0 to 1024
[  471.545547][ T9601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.732'.
[  471.555044][ T9601] unsupported nlmsg_type 40
[  472.090256][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  472.225087][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  472.731687][ T9503] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  472.855659][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  472.970236][ T9607] loop3: detected capacity change from 0 to 4096
[  473.021880][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  473.042617][ T9607] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  473.090632][ T9607] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  473.187751][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  473.231211][ T9614] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  473.241666][ T7282] udevd[7282]: incorrect nilfs2 checksum on /dev/loop3
[  473.363719][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  473.705931][ T9503] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  474.915160][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  477.121339][ T1155] net_ratelimit: 6 callbacks suppressed
[  477.121352][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  477.255585][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  477.386883][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  478.076752][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  478.238891][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  478.440540][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  478.669053][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  478.806096][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  479.466116][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  479.655682][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  480.607543][ T9503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  481.275929][   T56] IPVS: starting estimator thread 0...
[  481.506717][ T9676] IPVS: using max 27 ests per chain, 64800 per kthread
[  481.758432][ T9680] loop3: detected capacity change from 0 to 128
[  482.156023][ T3513] net_ratelimit: 11 callbacks suppressed
[  482.156060][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  482.693304][ T9687] loop1: detected capacity change from 0 to 512
[  482.784658][ T9687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  482.801097][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  482.875656][ T9687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  482.937218][ T9687] System zones: 1-12
[  482.945596][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  483.098928][ T9687] EXT4-fs (loop1): 1 truncate cleaned up
[  483.221589][ T9701] Invalid ELF header magic: != ELF
[  483.841676][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  484.189709][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  484.209843][ T9687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.248635][ T9705] loop3: detected capacity change from 0 to 128
[  484.270180][ T9705] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  484.430866][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  485.301468][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  485.516861][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  486.337626][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  486.360206][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.470811][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  486.521740][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  487.785095][   T36] net_ratelimit: 4 callbacks suppressed
[  487.785114][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  488.035101][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  488.209094][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  488.628090][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  488.747410][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  488.964014][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  488.967858][ T9730] loop3: detected capacity change from 0 to 4096
[  489.000014][ T9730] ntfs3: Unknown parameter 'rd'
[  489.228773][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.767'.
[  489.262466][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.767'.
[  489.948628][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  490.412159][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  490.585649][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  490.705675][ T9750] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  490.712222][ T9750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  490.825845][ T9750] vhci_hcd vhci_hcd.0: Device attached
[  491.098680][ T9751] vhci_hcd: connection closed
[  491.119558][ T9758] netlink: 132 bytes leftover after parsing attributes in process `syz.5.772'.
[  491.188466][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  491.200748][ T1155] vhci_hcd: stop threads
[  491.289215][ T1155] vhci_hcd: release socket
[  491.293958][ T1155] vhci_hcd: disconnect device
[  492.280252][ T9769] loop3: detected capacity change from 0 to 512
[  492.288660][ T9769] EXT4-fs: Ignoring removed i_version option
[  492.931261][ T9770] could not allocate digest TFM handle sha384-avx2
[  493.260158][   T49] net_ratelimit: 8 callbacks suppressed
[  493.260177][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  493.274711][ T9769] EXT4-fs: Ignoring removed mblk_io_submit option
[  493.761562][ T9769] ext4: Unknown parameter 'seclabel'
[  493.939954][ T9503] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  494.675835][ T9774] loop6: detected capacity change from 0 to 1024
[  494.749972][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  494.940788][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  495.798292][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  496.062269][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  496.847435][ T9795] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  497.081163][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  497.384998][  T927] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  497.394069][    C0] raw-gadget.0 gadget.6: ignoring, device is not running
[  497.420169][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  497.534974][  T927] usb 7-1: device descriptor read/64, error -32
[  497.565864][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  497.739337][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  497.854354][ T3513] hfsplus: b-tree write err: -5, ino 4
[  498.409735][ T9823] overlayfs: failed to resolve './file0': -2
[  500.158540][ T9839] overlayfs: failed to clone upperpath
[  500.448135][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  500.616577][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  500.643448][ T9852] loop5: detected capacity change from 0 to 4096
[  500.827856][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  500.935717][ T9861] xt_CT: You must specify a L4 protocol and not use inversions on it
[  501.441578][ T9862] loop1: detected capacity change from 0 to 128
[  501.494803][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.502323][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.557452][ T9862] EXT4-fs (loop1): Test dummy encryption mode enabled
[  501.795422][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  502.645964][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  502.927074][ T9862] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  502.983833][ T9862] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  503.004922][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  503.186081][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  503.308519][ T9886] overlayfs: failed to clone upperpath
[  503.497782][ T9888] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  503.743208][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  504.543723][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  504.855135][ T9890] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  504.861664][ T9890] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  504.869236][ T9890] vhci_hcd vhci_hcd.0: Device attached
[  504.881154][ T9892] vhci_hcd: connection closed
[  504.893672][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  504.949027][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  504.979838][ T9493] vhci_hcd: stop threads
[  505.130304][ T9493] vhci_hcd: release socket
[  505.159019][ T9493] vhci_hcd: disconnect device
[  505.195091][  T927] vhci_hcd: vhci_device speed not set
[  505.755515][ T9495] net_ratelimit: 1 callbacks suppressed
[  505.755532][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  505.933682][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  506.750153][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  507.183682][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  507.285145][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  507.525630][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  508.009715][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  508.960393][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  509.256259][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  509.422508][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  509.723089][ T9926] vlan2: entered allmulticast mode
[  509.723115][ T9926] bond0: entered allmulticast mode
[  509.723122][ T9926] bond_slave_0: entered allmulticast mode
[  509.723131][ T9926] bond_slave_1: entered allmulticast mode
[  510.825800][ T3468] net_ratelimit: 7 callbacks suppressed
