last executing test programs:

17m30.92411936s ago: executing program 32 (id=976):
fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
socket(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r0=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

16m35.823298305s ago: executing program 33 (id=1114):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val}, {@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
fdatasync(r0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001)

16m22.10795347s ago: executing program 34 (id=1154):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semget(0x3, 0x4, 0x104)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)

14m9.630730887s ago: executing program 35 (id=1486):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x279, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x1000004, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x144, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1, 0x2000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, 0x0, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x388, 0x1)

13m56.513413328s ago: executing program 36 (id=1514):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$usbfs(0x0, 0xf, 0x240000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x40)

13m29.869574779s ago: executing program 6 (id=1584):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r2 = socket$key(0xf, 0x3, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0), 0x1, 0x301, &(0x7f0000000400)="$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")
bind$packet(r2, 0x0, 0x0)
close_range(r1, r1, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_emit_ethernet(0x6e, &(0x7f0000000740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}]}}}}}}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)

13m27.588847303s ago: executing program 6 (id=1586):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xa)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff8000}]}, &(0x7f0000000040)=0x10)
shutdown(r1, 0x2)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

13m26.201138796s ago: executing program 6 (id=1588):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c04, &(0x7f0000000040), 0xff, 0x26d, &(0x7f00000004c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x20a9823, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./bus/file0\x00')
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x10, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)

13m23.287617095s ago: executing program 6 (id=1592):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000100)='?', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r2, &(0x7f0000000100)=""/134, 0x86)
r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)

13m22.116916033s ago: executing program 6 (id=1595):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)="31301f31", 0x4)
write(0xffffffffffffffff, &(0x7f0000000600)='1\x00', 0x2)

13m20.362495945s ago: executing program 6 (id=1598):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000700), 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00)='0\n', 0x2)

13m18.280868194s ago: executing program 37 (id=1598):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000700), 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r2, &(0x7f0000000d00)='0\n', 0x2)

13m16.471432387s ago: executing program 7 (id=1608):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0xc, r3, 0x1, 0xe2, 0x6, @random="fac3a30eaa70"}, 0x14)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000180)={{@local, 0x4}, @local, 0x8, 0x80, 0x3, 0x5, 0x9, 0x6, 0x401})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@host, 0x9}, @host, 0x8, 0x9, 0x5, 0x100})
close_range(r0, 0xffffffffffffffff, 0x0)

13m15.648606357s ago: executing program 7 (id=1610):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy_home_node(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x3, 0x0)

13m12.935216661s ago: executing program 7 (id=1615):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
ioprio_set$uid(0x3, 0x0, 0x4007)