[  510.825817][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  510.995145][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  511.172210][ T9922] loop5: detected capacity change from 0 to 32768
[  511.307650][ T9947] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  511.314283][ T9947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  511.322351][ T9947] vhci_hcd vhci_hcd.0: Device attached
[  511.456460][ T9956] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  511.469942][ T9956] Error validating options; rc = [-22]
[  512.574125][ T9949] vhci_hcd: connection closed
[  512.576519][ T9922] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop5": -EINTR
[  512.596963][ T3468] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  512.626397][   T36] vhci_hcd: stop threads
[  512.638631][   T36] vhci_hcd: release socket
[  512.643095][   T36] vhci_hcd: disconnect device
[  512.727432][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  512.895042][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  513.227691][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  513.958939][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  514.160045][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  514.831758][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  514.955893][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  515.217335][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  516.243538][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  516.413212][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  516.555335][ T9989] Invalid option length (1044984) for dns_resolver key
[  516.590278][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  516.798486][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  517.401878][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  517.508885][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  517.748612][T10001] loop6: detected capacity change from 0 to 32768
[  517.808647][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  518.025912][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  518.336593][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  518.642685][T10001] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  518.642712][T10001]   allowing incompatible features above 0.0: (unknown version)
[  518.642723][T10001]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  518.687518][T10001] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  518.695946][T10001] bcachefs (loop6): initializing new filesystem
[  518.738761][T10001] bcachefs (loop6): going read-write
[  518.824982][T10001] bcachefs (loop6): marking superblocks
[  518.837893][T10001] bcachefs (loop6): initializing freespace
[  518.837899][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  518.854606][T10001] bcachefs (loop6): done initializing freespace
[  518.863941][T10001] bcachefs (loop6): reading snapshots table
[  518.869928][T10001] bcachefs (loop6): reading snapshots done
[  518.964134][T10001] bcachefs (loop6): done starting filesystem
[  519.845468][   T30] audit: type=1800 audit(1750973501.943:61): pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.822" name="file1" dev="loop6" ino=4098 res=0 errno=0
[  520.138236][ T9493] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  520.534638][ T7213] bcachefs (loop6): shutting down
[  520.548011][ T7213] bcachefs (loop6): going read-only
[  520.553476][ T7213] bcachefs (loop6): finished waiting for writes to stop
[  520.947217][ T7213] bcachefs (loop6): flushing journal and stopping allocators, journal seq 5
[  521.832167][ T9495] net_ratelimit: 8 callbacks suppressed
[  521.832186][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  521.968591][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  521.998182][ T7213] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 6
[  522.053599][ T7213] bcachefs (loop6): clean shutdown complete, journal seq 7
[  522.084609][ T7213] bcachefs (loop6): marking filesystem clean
[  522.115336][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  522.289347][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  523.104914][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  523.956576][ T7213] bcachefs (loop6): shutdown complete
[  523.969797][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  524.272389][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  524.623105][T10067] loop1: detected capacity change from 0 to 40427
[  524.898998][T10067] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  524.906865][T10067] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  525.144286][T10067] F2FS-fs (loop1): invalid crc value
[  525.247129][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  525.295766][T10067] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  525.302828][T10067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  525.427195][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  526.251658][T10087] xt_connbytes: Forcing CT accounting to be enabled
[  526.259078][T10087] --map-set only usable from mangle table
[  526.648665][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  526.872972][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  527.399148][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  527.515220][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  527.706851][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  528.230514][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  528.471303][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  528.726366][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  528.836734][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  529.086090][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  529.766443][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  530.943913][T10124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  530.950456][T10124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  530.958573][T10124] vhci_hcd vhci_hcd.0: Device attached
[  531.449737][T10125] vhci_hcd: connection closed
[  531.551842][   T36] vhci_hcd: stop threads
[  531.625140][  T927] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  531.669788][   T36] vhci_hcd: release socket
[  531.697411][   T36] vhci_hcd: disconnect device
[  531.895516][ T9493] net_ratelimit: 8 callbacks suppressed
[  531.895542][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  532.992075][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  533.328392][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  535.247994][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  535.379885][ T3513] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  536.240136][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  536.394938][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  536.517460][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  536.984432][  T927] vhci_hcd: vhci_device speed not set
[  538.431172][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  538.495608][ T9444] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  538.545866][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  538.655014][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  538.673552][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  538.685612][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  538.694890][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  538.829442][ T9444] usb 4-1: Using ep0 maxpacket: 16
[  538.845396][ T9444] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.862654][ T9444] usb 4-1: config 0 has no interfaces?
[  538.870023][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  538.882769][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  538.898526][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  539.112234][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  539.418782][ T9444] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  539.433386][ T9444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.449827][ T9444] usb 4-1: config 0 descriptor??
[  539.589624][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  539.644709][ T9444] usb 4-1: can't set config #0, error -71
[  539.681317][ T9444] usb 4-1: USB disconnect, device number 4
[  539.695783][T10176] lo speed is unknown, defaulting to 1000
[  539.726458][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  540.921098][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  541.015946][ T5154] Bluetooth: hci0: command tx timeout
[  543.805152][ T5154] Bluetooth: hci0: command tx timeout
[  544.509323][T10217] loop1: detected capacity change from 0 to 16
[  544.523677][T10217] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  544.537445][T10217] cramfs: bad root offset 8388684
[  544.765091][ T3468] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  545.158433][T10226] xt_nat: multiple ranges no longer supported
[  545.969332][ T5834] Bluetooth: hci0: command tx timeout
[  546.274251][ T9507] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  546.326238][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  548.244691][ T5834] Bluetooth: hci0: command tx timeout
[  548.262372][T10245] 9pnet: Found fid 0 not clunked
[  548.591485][ T9507] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  549.092199][ T3513] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.196378][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  549.221376][T10176] chnl_net:caif_netlink_parms(): no params data found
[  549.463260][T10262] loop3: detected capacity change from 0 to 64
[  549.478152][T10262] hfs: unable to locate alternate MDB
[  549.483682][T10262] hfs: continuing without an alternate MDB
[  550.282953][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.872'.
[  550.333443][ T3513] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.484986][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  551.531989][T10268] bridge_slave_0: left allmulticast mode
[  551.827485][T10268] bridge_slave_0: left promiscuous mode
[  552.317987][T10268] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.469616][T10288] loop1: detected capacity change from 0 to 512
[  552.575877][T10288] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  552.585485][T10288] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  552.777581][T10288] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  552.788899][T10288] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  552.797456][T10288] System zones: 0-2, 18-18, 34-35
[  552.826122][T10288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  553.028008][T10268] bridge_slave_1: left allmulticast mode
[  553.053220][T10291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[  553.091172][T10268] bridge_slave_1: left promiscuous mode
[  553.151315][T10268] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.518748][T10268] bond0: (slave bond_slave_0): Releasing backup interface
[  553.859584][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.026388][T10268] bond0: (slave bond_slave_1): Releasing backup interface
[  554.104653][T10268] team0: Port device team_slave_0 removed
[  554.134717][ T1040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  554.222646][T10268] team0: Port device team_slave_1 removed
[  554.260558][T10303] Invalid ELF header type: 3 != 1
[  554.326029][T10268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.476135][T10268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.404057][T10307] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  555.483511][T10268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.546070][T10268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  556.408620][T10279] bridge0: port 1(vlan2) entered blocking state
[  556.485116][T10279] bridge0: port 1(vlan2) entered disabled state
[  556.492330][T10279] vlan2: entered allmulticast mode
[  556.497682][T10279] bond0: entered allmulticast mode
[  558.059463][ T3513] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.805459][ T3513] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.861951][T10176] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.415060][T10176] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.436161][T10176] bridge_slave_0: entered allmulticast mode
[  561.453836][T10176] bridge_slave_0: entered promiscuous mode
[  562.143132][T10176] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.150908][T10176] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.158184][T10176] bridge_slave_1: entered allmulticast mode
[  562.175975][T10176] bridge_slave_1: entered promiscuous mode
[  562.286556][ T1040] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  563.465504][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.471851][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  564.049497][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.073094][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.697717][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  565.748670][T10176] team0: Port device team_slave_0 added
[  566.423473][T10176] team0: Port device team_slave_1 added
[  567.116457][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.123821][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.109622][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.242606][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.326182][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.425419][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.912857][T10415] loop3: detected capacity change from 0 to 1024
[  570.012188][T10418] overlayfs: failed to clone upperpath
[  571.076571][T10176] hsr_slave_0: entered promiscuous mode
[  571.574177][T10176] hsr_slave_1: entered promiscuous mode
[  571.580325][T10439] netlink: 108 bytes leftover after parsing attributes in process `syz.5.912'.
[  571.597971][   T12] hfsplus: b-tree write err: -5, ino 4
[  571.605176][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  571.634135][ T3513] bridge_slave_1: left allmulticast mode
[  571.654143][ T3513] bridge_slave_1: left promiscuous mode
[  571.674104][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.696294][ T3513] bridge_slave_0: left allmulticast mode
[  571.710512][ T3513] bridge_slave_0: left promiscuous mode
[  571.718915][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.186174][T10452] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  573.116191][T10450] input: syz1 as /devices/virtual/input/input7
[  578.108092][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.118510][ T3513] bond_slave_0: left allmulticast mode
[  578.128109][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  578.137570][ T3513] bond_slave_1: left allmulticast mode
[  578.144190][ T3513] bond0 (unregistering): Released all slaves
[  578.160687][ T3513] bond1 (unregistering): Released all slaves
[  578.176269][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  579.239565][T10510] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  580.266811][ T9503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  581.684626][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  581.928410][T10523] loop3: detected capacity change from 0 to 2048
[  581.958413][ T9493] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  582.186831][T10523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  582.737344][ T5902] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  583.103693][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.173920][ T5902] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  583.252455][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  583.266291][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.702755][T10544] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  583.720436][T10544] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  583.733892][T10544] EXT4-fs (loop3): This should not happen!! Data will be lost
[  583.733892][T10544] 
[  583.744144][T10544] EXT4-fs (loop3): Total free blocks count 0
[  583.750273][T10544] EXT4-fs (loop3): Free/Dirty block details
[  583.756415][T10544] EXT4-fs (loop3): free_blocks=2415919504
[  583.762235][T10544] EXT4-fs (loop3): dirty_blocks=16
[  583.767671][T10544] EXT4-fs (loop3): Block reservation details
[  583.773797][T10544] EXT4-fs (loop3): i_reserved_data_blocks=1
[  583.802180][ T5902] usb 2-1: config 0 descriptor??