13m10.723665193s ago: executing program 7 (id=1617):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEWQI9O6QHLxocipJ6KFjaDogW0D+BQwmNm34pKiIloUJUr+fGzquzv73ux7M6s3FME3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945dzxE2m7pT9Y293WAAAPwoWxrxw/ue3rPwDwOLj0of79DwAAAAAAAAAAAAAAPAQpingyUsxeWE0T1fOu+vnOwI2b4yOjW1c7kKqa+6ry5Vf9xMlTp7/4wvCZXp7vTK/XH9ztbnw6Xhu7dK7x8sz12bn2/Hx7sjE+3bkyM9ne9h52Wn+zo9UBaFx//cbk1avzjZPPn9rw8s2h9wefODx0dvjZY8/0yo6PjI6OrRep95ev3XNDuu40w2N/FHEsUjz33Z+mVkQUsfNjUd9w7h+4A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGW5+LqA080D7cWTNisWx+2eCjZffGZltzrctT7cbF1txCZ6EzM30xdVtb9qcRRZxJEUsRsbLFX8OBKKIWKb59aDVdjoh9vePwhWpi8J3bUexiH7ehbGdjIGKpeATO2R42GEW8Gil+9s6RuJLHmWqs+XzEq2V+P+KtMl+KSOUH43TEe7s+nPOg1KKIvyzP/9nVNFmNB71x5fxXG1+evjrTV7Y3rnzI68NtI8VDuj4c2JQPxh4fm+pRRKsa8VfTvX+zAwAAAAAAAAAAAAAAAMD9diCK+FSkeOXf/6SaVxzVvPRDZ4f/cOhX++eMP32X/ZRln4+IxWJ7c3L354mBF9PFlB7yXOKPsnoU8ad5/t83H3ZjAAAAAAAAAAAAAAAAAAAAPtKK+EmkePHdI2kp+tcU70xfa1xqXZ7qrgrbW/u3t2b62traWiN1s5lzIudizqWcyzlXckaR6+ds5pzIuZhzKedyzpWcsS/Xz9nMOZFzMedSzuWcKzmjluvnbOacyLmYcykvur+cn6/kjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Him+9fXVFCkimhET0c3lwYfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJiK+F6kaPxR89a2WkSk6v+uI+Ufp6O5v8yPR3O4zJeieS5nq8pa85sPof3szEAq4seRYrD+9q0Tns//QPfZrY9BvPWN9WefrnVzX+/FofcHnzh86Ozw6G88fafHaasGHD3fmb5xszE+Mjo61re5lt/9433bhvL7Fven60TE/Btvvt6ammrP3fuD8iOwg+qP0INU+6j09NF+8Jv3a4dR2wvdeTgP7j52/P+DGKDYVeX1/71I8bvv/kfvgt+9/tfjV7rPbl3h44M/W7/+v7h5R9u8/tc218vX//KavtX1/8m+bS/m70YGahH1heuzA4cj6vNvvHmsc711rX2tPX36+PEvDQ9/6dTxgf0R9audqXb3UYqp9vH7crgAAAAAAAAAAAAAAAAAHpxUxO9HitaPV1MjIm5W87WGzg4/e+yZfbGvmm+1Yd72a2OXzjVenrk+O9een29PNsanO1dmJtvbfbt6Nd1rfGR0VzpzVwd2uf0H6i/PzL4x17n2xwtbvn6wfu7y/MJc68rWL8eBKCKa/VuOVg0eHxmtGj3VaU1XVS9uOZn+wxtIRfxnpLhyupE+m7fl+f+bZ/hvmP+/uHlHuzT//2N928r3TKmIDyLF7/zV0/HZqp0H47Zjlsv9XaQ4euYzuVzsL8v12tC9r0B3jmBZ9n8jxT/9fGPZ3nzIJ9fLntj2gX1ElOf/UKT43l98J34rb9t4/4etz//BzTvapfP/VN+2gxvuV7DjrpPP/7FI8dKTb8fn8rZfdv+P3r03juTCt+7PsUvn/xN924by+/72/ek6AAAAAAAAAADAI20gFfH3keKHo7X0Qt62nd//m9y8o136/a9P9m2bvD/rFd31wY4PKgAAAADsEQOpiJ9EimsLb9+aQ71x/nff/M/fW5//OZI2vVr9nO/XqvsG3M+f//Ubyu87sfNuAwAAAAAAAAAAAAAAAAAAwJ6SUhEv5PXUJ6r5/JN3XE99OVK88t/P5XLpcFmutw78UPVn/cLM9LFzU1MzV1oLrctT7cbYbOtKu6z7VKRY/dvP5LpFtb56b7357hrv62uxz0WK0X/ole2uxd5bm/yp9bInyrIfixT/9Y8by34ul/vEetmTZdm/iRRf+8HtZUuH18ueKst+J1L86GuNXtmDZdne/VE/uV72+R/cuiMCAAAAAAAAAAAAAAAAAAAA3LuBVMSfR4r/ub50ay5/Xv9/oO9p5a1v9K33v8nNap3/oWr9/zs9vpf1/6v7Cize6V0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxlKKINyPF7IXVtDxYPu+qn+9M37g5PjK6dbUDqaq5rypfftVPnDx1+osvDJ/p5S+vf799Kl4bu3Su8fLM9dm59vx8e7IxPt25MjPZ3vYedlp/s6PVAWhcf/3G5NWr842Tz5/a8PLNofcHnzg8dHb42WPP9MqOj4yOjvWVqQ3c87vfJt1h+/4o4q8jxXPf/Wn64WBEETs/Fnf57Oy2A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGD+Bc7EgzYrFsftngo2X3xmZbc63LU+3GxdbcQmehMzN9MXVbW/anEUWcSRFLEbEyePvuBqKI1yPFtw+tpn8ZjNjXOw5fuDD2leMn79yOYhf7uA1lOxsDEUvFI3DO9rDBKOKfI8XP3jkS/zoYUYvuV3w+4tUyvx/xVnTPdyo/GKcj3tvic8SjqRZF/F95/s+upncGy/GgN66c/2rjy9NXZ/rK9saVR/768CDt8bGpHkX8qBrxV9O/+XsNAAAAAAAAAAAAAAAAsIcU8euR4sV3j6RqfvCtOcWd6WuNS63LU91pfb25f70502tra2uN1M1mzomcizmXci7nXMkZRa6fs1lmfW1tIj9fzLmUcznnSs7Yl+vnbOacyLmYcynncs6VnFHL9XM2c07kXMy5lHM550rO2CNz9wAAAAAAAAAAAAAAAAAAgMdLUf2X4ltfX01rg931pSeim8vWA33s/SIAAP//YnX2fg==")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51)
write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b)
unlink(&(0x7f0000000180)='./file1\x00')

13m5.824541659s ago: executing program 7 (id=1627):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8004, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0)

13m0.597109143s ago: executing program 7 (id=1633):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

12m59.665981015s ago: executing program 38 (id=1633):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

11m6.401674298s ago: executing program 2 (id=1797):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
rt_sigqueueinfo(r0, 0x6, &(0x7f00000007c0)={0x19, 0x7f1a, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})

11m3.524568446s ago: executing program 2 (id=1810):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
syz_pidfd_open(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})

10m59.748398505s ago: executing program 2 (id=1807):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r4], &(0x7f0000000700), 0x10, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

10m56.452688813s ago: executing program 2 (id=1814):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

10m53.363121627s ago: executing program 2 (id=1822):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r2, &(0x7f0000000000)='7', 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

10m51.453483061s ago: executing program 2 (id=1823):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000})

10m35.652760356s ago: executing program 39 (id=1823):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000})

8m32.880467004s ago: executing program 9 (id=2021):
socket$inet(0x2, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x0, 0x3b4}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = dup(r6)
socket$inet(0xa, 0x801, 0x84)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r7}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x1, 0x3, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x201f70, 0x8c, 0x2, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4e, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0xffff, 0x5, 0x0, 0x0}}, 0x0)

8m31.636712383s ago: executing program 5 (id=2022):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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")
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

8m29.977749912s ago: executing program 5 (id=2025):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588)

8m29.973062412s ago: executing program 9 (id=2035):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

8m29.6615672s ago: executing program 9 (id=2028):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_getoverrun(r2)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
setreuid(0xee01, 0xee01)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

8m28.774551671s ago: executing program 5 (id=2029):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x10001, 0x4)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000004c0)=0xfffffffb, 0x4)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0)

8m26.039673506s ago: executing program 5 (id=2030):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8)
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)

8m25.998913377s ago: executing program 9 (id=2032):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000001080)=<r2=>0x0, &(0x7f0000001040))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000500)=ANY=[], 0x0)
io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

8m22.696070275s ago: executing program 5 (id=2036):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x141a82, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r5, r4, 0x0, 0x4)

8m20.129805226s ago: executing program 5 (id=2039):
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

8m17.441864339s ago: executing program 9 (id=2042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}]}, 0x10)
sendmsg$nl_route(r4, 0x0, 0x0)

8m14.694050904s ago: executing program 9 (id=2043):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$devlink(0x0, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20902, 0x0)

8m4.816110599s ago: executing program 40 (id=2039):
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