[  583.898309][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  584.030989][ T1155] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  584.307122][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  584.466429][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  585.966537][ T3513] hsr_slave_0: left promiscuous mode
[  586.055178][ T3513] hsr_slave_1: left promiscuous mode
[  586.395856][ T9510] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  586.431322][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.601711][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.628492][ T9444] usb 2-1: USB disconnect, device number 5
[  586.639012][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.655028][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.309877][T10562] capability: warning: `syz.5.937' uses 32-bit capabilities (legacy support in use)
[  587.311575][ T3513] veth1_macvtap: left promiscuous mode
[  587.580395][ T3513] veth0_macvtap: left promiscuous mode
[  587.586240][ T3513] veth1_vlan: left promiscuous mode
[  587.591667][ T3513] veth0_vlan: left promiscuous mode
[  588.862277][T10587] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  590.043695][T10596] loop3: detected capacity change from 0 to 64
[  590.204731][T10596] hfs: get root inode failed
[  599.659077][T10660] loop1: detected capacity change from 0 to 16
[  600.260055][T10660] erofs (device loop1): negative i_size @ nid 36
[  603.738637][ T3513] team0 (unregistering): Port device team_slave_1 removed
[  603.823029][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  603.832634][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  603.841687][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  603.852323][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  604.431875][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  604.488217][ T3513] team0 (unregistering): Port device team_slave_0 removed
[  604.671155][T10674] loop3: detected capacity change from 0 to 1024
[  606.981328][ T5834] Bluetooth: hci2: command tx timeout
[  607.300881][   T49] hfsplus: b-tree write err: -5, ino 4
[  607.944696][T10688] loop3: detected capacity change from 0 to 512
[  608.103757][T10688] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  608.145907][T10688] EXT4-fs (loop3): mount failed
[  609.071336][T10695] loop3: detected capacity change from 0 to 512
[  609.091314][ T5834] Bluetooth: hci2: command tx timeout
[  609.236842][T10695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  609.262604][T10695] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.967: corrupted in-inode xattr: bad e_name length
[  609.278202][T10695] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.967: couldn't read orphan inode 15 (err -117)
[  609.293868][T10695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.602270][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.656826][ T5154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  609.683525][ T5154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  609.702213][ T5154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  609.718580][ T5154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  609.738620][ T5154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  609.944668][ T9444] lo speed is unknown, defaulting to 1000
[  609.959479][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  610.003613][ T9444] syz0: Port: 1 Link DOWN
[  611.228389][ T5834] Bluetooth: hci2: command tx timeout
[  611.524110][T10724] blktrace: Concurrent blktraces are not allowed on loop2
[  612.126161][ T5834] Bluetooth: hci6: command tx timeout
[  612.685968][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  613.346561][ T5834] Bluetooth: hci2: command tx timeout
[  613.362971][ T1040] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  614.325410][ T5834] Bluetooth: hci6: command tx timeout
[  616.374951][ T5154] Bluetooth: hci6: command tx timeout
[  617.410262][   T36] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  618.469050][ T5154] Bluetooth: hci6: command tx timeout
[  618.705777][ T5902] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  618.935289][ T5902] usb 2-1: Using ep0 maxpacket: 32
[  618.953558][ T5902] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[  618.972296][ T5902] usb 2-1: config 0 has no interface number 0
[  618.995580][ T5902] usb 2-1: config 0 interface 106 has no altsetting 0
[  619.016232][ T5902] usb 2-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d
[  619.026185][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.035226][ T5902] usb 2-1: Product: syz
[  619.044868][ T5902] usb 2-1: Manufacturer: syz
[  619.049496][ T5902] usb 2-1: SerialNumber: syz
[  619.056760][ T9510] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  619.067924][ T5902] usb 2-1: config 0 descriptor??
[  619.086829][ T5902] cdc_phonet 2-1:0.106: probe with driver cdc_phonet failed with error -22
[  619.164309][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  619.164584][T10701] chnl_net:caif_netlink_parms(): no params data found
[  619.661447][   T30] audit: type=1800 audit(1750973601.973:62): pid=10769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.980" name="nullb0" dev="tmpfs" ino=766 res=0 errno=0
[  620.037100][T10774] netlink: 'syz.3.982': attribute type 10 has an invalid length.
[  620.099961][ T3513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.352576][  T927] usb 2-1: USB disconnect, device number 6
[  620.962988][T10774] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  620.982411][T10667] chnl_net:caif_netlink_parms(): no params data found
[  621.210257][ T3513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.996808][T10797] loop3: detected capacity change from 0 to 40427
[  622.023637][T10797] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  622.032726][T10797] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  622.046679][T10797] F2FS-fs (loop3): invalid crc value
[  622.228070][T10797] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  622.236178][T10797] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  623.248595][ T9510] wlan1: Trigger new scan to find an IBSS to join
[  623.373379][ T3513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.406386][   T49] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  623.414464][   T30] audit: type=1800 audit(1750973605.713:63): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.989" name="nullb0" dev="tmpfs" ino=766 res=0 errno=0
[  623.461135][T10701] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.479017][T10701] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.487896][T10701] bridge_slave_0: entered allmulticast mode
[  623.497121][T10701] bridge_slave_0: entered promiscuous mode
[  623.507752][T10701] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.519330][T10701] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.537218][T10701] bridge_slave_1: entered allmulticast mode
[  623.734121][T10701] bridge_slave_1: entered promiscuous mode
[  624.300203][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  624.306897][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  624.374342][ T3513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.915075][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  625.981360][T10701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.039262][T10701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.094952][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  626.255275][ T5902] usb 2-1: Using ep0 maxpacket: 16
[  626.272996][T10701] team0: Port device team_slave_0 added
[  626.293333][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  626.306865][T10667] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.318499][ T5902] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  626.328712][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.345593][ T5902] usb 2-1: config 0 descriptor??
[  626.350960][T10667] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.386896][T10667] bridge_slave_0: entered allmulticast mode
[  626.433905][T10667] bridge_slave_0: entered promiscuous mode
[  626.455689][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  626.467963][T10701] team0: Port device team_slave_1 added
[  626.507937][T10667] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.532034][T10667] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.555287][T10667] bridge_slave_1: entered allmulticast mode
[  626.579908][T10667] bridge_slave_1: entered promiscuous mode
[  626.606734][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  627.187222][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'.
[  627.291353][ T5902] usbhid 2-1:0.0: can't add hid device: -71
[  627.305627][ T9490] wlan1: Trigger new scan to find an IBSS to join
[  627.313395][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  627.455299][ T5902] usb 2-1: USB disconnect, device number 7
[  628.505713][T10859] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.997'.
[  630.337550][ T9510] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  630.370637][T10701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  630.408104][T10701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  630.501819][T10701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  630.572224][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.588745][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.617853][T10872] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1001'.
[  630.737449][ T9495] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  630.755947][T10701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  630.762918][T10701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  630.854537][T10877] loop3: detected capacity change from 0 to 512
[  630.870798][T10701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  630.875749][T10877] EXT4-fs: Ignoring removed mblk_io_submit option
[  631.462293][T10877] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  631.519820][T10877] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  631.680767][T10877] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  631.696727][T10877] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102]
[  631.705838][T10877] System zones: 0-2, 18-18, 34-34
[  631.721074][T10880] loop1: detected capacity change from 0 to 2044
[  631.733550][T10877] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1003: iget: bad i_size value: 360287970189639680
[  631.881610][T10877] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1003: couldn't read orphan inode 15 (err -117)
[  632.069626][T10877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  633.119000][T10667] team0: Port device team_slave_0 added
[  633.263961][T10667] team0: Port device team_slave_1 added
[  633.335947][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.983269][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1007'.
[  634.147159][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.174136][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.334155][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.405855][ T3513] bridge_slave_1: left allmulticast mode
[  634.411526][ T3513] bridge_slave_1: left promiscuous mode
[  634.420758][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.431316][ T3513] bridge_slave_0: left allmulticast mode
[  634.731650][ T3513] bridge_slave_0: left promiscuous mode
[  634.885640][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.136530][ T3513] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  635.155627][ T3513] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  635.165879][ T3513] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 4e:e7:42:f8:4f:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  635.665477][T10926] /dev/nullb0: Can't lookup blockdev
[  638.049476][T10939] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  638.794565][T10946] sctp: [Deprecated]: syz.5.1017 (pid 10946) Use of int in max_burst socket option deprecated.
[  638.794565][T10946] Use struct sctp_assoc_value instead
[  642.446696][ T3513] team0: Port device bond0 removed
[  642.616813][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  642.935420][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  642.957036][ T3513] bond0 (unregistering): Released all slaves
[  642.999269][T10966] loop3: detected capacity change from 0 to 512
[  643.025153][T10966] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  643.075335][T10966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  643.083474][T10966] System zones: 1-12
[  643.124030][T10966] EXT4-fs (loop3): 1 truncate cleaned up
[  643.145866][T10966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.113068][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.323985][ T3513] bond1 (unregistering): (slave veth3): Releasing backup interface
[  644.433157][ T3513] bond1 (unregistering): Released all slaves
[  644.653101][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.694838][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.728657][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.803450][T10701] hsr_slave_0: entered promiscuous mode
[  644.816007][T10701] hsr_slave_1: entered promiscuous mode
[  644.822735][T10701] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  644.834738][T10701] Cannot create hsr debugfs directory
[  645.736609][ T3513] : left promiscuous mode
[  645.810294][T10984] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  649.135409][ T9503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  649.292543][T11013] loop1: detected capacity change from 0 to 512
[  649.294512][T11011] loop3: detected capacity change from 0 to 1024
[  650.336338][T10667] hsr_slave_0: entered promiscuous mode
[  650.342972][T10667] hsr_slave_1: entered promiscuous mode
[  650.508726][T10667] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  650.572382][T11013] EXT4-fs (loop1): 1 orphan inode deleted
[  650.580902][T10667] Cannot create hsr debugfs directory
[  650.600346][ T9490] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  650.662855][T11013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.692193][ T9490] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1
[  650.773607][T11013] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.872581][T11025] netlink: 'syz.5.1035': attribute type 1 has an invalid length.
[  650.884677][T11025] netlink: 'syz.5.1035': attribute type 4 has an invalid length.
[  651.040798][T11025] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1035'.
[  651.088617][ T3513] hsr_slave_0: left promiscuous mode
[  651.763340][ T3513] hsr_slave_1: left promiscuous mode
[  651.766640][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.780222][   T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  651.780959][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  651.797066][ T9507] hfsplus: b-tree write err: -5, ino 4
[  651.815810][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  651.816473][   T49] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  651.838808][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  651.876769][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  651.964660][T11031] loop3: detected capacity change from 0 to 16
[  651.976098][ T3513] veth1_macvtap: left promiscuous mode
[  651.981685][ T3513] veth0_macvtap: left promiscuous mode
[  652.008795][ T3513] veth1_vlan: left promiscuous mode
[  652.014185][ T3513] veth0_vlan: left promiscuous mode
[  652.030484][T11031] erofs (device loop3): mounted with root inode @ nid 36.
[  652.057926][T11033] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  652.708801][T11039] erofs (device loop3): readahead error at folio 2 @ nid 89
[  652.719378][T11039] erofs (device loop3): readahead error at folio 1 @ nid 89
[  652.726886][T11039] erofs (device loop3): readahead error at folio 0 @ nid 89
[  652.735229][T11039] syz.3.1037: attempt to access beyond end of device
[  652.735229][T11039] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  652.750371][T11039] erofs (device loop3): read error -117 @ 0 of nid 89
[  653.084909][   T30] audit: type=1800 audit(1750973635.073:64): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1037" name="file2" dev="loop3" ino=89 res=0 errno=0
[  653.790678][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'.