7m59.520667474s ago: executing program 41 (id=2043):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$devlink(0x0, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, 0xffffffffffffffff, 0x2000)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20902, 0x0)

2m1.331291272s ago: executing program 4 (id=2622):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x3d, 0x0, {0x6, 0x4, 0x0, 0x400, 0xb, 0xfffffffffffffffd, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x200, 0x0, 0x0, 0x10, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x100)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r5, 0x4020744f, &(0x7f0000000040)=0x80)
write(r5, &(0x7f0000000280)='{*', 0x2)

2m0.901147152s ago: executing program 4 (id=2625):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000005c0)={r6, 0x3, 0x7}, 0x8)

1m58.785252572s ago: executing program 4 (id=2627):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

1m53.404237988s ago: executing program 4 (id=2645):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10)
listen(r3, 0xda8d)
accept$inet(r3, 0x0, 0x0)
inotify_init()
eventfd2(0x4, 0x80000)

1m52.029124451s ago: executing program 4 (id=2647):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd(0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m50.726096532s ago: executing program 4 (id=2652):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r4)
mknod$loop(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x0)

1m35.193588188s ago: executing program 42 (id=2652):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r4)
mknod$loop(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x0)

56.666836136s ago: executing program 0 (id=2716):
r0 = socket$inet6(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback, 0x54}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0xa, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x800, 0x5a, 0x2, 0xfffffffffffffe90, 0x7, 0x3, 0x980, 0x6}, {0x1, 0x3, 0x5, 0x1}, 0x9, 0x6e6bb4, 0x2, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x8, 0x80, 0x5, 0x5}}, 0xe8)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

55.60969309s ago: executing program 0 (id=2718):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

53.91548891s ago: executing program 0 (id=2720):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)

52.512629403s ago: executing program 0 (id=2723):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00$'], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040))
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020)

51.254801523s ago: executing program 0 (id=2727):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(0x0, 0x0)

47.006845993s ago: executing program 0 (id=2739):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15)
ioctl(0xffffffffffffffff, 0x404c4701, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000241)=0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd7, 0x62, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f5", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760", 0x0, 0x8000}, 0x50)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}}, 0x24}}, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
write$FUSE_INIT(r2, 0x0, 0x0)

31.820340811s ago: executing program 43 (id=2739):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15)
ioctl(0xffffffffffffffff, 0x404c4701, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000241)=0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd7, 0x62, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f5", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760", 0x0, 0x8000}, 0x50)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}}, 0x24}}, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
write$FUSE_INIT(r2, 0x0, 0x0)

17.516249708s ago: executing program 8 (id=2762):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

15.529631445s ago: executing program 8 (id=2765):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x61, 0x63, 0x36, 0x35, 0x3, 0x65, 0x36, 0x31, 0x35, 0x61, 0x39, 0x64, 0x62, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x30, 0x30, 0x6, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x64, 0x32, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334471ae332a99aabbccddeeff00112233445566778899aabbccddeeff", 0x29}, 0x48, r0)
add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x33, 0x30, 0x62, 0x31, 0x39, 0xb8b9d56255b9c101, 0x37, 0x36, 0x62, 0x30, 0x64, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000001780)={'fscrypt:', @auto=[0x35, 0x2d, 0x38, 0x30, 0x30, 0x30, 0x37, 0x31, 0x62, 0x30, 0x61, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff1f112233446366778899aabbccddeeff00152228000000000000002233445503000000aa91cc7b90ed5b669ed3362700", 0x31}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x34, 0x64, 0x34, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "0011227b00f73d778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233eeff00", 0x2d}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000004c0)={'fscrypt:', @auto=[0x38, 0x61, 0x30, 0x32, 0x65, 0x65, 0x32, 0x66, 0x32, 0x64, 0x66, 0x39, 0x32, 0x38, 0x62, 0x57]}, &(0x7f0000000100)={0x0, "001182874455669d8899aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)

15.411688908s ago: executing program 1 (id=2766):
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

15.105937505s ago: executing program 8 (id=2767):
socket$tipc(0x1e, 0x1, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2)
r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0)

14.262302155s ago: executing program 1 (id=2768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0)
syz_emit_ethernet(0xd8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)

13.224575719s ago: executing program 8 (id=2769):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)

11.021248781s ago: executing program 1 (id=2770):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xffffffff)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)

10.990284852s ago: executing program 3 (id=2771):
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800)
keyctl$read(0xb, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400120003002c16d39f4eced36e537b22ff900f080001042e37d3cad7a80d0eee08dab5c1000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080)
r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000d00)=' f   127.0.0.1 2\\000\\00 : l\\calhos', 0x22)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)

9.37080632s ago: executing program 3 (id=2772):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r2, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810)
syz_genetlink_get_family_id$batadv(0x0, r0)
getsockname$packet(r0, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0403d11, &(0x7f00000001c0)={0xfffffffd, 0x9})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c000}, 0x4)

8.197429727s ago: executing program 3 (id=2773):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

6.553934606s ago: executing program 3 (id=2774):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0xbbd25b33d864198e, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10)
write(r3, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24)

5.349031485s ago: executing program 1 (id=2775):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresuid(0x0, 0xee00, 0x0)
r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc)
statx(r2, 0x0, 0x800, 0x200, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
keyctl$chown(0x4, r6, r7, r8)

4.191361782s ago: executing program 3 (id=2776):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mknod$loop(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x0)

3.586568496s ago: executing program 1 (id=2777):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
pwritev(r0, &(0x7f0000000880), 0x0, 0x403, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1ff, 0x3ff, 0x7f, 0x20004, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x2}, 0x50)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@remote, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @loopback, @random="4d3f91828c8a", @private2}}}}, &(0x7f00000002c0)={0x1, 0x2, [0xf00, 0x7a0, 0x1e4, 0xf36]})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x40)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)

1.452940116s ago: executing program 1 (id=2778):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r2, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00')
write(0xffffffffffffffff, &(0x7f0000000600), 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0)

1.452639886s ago: executing program 3 (id=2779):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180))
mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe)
r2 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r3})

1.448412877s ago: executing program 8 (id=2786):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000000c0)={0x3, 0x1, 0x4, 0x6, 0x5, 0xfffffffe})
r2 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0xc041)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_misc(r7, &(0x7f0000000000), 0x0)
r8 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r6, 0x0, r8, 0x0, 0xcea5, 0x6)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r11, 0xc048aeca, &(0x7f0000000500)={0x6, 0x0, [{0x269, 0x0, 0x4}, {0x244, 0x0, 0x4}, {0x9f7, 0x0, 0x10002}, {0x385, 0x0, 0x1}, {0x600, 0x0, 0x3}, {0x9de, 0x0, 0x8}]})

0s ago: executing program 8 (id=2780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syslog(0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59})
fcntl$lock(r3, 0x7, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='10', 0x2)

kernel console output (not intermixed with test programs):

v0
[  789.336309][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  789.364330][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  789.485377][T12061] device veth0_vlan entered promiscuous mode
[  789.493529][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  789.503919][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  789.514763][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  789.531360][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  789.555104][T12061] device veth1_vlan entered promiscuous mode
[  789.605752][ T5403] bond3: (slave gretap1): Releasing active interface
[  789.637277][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  789.647440][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  789.703749][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  789.718106][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  789.742985][T12061] device veth0_macvtap entered promiscuous mode
[  789.785227][T12061] device veth1_macvtap entered promiscuous mode
[  789.807540][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  789.818775][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.829029][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  789.850611][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.864118][T12061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  789.874752][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  789.884390][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  789.894721][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  789.905131][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  790.003757][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  790.015100][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  790.026114][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  790.038575][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  790.051821][T12061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  790.063603][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  790.082646][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  790.121253][T12061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.141589][T12061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  790.158227][T12061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  790.167611][T12061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  790.480760][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  790.498666][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  790.506355][ T9417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  790.575715][ T5403] device hsr_slave_0 left promiscuous mode
[  790.587958][ T5403] device hsr_slave_1 left promiscuous mode
[  790.903854][ T5403] bond3 (unregistering): Released all slaves
[  790.919034][ T5403] bond2 (unregistering): Released all slaves
[  790.932436][ T5403] bond1 (unregistering): Released all slaves
[  792.039077][ T5403] bond0 (unregistering): Released all slaves
[  792.172344][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.187167][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.196084][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  792.726952][T12259] using random self ethernet address
[  792.732632][T12259] using random host ethernet address
[  793.919705][ T4322] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  794.412193][ T4322] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  794.481489][ T4322] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  794.701628][ T4322] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  794.731448][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.751846][ T4322] usb 1-1: Product: syz
[  794.756599][ T4322] usb 1-1: Manufacturer: syz
[  794.786931][ T4322] usb 1-1: SerialNumber: syz
[  794.830045][ T4322] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  794.885720][ T4322] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  794.885720][ T4322]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  796.388508][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  797.181591][ T4322] ums-sddr09: probe of 1-1:1.0 failed with error -5
[  797.221227][ T4322] usb 1-1: USB disconnect, device number 3
[  798.546887][T12295] futex_wake_op: syz.0.1881 tries to shift op by 144; fix this program
[  799.105864][T12304] xt_CT: No such helper "pptp"
[  801.316973][ T4322] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  801.988998][ T4322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  802.058960][ T4322] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  802.115590][ T4322] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  802.164047][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.194521][ T4322] usb 1-1: Product: syz
[  802.204572][ T4322] usb 1-1: Manufacturer: syz
[  802.234083][ T4322] usb 1-1: SerialNumber: syz
[  802.256958][ T5707] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  802.471444][T12338] loop9: detected capacity change from 0 to 164
[  802.529919][ T5707] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  802.549214][ T4322] usb 1-1: 0:2 : does not exist
[  802.575270][ T4322] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  802.583027][ T5707] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  802.649636][ T5707] usb 9-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  802.686199][ T4322] usb 1-1: USB disconnect, device number 4
[  802.707053][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.759251][T11561] udevd[11561]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  802.787370][ T5707] usb 9-1: Product: syz
[  802.791635][ T5707] usb 9-1: Manufacturer: syz
[  802.820265][ T5707] usb 9-1: SerialNumber: syz
[  802.898839][ T5707] ums-sddr09 9-1:1.0: USB Mass Storage device detected
[  803.037730][ T5707] ums-sddr09 9-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  803.037730][ T5707]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  803.119575][T12347] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12061] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12347]
[  804.014196][   T26] audit: type=1800 audit(2000000552.890:672): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1897" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  804.052699][ T5707] ums-sddr09: probe of 9-1:1.0 failed with error -5
[  804.073088][ T5707] usb 9-1: USB disconnect, device number 4
[  805.570671][T12369] xt_CT: No such helper "pptp"
[  805.855989][T12376] loop9: detected capacity change from 0 to 128
[  806.127367][ T4322] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  806.546055][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  806.802070][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  806.815481][ T4322] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  806.825018][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.837541][ T4322] usb 1-1: config 0 descriptor??
[  806.846576][ T4322] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  807.951279][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'.
[  807.978107][   T26] audit: type=1800 audit(2000000556.860:673): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1890" name="bus" dev="ramfs" ino=64382 res=0 errno=0
[  808.013875][T12373] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  808.023564][T12376] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  808.033898][T12376] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  808.108428][T12373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  808.585114][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.592724][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  809.013968][T12373] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  809.063167][T12373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  810.485590][T10329] EXT4-fs (loop9): unmounting filesystem.