[  656.295262][T11071] loop3: detected capacity change from 0 to 512
[  656.390217][T11071] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  656.397785][T11071] UDF-fs: Scanning with blocksize 512 failed
[  656.411894][T11071] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  656.419514][T11071] UDF-fs: Scanning with blocksize 1024 failed
[  656.430113][T11071] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  656.438277][T11071] UDF-fs: Scanning with blocksize 2048 failed
[  656.470857][T11071] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  656.535716][T11071] UDF-fs: error (device loop3): udf_read_inode: (ino 28) failed !bh
[  656.543905][T11071] UDF-fs: Scanning with blocksize 4096 failed
[  657.532311][T11080] loop1: detected capacity change from 0 to 1764
[  659.891493][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  659.901059][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  659.918834][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  659.930260][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  659.939894][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  660.513585][ T9490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  660.706090][ T3513] team0 (unregistering): Port device team_slave_1 removed
[  660.802031][ T3513] team0 (unregistering): Port device team_slave_0 removed
[  662.059023][ T5154] Bluetooth: hci0: command tx timeout
[  663.365158][T11130] hub 2-0:1.0: USB hub found
[  663.464434][T11130] hub 2-0:1.0: 1 port detected
[  664.135195][ T5154] Bluetooth: hci0: command tx timeout
[  664.846217][T11139] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  665.473920][T11143] loop3: detected capacity change from 0 to 40427
[  665.498522][T11143] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  665.506355][T11143] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  665.528153][T11143] F2FS-fs (loop3): invalid crc value
[  665.581419][T11143] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  665.588794][T11143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  665.902327][T11150] syz.3.1063: attempt to access beyond end of device
[  665.902327][T11150] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  666.215016][ T5154] Bluetooth: hci0: command tx timeout
[  666.602632][ T5842] syz-executor: attempt to access beyond end of device
[  666.602632][ T5842] loop3: rw=2051, sector=77824, nr_sectors = 520 limit=40427
[  666.626281][ T5842] F2FS-fs (loop3): Issue discard(9728, 9728, 65) failed, ret: -5
[  666.778172][T11110] hsr0: entered promiscuous mode
[  666.819383][T11110] hsr0: left promiscuous mode
[  668.297412][ T5154] Bluetooth: hci0: command tx timeout
[  670.299120][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  670.309962][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  670.319822][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  670.377974][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  670.385869][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  670.502053][T11097] chnl_net:caif_netlink_parms(): no params data found
[  672.485086][ T5834] Bluetooth: hci2: command tx timeout
[  672.547549][T11097] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.558058][T11097] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.642336][T11097] bridge_slave_0: entered allmulticast mode
[  672.656792][T11097] bridge_slave_0: entered promiscuous mode
[  673.202335][T11097] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.209624][T11097] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.217297][T11097] bridge_slave_1: entered allmulticast mode
[  673.389919][T11097] bridge_slave_1: entered promiscuous mode
[  673.496920][T11213] loop3: detected capacity change from 0 to 512
[  673.524663][T11213] ext4: Unknown parameter 'hash'
[  673.592186][T11213] loop9: detected capacity change from 0 to 8
[  673.633442][T11213] Dev loop9: unable to read RDB block 8
[  673.645088][T11213]  loop9: unable to read partition table
[  673.650945][T11213] loop9: partition table beyond EOD, truncated
[  673.700733][T11213] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  674.312737][T11097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  674.394184][T11097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  674.535367][ T5834] Bluetooth: hci2: command tx timeout
[  676.782231][ T5154] Bluetooth: hci2: command tx timeout
[  677.112390][T11097] team0: Port device team_slave_0 added
[  677.595086][ T5834] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  677.609864][ T5834] Bluetooth: hci3: Injecting HCI hardware error event
[  677.620784][ T5834] Bluetooth: hci3: hardware error 0x00
[  677.780828][T11097] team0: Port device team_slave_1 added
[  678.944983][ T5154] Bluetooth: hci2: command tx timeout
[  679.735162][ T5834] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  679.865767][T11097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  679.872742][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.918521][T11097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.059229][T11097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.066271][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  680.095444][T11097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  681.307575][ T9510] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  682.332309][   T30] audit: type=1804 audit(1885191392.598:65): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1093" name="/newroot/250/file0" dev="tmpfs" ino=1343 res=1 errno=0
[  682.381889][T11097] hsr_slave_0: entered promiscuous mode
[  682.421244][T11097] hsr_slave_1: entered promiscuous mode
[  682.433959][T11097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  682.443589][T11097] Cannot create hsr debugfs directory
[  682.705823][T11176] chnl_net:caif_netlink_parms(): no params data found
[  684.160341][T11333] netlink: 'syz.3.1097': attribute type 7 has an invalid length.
[  684.752712][T11342] loop1: detected capacity change from 0 to 1024
[  684.790077][T11342] EXT4-fs (loop1): filesystem is read-only
[  684.835407][T11342] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  684.846335][T11342] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869)
[  684.856203][T11342] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  684.875508][T11342] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.1101: inode #1: comm syz.1.1101: iget: illegal inode #
[  684.889794][T11342] EXT4-fs (loop1): no journal found
[  684.904985][T11342] EXT4-fs (loop1): can't get journal size
[  684.986223][   T30] audit: type=1326 audit(1885191395.278:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.5.1100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeab58e929 code=0x0
[  685.050946][T11348] xt_CT: You must specify a L4 protocol and not use inversions on it
[  685.474397][T11342] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz.1.1101: iget: bad extra_isize 65535 (inode size 1024)
[  685.492713][T11342] EXT4-fs (loop1): get root inode failed
[  685.512056][T11342] EXT4-fs (loop1): mount failed
[  685.570500][T11333] : entered promiscuous mode
[  685.739381][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  685.746396][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  686.160993][T11342] loop1: detected capacity change from 0 to 2048
[  686.269279][T11342] EXT4-fs: inline encryption not supported
[  686.339277][T11342] EXT4-fs: Ignoring removed mblk_io_submit option
[  686.417523][T11342] ext4: Unknown parameter 'audit'
[  688.051464][T11366] loop3: detected capacity change from 0 to 1024
[  688.516170][ T9495] hfsplus: b-tree write err: -5, ino 4
[  689.789110][T11380] binder: 11375:11380 ioctl c0306201 0 returned -14
[  689.837028][T11176] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.870408][T11176] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.920159][T11176] bridge_slave_0: entered allmulticast mode
[  689.971248][T11176] bridge_slave_0: entered promiscuous mode
[  690.067817][T11176] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.084149][T11176] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.105212][T11176] bridge_slave_1: entered allmulticast mode
[  690.145378][T11176] bridge_slave_1: entered promiscuous mode
[  690.767515][T11176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  690.816641][T11176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.274595][T11176] team0: Port device team_slave_0 added
[  691.301822][T11176] team0: Port device team_slave_1 added
[  691.549706][T11176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  691.979979][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  692.208193][T11176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  692.221295][T11176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  692.240227][ T9495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  692.254978][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.186588][T11419] input: syz1 as /devices/virtual/input/input8
[  693.332130][T11176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.850352][T11431] loop3: detected capacity change from 0 to 256
[  694.882674][T11431] msdos: Unknown parameter '0xffffffffffffffff'
[  695.232548][T11441] trusted_key: syz.5.1116 sent an empty control message without MSG_MORE.