[  810.696050][T11597] usb 1-1: USB disconnect, device number 5
[  812.701414][ T4322] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  812.767980][T12418] xt_CT: No such helper "pptp"
[  812.910533][ T4322] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  812.951464][ T4322] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  813.023318][ T4322] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  813.090183][ T4322] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  813.140691][ T4322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  813.183886][ T4322] usb 10-1: Product: syz
[  813.211749][ T4322] usb 10-1: Manufacturer: syz
[  813.216512][ T4322] usb 10-1: SerialNumber: syz
[  814.556007][ T4322] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  814.641363][ T4322] usb 10-1: USB disconnect, device number 4
[  814.710169][ T4322] usblp0: removed
[  815.386664][T12448] nftables ruleset with unbound set
[  824.760704][T12525] loop5: detected capacity change from 0 to 512
[  824.857287][T12525] EXT4-fs: Ignoring removed oldalloc option
[  825.120515][T12525] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  825.139654][T12525] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.810100][T12532] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1935'.
[  825.863022][T12532] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1935'.
[  826.967660][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1936'.
[  826.984447][T12061] EXT4-fs (loop5): unmounting filesystem.
[  829.917615][T12551] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  832.520336][T12573] xt_CT: No such helper "pptp"
[  833.806965][ T4362] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  833.997865][ T4362] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  834.047095][ T4362] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.107148][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'.
[  835.490252][ T4362] usb 10-1: Product: syz
[  835.494595][ T4362] usb 10-1: Manufacturer: syz
[  835.538911][ T4362] usb 10-1: SerialNumber: syz
[  835.578208][ T4362] usb 10-1: config 0 descriptor??
[  835.598217][ T4362] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  835.762532][T12597] loop0: detected capacity change from 0 to 256
[  835.807244][ T4362] gspca_stk1135: reg_w 0x2 err -71
[  835.813603][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  835.860972][ T4362] gspca_stk1135: Sensor write failed
[  835.884021][T12597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  835.896369][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  837.997203][ T4362] gspca_stk1135: Sensor write failed
[  838.002604][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  838.037294][T12605] loop9: detected capacity change from 0 to 128
[  838.105850][ T4362] gspca_stk1135: Sensor read failed
[  838.143029][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  838.193936][ T4362] gspca_stk1135: Sensor read failed
[  839.171789][ T4362] gspca_stk1135: Detected sensor type unknown (0x0)
[  839.183003][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  839.230481][ T4362] gspca_stk1135: Sensor read failed
[  839.241408][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  839.447057][ T4362] gspca_stk1135: Sensor read failed
[  839.452673][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  839.467280][ T4362] gspca_stk1135: Sensor write failed
[  839.472649][ T4362] gspca_stk1135: serial bus timeout: status=0x00
[  839.486956][ T4362] gspca_stk1135: Sensor write failed
[  839.492392][ T4362] stk1135: probe of 10-1:0.0 failed with error -71
[  839.572525][ T4362] usb 10-1: USB disconnect, device number 5
[  840.647490][T12623] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800
[  844.930408][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1961'.
[  848.682781][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1955'.
[  849.008404][T12675] syz.9.1966: attempt to access beyond end of device
[  849.008404][T12675] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0
[  850.407919][T12682] loop0: detected capacity change from 0 to 128
[  852.032650][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1973'.
[  854.520309][T12711] device syzkaller0 entered promiscuous mode
[  867.050509][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1986'.
[  870.020621][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.028128][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  873.457104][ T5707] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  874.649254][ T5707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  875.319729][ T5707] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  875.522258][ T5707] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[  875.539172][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.578268][ T5707] usb 6-1: Product: syz
[  875.597489][ T5707] usb 6-1: Manufacturer: syz
[  875.632836][ T5707] usb 6-1: SerialNumber: syz
[  875.714184][ T5707] usb 6-1: NFC: intf ffff888079841000 id ffffffff8d419c00
[  875.877870][ T5707] nfcmrvl 6-1:1.0: NFC: registered with nci successfully
[  875.905350][ T4446] nfcmrvl 6-1:1.0: NFC: send entry, len 4
[  875.956353][ T4446] usb 6-1: NFC: urb ffff8880192e7400 submission failed (90)
[  875.990701][T11507] usb 6-1: USB disconnect, device number 4
[  876.009651][T11507] usb 6-1: NFC: intf ffff888079841000
[  877.101268][T12812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  881.148606][T12859] overlayfs: conflicting lowerdir path
[  886.760540][T12887] loop8: detected capacity change from 0 to 8
[  887.518141][T12887] SQUASHFS error: zlib decompression failed, data probably corrupt
[  887.526992][T12887] SQUASHFS error: Failed to read block 0x9b: -5
[  887.533998][T12887] SQUASHFS error: Unable to read metadata cache entry [99]
[  887.541647][T12887] SQUASHFS error: Unable to read inode 0x127
[  891.729549][T12908] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  891.831105][T12914] loop5: detected capacity change from 0 to 128
[  893.343999][T12930] binder: 12927:12930 ioctl c0306201 200000000080 returned -14
[  893.366058][T12931] loop5: detected capacity change from 0 to 2048
[  893.465511][T12931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  893.980234][T12943] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  893.998421][T12943] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  894.010984][T12943] EXT4-fs (loop5): This should not happen!! Data will be lost
[  894.010984][T12943] 
[  894.020991][T12943] EXT4-fs (loop5): Total free blocks count 0
[  894.027243][T12943] EXT4-fs (loop5): Free/Dirty block details
[  894.033413][T12943] EXT4-fs (loop5): free_blocks=2415919104
[  894.039527][T12943] EXT4-fs (loop5): dirty_blocks=48
[  894.045013][T12943] EXT4-fs (loop5): Block reservation details
[  894.051367][T12943] EXT4-fs (loop5): i_reserved_data_blocks=3
[  894.523576][T12061] EXT4-fs (loop5): unmounting filesystem.
[  898.401681][T12972] futex_wake_op: syz.0.2019 tries to shift op by 144; fix this program
[  907.102814][T13012] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  907.112723][T13012] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  907.121525][T13012] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  907.130391][T13012] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  907.335262][T13012] device vxlan0 entered promiscuous mode
[  907.341757][T13012] team0: Port device vxlan0 added
[  912.397782][T13047] loop8: detected capacity change from 0 to 128
[  914.108313][T13047] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  914.120728][T13047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  914.207343][   T26] audit: type=1800 audit(2000000663.090:674): pid=13045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2034" name="file1" dev="loop8" ino=89 res=0 errno=0
[  920.783984][T13084] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  920.793618][T13084] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  920.802519][T13084] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  920.811836][T13084] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  921.132098][T13084] team0: Port device vxlan0 added