[  695.918228][ T3513] bridge_slave_1: left allmulticast mode
[  695.923910][ T3513] bridge_slave_1: left promiscuous mode
[  696.005709][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.070761][ T3513] bridge_slave_0: left allmulticast mode
[  696.077967][ T3513] bridge_slave_0: left promiscuous mode
[  696.083704][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.748385][ T3513] bridge_slave_1: left allmulticast mode
[  696.748410][ T3513] bridge_slave_1: left promiscuous mode
[  696.748621][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.761514][ T3513] bridge_slave_0: left allmulticast mode
[  696.761531][ T3513] bridge_slave_0: left promiscuous mode
[  696.761647][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.971868][ T3513] bridge_slave_1: left allmulticast mode
[  696.982995][T11456] syz.5.1121 (11456): attempted to duplicate a private mapping with mremap.  This is not supported.
[  697.018984][ T3513] bridge_slave_1: left promiscuous mode
[  697.024760][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.267937][ T5895] kernel read not supported for file /vga_arbiter (pid: 5895 comm: kworker/0:4)
[  697.312941][ T3513] bridge_slave_0: left allmulticast mode
[  697.322888][ T3513] bridge_slave_0: left promiscuous mode
[  697.338126][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.033920][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.090892][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.117059][ T3513] bond0 (unregistering): Released all slaves
[  698.284419][T11468] loop3: detected capacity change from 0 to 1024
[  698.578812][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.604650][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.617933][ T3513] bond0 (unregistering): Released all slaves
[  698.883607][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.928668][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.942048][ T3513] bond0 (unregistering): Released all slaves
[  699.034519][T11475] overlayfs: failed to clone upperpath
[  699.473535][T11176] hsr_slave_0: entered promiscuous mode
[  699.480489][T11176] hsr_slave_1: entered promiscuous mode
[  699.488929][T11176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  699.497405][T11176] Cannot create hsr debugfs directory
[  699.957870][T11489] loop1: detected capacity change from 0 to 2048
[  700.308703][T11073] Alternate GPT is invalid, using primary GPT.
[  700.396415][ T3513] hsr_slave_0: left promiscuous mode
[  700.417565][T11073]  loop1: p1 p2 p3
[  700.488890][ T3513] hsr_slave_1: left promiscuous mode
[  700.498588][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.523536][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.560932][T11489] Alternate GPT is invalid, using primary GPT.
[  700.575354][T11489]  loop1: p1 p2 p3
[  700.590745][ T3513] hsr_slave_0: left promiscuous mode
[  700.609321][ T3513] hsr_slave_1: left promiscuous mode
[  700.637780][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.648298][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.664579][ T3513] hsr_slave_0: left promiscuous mode
[  700.708839][ T3513] hsr_slave_1: left promiscuous mode
[  700.724654][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.742789][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.991103][ T3513] team0 (unregistering): Port device team_slave_1 removed
[  701.029096][ T3513] team0 (unregistering): Port device team_slave_0 removed
[  702.399275][ T3513] team0 (unregistering): Port device team_slave_1 removed
[  702.440607][ T3513] team0 (unregistering): Port device team_slave_0 removed
[  702.862617][ T3513] team0 (unregistering): Port device team_slave_1 removed
[  702.901248][ T3513] team0 (unregistering): Port device team_slave_0 removed
[  703.081369][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1126'.