[  921.138839][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  921.151276][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  921.160823][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  921.172715][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  921.193419][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  921.202154][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  921.349169][T13087] wg1 speed is unknown, defaulting to 1000
[  921.462397][T13092] tipc: Started in network mode
[  921.477839][T13092] tipc: Node identity fe70b9daa868, cluster identity 4711
[  921.502234][T13092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  921.517723][T13093] device syzkaller0 entered promiscuous mode
[  922.490290][T13097] tipc: Resetting bearer <eth:syzkaller0>
[  922.521466][T13089] tipc: Resetting bearer <eth:syzkaller0>
[  923.308764][ T4289] Bluetooth: hci4: command 0x0409 tx timeout
[  924.434280][T13089] tipc: Disabling bearer <eth:syzkaller0>
[  924.454260][T11597] tipc: Node number set to 1444461018
[  925.377476][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[  926.080310][T13087] chnl_net:caif_netlink_parms(): no params data found
[  927.467029][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[  929.046944][T13087] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.074536][T13087] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.260189][T13087] device bridge_slave_0 entered promiscuous mode
[  929.423277][T13087] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.452316][T13087] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.529479][T13087] device bridge_slave_1 entered promiscuous mode
[  929.537107][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[  931.291243][T13150] loop8: detected capacity change from 0 to 512
[  931.455377][ T9419] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.467912][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.468021][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  931.502068][T13150] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.2066: bad orphan inode 13
[  932.356880][T13150] ext4_test_bit(bit=12, block=4) = 1
[  932.362262][T13150] is_bad_inode(inode)=0
[  932.391101][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.476988][T13150] NEXT_ORPHAN(inode)=0
[  932.489560][T13150] max_ino=32
[  932.500834][T13150] i_nlink=1
[  932.512249][T13150] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  932.549188][ T9419] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.626160][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.668108][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  932.685275][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  932.696169][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  932.707499][T10195] EXT4-fs (loop8): unmounting filesystem.
[  932.714401][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  932.723905][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  932.731698][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  932.863894][ T9419] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.000815][T13087] team0: Port device team_slave_0 added
[  933.025374][T13087] team0: Port device team_slave_1 added
[  934.288942][ T9419] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.827318][ T4289] Bluetooth: hci0: command 0x0409 tx timeout
[  935.358219][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  935.365237][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.393770][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.410486][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.424083][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.450326][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.471647][T13161] wg1 speed is unknown, defaulting to 1000
[  935.531671][T13087] device hsr_slave_0 entered promiscuous mode
[  935.549669][T13087] device hsr_slave_1 entered promiscuous mode
[  936.897058][ T4289] Bluetooth: hci0: command 0x041b tx timeout
[  937.130893][T13189] loop0: detected capacity change from 0 to 164
[  938.987356][ T4289] Bluetooth: hci0: command 0x040f tx timeout
[  941.057179][ T4289] Bluetooth: hci0: command 0x0419 tx timeout
[  943.385801][T13223] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11207] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
[  944.744618][T13161] chnl_net:caif_netlink_parms(): no params data found
[  950.227244][T13161] bridge0: port 1(bridge_slave_0) entered blocking state
[  950.234415][T13161] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.268182][T13161] device bridge_slave_0 entered promiscuous mode
[  950.414110][T13161] bridge0: port 2(bridge_slave_1) entered blocking state
[  950.434042][T13161] bridge0: port 2(bridge_slave_1) entered disabled state
[  950.452127][T13265] loop8: detected capacity change from 0 to 1024
[  950.466726][T13161] device bridge_slave_1 entered promiscuous mode
[  950.508560][T13161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  950.623971][T13161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  950.644866][T13265] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  950.660693][T13161] team0: Port device team_slave_0 added
[  950.690281][T13087] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  950.860641][T13087] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  950.945048][T13161] team0: Port device team_slave_1 added
[  951.584895][T10195] EXT4-fs (loop8): unmounting filesystem.
[  951.709182][T13087] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  951.773627][T13087] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  951.824739][T13161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  951.838904][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.894355][T13161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  952.868731][T13161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  952.878290][T13161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  952.949210][T13161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  953.346682][T13295] ip_tables: iptables: counters copy to user failed while replacing table
[  954.191197][T13161] device hsr_slave_0 entered promiscuous mode
[  954.212562][T13161] device hsr_slave_1 entered promiscuous mode
[  954.247043][T13161] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  954.254890][T13161] Cannot create hsr debugfs directory
[  954.284443][T13087] 8021q: adding VLAN 0 to HW filter on device bond0
[  954.316180][ T9419] device hsr_slave_0 left promiscuous mode
[  954.334880][ T9419] device hsr_slave_1 left promiscuous mode
[  954.346648][ T9419] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  954.384498][ T9419] batman_adv: batadv0: Removing interface: batadv_slave_0
[  954.419585][ T9419] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  954.437062][ T9419] batman_adv: batadv0: Removing interface: batadv_slave_1
[  954.464461][ T9419] device bridge_slave_1 left promiscuous mode
[  954.487181][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.504776][ T9419] device bridge_slave_0 left promiscuous mode
[  954.535010][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.658698][ T9419] device veth1_macvtap left promiscuous mode
[  954.664819][ T9419] device veth0_macvtap left promiscuous mode
[  954.737185][ T9419] device veth1_vlan left promiscuous mode
[  954.743363][ T9419] device veth0_vlan left promiscuous mode
[  957.735322][T13312] input: syz1 as /devices/virtual/input/input8
[  961.359466][T13317] overlayfs: failed to clone lowerpath
[  962.245369][T13335] loop8: detected capacity change from 0 to 512
[  962.264959][T13335] EXT4-fs (loop8): Test dummy encryption mode enabled
[  962.283187][T13335] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  962.411750][T13335] EXT4-fs (loop8): 1 truncate cleaned up
[  962.442045][T13335] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  963.658656][T10195] EXT4-fs (loop8): unmounting filesystem.
[  964.955503][T13345] loop8: detected capacity change from 0 to 2048
[  964.981911][T13345] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  965.024792][T13345] UDF-fs: warning (device loop8): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  967.175577][   T26] audit: type=1804 audit(2000000716.050:675): pid=13349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2106" name="bus" dev="ramfs" ino=67256 res=1 errno=0
[  967.216635][   T26] audit: type=1804 audit(2000000716.090:676): pid=13349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2106" name="bus" dev="ramfs" ino=67256 res=1 errno=0
[  967.230808][ T9419] team0 (unregistering): Port device team_slave_1 removed
[  967.467105][ T9419] team0 (unregistering): Port device team_slave_0 removed
[  967.650483][ T9419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  967.897327][ T9419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  971.919665][ T9419] bond0 (unregistering): Released all slaves
[  972.975709][T13087] 8021q: adding VLAN 0 to HW filter on device team0
[  973.009319][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  973.025974][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  973.093724][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  973.123711][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  973.156304][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[  973.163543][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  973.199079][T13369] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  973.211000][T13369] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  973.242090][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  973.257940][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  973.266597][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[  973.273794][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  973.289026][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  973.312528][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  973.455996][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  973.486520][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  973.507266][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  973.547739][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  973.579981][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  973.595208][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  973.624626][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  973.639726][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  973.664921][T13087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  973.721941][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  973.750949][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  973.772583][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  973.782338][T13375] netlink: 'syz.8.2112': attribute type 1 has an invalid length.
[  973.801020][T13378] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2112'.
[  973.856900][T13379] netlink: 'syz.0.2113': attribute type 10 has an invalid length.
[  973.873294][T13379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2113'.
[  973.917358][T13379] device dummy0 entered promiscuous mode
[  973.923913][T13379] bridge0: port 3(dummy0) entered blocking state
[  973.971558][T13379] bridge0: port 3(dummy0) entered disabled state
[  973.988992][T13379] bridge0: port 3(dummy0) entered blocking state
[  973.995528][T13379] bridge0: port 3(dummy0) entered forwarding state
[  976.648525][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'.
[  978.362673][T13404] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2119'.
[  979.323388][ T9419] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.923463][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  980.222209][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  981.274310][ T9419] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.471582][ T9419] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.722424][ T9419] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.148896][T13430] virtio-fs: tag </dev/nullb0> not found
[  982.765845][T13161] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  982.883642][T13161] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  982.898114][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  982.909544][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  982.920963][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  982.932619][T13161] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  982.942058][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  982.952393][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  982.960730][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  983.083969][T13161] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  983.150805][T13431] wg1 speed is unknown, defaulting to 1000
[  985.016188][ T4278] Bluetooth: hci1: hcon ffff88807a7f2000 sent 1 < count 1025
[  985.057062][ T4278] Bluetooth: hci5: command 0x0409 tx timeout
[  987.088387][T13457] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  989.126534][ T4278] Bluetooth: hci5: command 0x041b tx timeout
[  989.472008][T13452] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  989.757996][T13468] overlayfs: failed to clone upperpath
[  990.497425][T13473] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[13475] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[13473]
[  991.061837][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  991.077947][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  991.137178][ T4289] Bluetooth: hci5: command 0x040f tx timeout
[  991.157908][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  991.189332][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  991.197555][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  991.205142][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  991.943127][T13477] wg1 speed is unknown, defaulting to 1000
[  992.179262][T13431] chnl_net:caif_netlink_parms(): no params data found
[  992.552320][T13488] loop0: detected capacity change from 0 to 1024
[  992.669012][T13488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  992.948200][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  992.960033][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  993.231892][ T4290] Bluetooth: hci5: command 0x0419 tx timeout
[  993.394798][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[  993.564022][T13431] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.188942][T13431] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.488346][T13431] device bridge_slave_0 entered promiscuous mode
[  994.528882][T11207] EXT4-fs (loop0): unmounting filesystem.
[  994.673145][T13505] loop0: detected capacity change from 0 to 512
[  994.709896][T13505] EXT4-fs (loop0): Test dummy encryption mode enabled
[  994.736577][T13505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  994.797377][T13505] EXT4-fs (loop0): 1 truncate cleaned up
[  994.814571][T13505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  995.457624][ T4278] Bluetooth: hci0: command 0x041b tx timeout
[  995.570190][T13431] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.613262][T13431] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.854631][T13431] device bridge_slave_1 entered promiscuous mode
[  995.984725][T13511] netlink: 'syz.0.2143': attribute type 13 has an invalid length.
[  995.993038][T13511] netlink: 'syz.0.2143': attribute type 27 has an invalid length.
[  997.199456][T11207] EXT4-fs (loop0): unmounting filesystem.
[  997.268097][T13431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  997.347394][T13431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  997.962050][T13531] syz.8.2147 (13531): /proc/13531/oom_adj is deprecated, please use /proc/13531/oom_score_adj instead.
[  999.495089][ T4278] Bluetooth: hci0: command 0x040f tx timeout
[  999.691441][T13431] team0: Port device team_slave_0 added
[  999.744547][T13431] team0: Port device team_slave_1 added
[  999.857778][T13431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  999.904999][T13431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1000.002554][T13431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1000.082281][T13477] chnl_net:caif_netlink_parms(): no params data found
[ 1000.158082][ T9419] device hsr_slave_0 left promiscuous mode
[ 1000.193428][ T9419] device hsr_slave_1 left promiscuous mode
[ 1000.259744][T13544] jffs2: notice: (13544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1000.749784][T13544] jffs2: fork failed for JFFS2 garbage collect thread: 4
[ 1000.886096][ T9419] device veth1_macvtap left promiscuous mode
[ 1000.916681][ T9419] device veth0_macvtap left promiscuous mode
[ 1000.940105][ T9419] device veth1_vlan left promiscuous mode
[ 1000.965656][ T9419] device veth0_vlan left promiscuous mode
[ 1001.539503][ T4278] Bluetooth: hci0: command 0x0419 tx timeout
[ 1004.521188][ T9419] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1004.553414][ T9419] bond1 (unregistering): Released all slaves
[ 1007.530262][ T9419] bond0 (unregistering): Released all slaves