[  704.368820][T11519] xt_CT: You must specify a L4 protocol and not use inversions on it
[  706.632538][T11529] kthread_run failed with err -4
[  706.765361][T11097] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  706.923191][T11542] loop1: detected capacity change from 0 to 2048
[  707.135428][T11550] xt_TCPMSS: Only works on TCP SYN packets
[  708.130839][T11542] NILFS (loop1): invalid segment: Inconsistency found
[  708.172101][T11542] NILFS (loop1): trying rollback from an earlier position
[  708.201609][T11097] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  708.233700][T11097] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  708.252257][T11542] NILFS (loop1): recovery complete
[  708.286205][T11556] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  708.366930][T11097] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  708.865545][T11575] overlayfs: missing 'lowerdir'
[  710.705852][T11585] Bluetooth: MGMT ver 1.23
[  711.346294][T11097] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.401546][T11097] 8021q: adding VLAN 0 to HW filter on device team0
[  711.917922][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.925145][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  712.018624][T11605] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  713.643908][T11176] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  713.822400][T11176] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  713.863155][T11176] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  713.962217][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.969469][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.144922][T11176] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  714.755683][ T9503] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  714.803044][ T9503] ------------[ cut here ]------------
[  714.828534][ T9503] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1229:5
[  714.936892][ T9503] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')
[  714.950462][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: kworker/u8:19 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) 
[  714.950477][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  714.950484][ T9503] Workqueue: events_unbound cfg80211_wiphy_work
[  714.950509][ T9503] Call Trace:
[  714.950514][ T9503]  <TASK>
[  714.950518][ T9503]  dump_stack_lvl+0x189/0x250
[  714.950537][ T9503]  ? __pfx_dump_stack_lvl+0x10/0x10
[  714.950550][ T9503]  ? __pfx__printk+0x10/0x10
[  714.950567][ T9503]  ubsan_epilogue+0xa/0x40
[  714.950577][ T9503]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  714.950592][ T9503]  ieee80211_request_ibss_scan+0x600/0x8b0
[  714.950612][ T9503]  ieee80211_ibss_work+0xd85/0x1060
[  714.950623][ T9503]  ? lockdep_hardirqs_on+0x9c/0x150
[  714.950635][ T9503]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  714.950646][ T9503]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  714.950654][ T9503]  ? kcov_remote_stop+0x17e/0x6d0
[  714.950665][ T9503]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  714.950678][ T9503]  ? skb_dequeue+0x10e/0x150
[  714.950689][ T9503]  ? ieee80211_iface_work+0xcd4/0xfe0
[  714.950704][ T9503]  ? ieee80211_iface_work+0xf39/0xfe0
[  714.950720][ T9503]  cfg80211_wiphy_work+0x2dc/0x460
[  714.950733][ T9503]  ? process_scheduled_works+0x9ef/0x17b0
[  714.950747][ T9503]  process_scheduled_works+0xade/0x17b0
[  714.950774][ T9503]  ? __pfx_process_scheduled_works+0x10/0x10
[  714.950796][ T9503]  worker_thread+0x8a0/0xda0
[  714.950822][ T9503]  kthread+0x711/0x8a0
[  714.950834][ T9503]  ? __pfx_worker_thread+0x10/0x10
[  714.950845][ T9503]  ? __pfx_kthread+0x10/0x10
[  714.950855][ T9503]  ? _raw_spin_unlock_irq+0x23/0x50
[  714.950865][ T9503]  ? lockdep_hardirqs_on+0x9c/0x150
[  714.950873][ T9503]  ? __pfx_kthread+0x10/0x10
[  714.950885][ T9503]  ret_from_fork+0x3fc/0x770
[  714.950906][ T9503]  ? __pfx_ret_from_fork+0x10/0x10
[  714.950931][ T9503]  ? __switch_to_asm+0x39/0x70
[  714.950944][ T9503]  ? __switch_to_asm+0x33/0x70
[  714.950957][ T9503]  ? __pfx_kthread+0x10/0x10
[  714.950974][ T9503]  ret_from_fork_asm+0x1a/0x30
[  714.951002][ T9503]  </TASK>
[  714.951006][ T9503] ---[ end trace ]---
[  715.259683][ T9503] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  715.266925][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: kworker/u8:19 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) 
[  715.278650][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  715.288716][ T9503] Workqueue: events_unbound cfg80211_wiphy_work
[  715.294989][ T9503] Call Trace:
[  715.298271][ T9503]  <TASK>
[  715.301194][ T9503]  dump_stack_lvl+0x99/0x250
[  715.305777][ T9503]  ? __asan_memcpy+0x40/0x70
[  715.310357][ T9503]  ? __pfx_dump_stack_lvl+0x10/0x10
[  715.315547][ T9503]  ? __pfx__printk+0x10/0x10
[  715.320138][ T9503]  panic+0x2db/0x790
[  715.324031][ T9503]  ? __pfx_panic+0x10/0x10
[  715.328435][ T9503]  ? _printk+0xcf/0x120
[  715.332584][ T9503]  ? __pfx__printk+0x10/0x10
[  715.337162][ T9503]  check_panic_on_warn+0x89/0xb0
[  715.342094][ T9503]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  715.347804][ T9503]  ieee80211_request_ibss_scan+0x600/0x8b0
[  715.353612][ T9503]  ieee80211_ibss_work+0xd85/0x1060
[  715.358794][ T9503]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.363978][ T9503]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  715.369854][ T9503]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  715.376272][ T9503]  ? kcov_remote_stop+0x17e/0x6d0
[  715.381294][ T9503]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  715.386922][ T9503]  ? skb_dequeue+0x10e/0x150
[  715.391497][ T9503]  ? ieee80211_iface_work+0xcd4/0xfe0
[  715.396856][ T9503]  ? ieee80211_iface_work+0xf39/0xfe0
[  715.402224][ T9503]  cfg80211_wiphy_work+0x2dc/0x460
[  715.407333][ T9503]  ? process_scheduled_works+0x9ef/0x17b0
[  715.413044][ T9503]  process_scheduled_works+0xade/0x17b0
[  715.418603][ T9503]  ? __pfx_process_scheduled_works+0x10/0x10
[  715.424589][ T9503]  worker_thread+0x8a0/0xda0
[  715.429186][ T9503]  kthread+0x711/0x8a0
[  715.433248][ T9503]  ? __pfx_worker_thread+0x10/0x10
[  715.438354][ T9503]  ? __pfx_kthread+0x10/0x10
[  715.442932][ T9503]  ? _raw_spin_unlock_irq+0x23/0x50
[  715.448116][ T9503]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.453310][ T9503]  ? __pfx_kthread+0x10/0x10
[  715.457977][ T9503]  ret_from_fork+0x3fc/0x770
[  715.462646][ T9503]  ? __pfx_ret_from_fork+0x10/0x10
[  715.467747][ T9503]  ? __switch_to_asm+0x39/0x70
[  715.472495][ T9503]  ? __switch_to_asm+0x33/0x70
[  715.477245][ T9503]  ? __pfx_kthread+0x10/0x10
[  715.481822][ T9503]  ret_from_fork_asm+0x1a/0x30
[  715.486583][ T9503]  </TASK>
[  715.489855][ T9503] Kernel Offset: disabled
[  715.494223][ T9503] Rebooting in 86400 seconds..