[ 1007.657854][T13431] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1007.665199][T13431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1007.691691][T13431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1007.712296][T13571] netlink: 'syz.4.2155': attribute type 13 has an invalid length.
[ 1007.720215][T13571] netlink: 'syz.4.2155': attribute type 27 has an invalid length.
[ 1007.800964][T13431] device hsr_slave_0 entered promiscuous mode
[ 1007.818447][T13431] device hsr_slave_1 entered promiscuous mode
[ 1007.837208][T13431] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1007.844822][T13431] Cannot create hsr debugfs directory
[ 1008.741447][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x05
[ 1010.028154][T13477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.050659][T13477] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.061794][T13477] device bridge_slave_0 entered promiscuous mode
[ 1010.106173][T13477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.121749][T13477] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.203379][T13477] device bridge_slave_1 entered promiscuous mode
[ 1010.408715][T13477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.459810][T13477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.918947][   T26] audit: type=1800 audit(2000000762.790:677): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2163" name="bus" dev="ramfs" ino=68542 res=0 errno=0
[ 1013.934897][T13477] team0: Port device team_slave_0 added
[ 1014.496352][T13643] loop0: detected capacity change from 0 to 2048
[ 1014.521461][T13643] UDF-fs: bad mount option "0xffffffffffffffff" or missing value
[ 1015.204904][T13477] team0: Port device team_slave_1 added
[ 1015.689373][T13477] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1015.743186][T13477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1015.897455][T13477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1016.644296][T13477] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1016.654029][T13477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1016.681830][T13477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1016.932890][T13670] netlink: 'syz.4.2172': attribute type 10 has an invalid length.
[ 1016.932915][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2172'.
[ 1016.935385][T13670] bridge0: port 1(dummy0) entered blocking state
[ 1016.935458][T13670] bridge0: port 1(dummy0) entered disabled state
[ 1017.094735][T13477] device hsr_slave_0 entered promiscuous mode
[ 1017.095602][T13477] device hsr_slave_1 entered promiscuous mode
[ 1017.096172][T13477] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1017.096293][T13477] Cannot create hsr debugfs directory
[ 1017.533105][ T4290] Bluetooth: hci3: unknown advertising packet type: 0x05
[ 1020.497670][T13431] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1020.720857][T13431] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1020.953033][T13431] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1021.024679][T13431] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1021.350662][T13709] jffs2: notice: (13709) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1021.693392][T13711] loop0: detected capacity change from 0 to 256
[ 1021.773163][T13709] jffs2: fork failed for JFFS2 garbage collect thread: 4
[ 1023.198346][T13431] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1024.251520][T13431] 8021q: adding VLAN 0 to HW filter on device team0
[ 1026.464443][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1026.486072][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1026.578523][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1026.619984][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1026.657107][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.664267][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1026.697225][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1026.724574][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1026.786061][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.793313][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1028.452558][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1028.759255][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1028.925560][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1029.004756][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1029.054371][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1031.832441][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1031.863718][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1031.883469][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1032.089784][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1032.119320][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1032.997870][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1033.014911][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1033.162982][T13431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1033.299296][T13768] loop8: detected capacity change from 0 to 512
[ 1033.460341][T13768] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1033.480168][T13768] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1033.876092][T13768] EXT4-fs (loop8): 1 truncate cleaned up
[ 1033.953236][T13768] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1035.734996][T13781] netlink: 'syz.8.2192': attribute type 13 has an invalid length.
[ 1035.750576][T13781] netlink: 'syz.8.2192': attribute type 27 has an invalid length.
[ 1037.241333][T10195] EXT4-fs (loop8): unmounting filesystem.
[ 1037.327184][T13802] tipc: Started in network mode
[ 1037.339642][T13802] tipc: Node identity ac1414aa, cluster identity 4711
[ 1037.377358][T13802] lo: MTU too low for tipc bearer
[ 1037.382503][T13802] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1037.508854][T13812] loop8: detected capacity change from 0 to 256
[ 1039.181178][T13823] loop8: detected capacity change from 0 to 128
[ 1039.406140][T13477] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1039.899023][T13825] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[10195] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[13825]
[ 1040.212525][T13477] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1040.238502][T13477] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1040.292385][T13477] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1040.342682][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1040.360850][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1040.404785][T13431] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1041.277550][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1041.289452][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1043.314571][T13477] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1043.458776][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1043.475620][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1043.523965][T13477] 8021q: adding VLAN 0 to HW filter on device team0
[ 1043.593109][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1043.622969][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1043.666982][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.674175][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1043.737250][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1043.798635][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1043.837389][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1043.894872][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1043.902086][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1043.940974][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1043.991796][ T9419] device hsr_slave_0 left promiscuous mode
[ 1044.062650][ T9419] device hsr_slave_1 left promiscuous mode
[ 1044.129704][ T9419] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1044.585883][ T9419] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1044.669106][ T9419] device bridge_slave_1 left promiscuous mode
[ 1044.726383][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.767351][ T9419] device bridge_slave_0 left promiscuous mode
[ 1044.773677][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1044.876064][ T9419] device hsr_slave_0 left promiscuous mode
[ 1044.952053][ T9419] device hsr_slave_1 left promiscuous mode
[ 1044.967499][ T9419] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1044.997843][ T9419] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1045.006031][ T9419] device bridge_slave_1 left promiscuous mode
[ 1045.029950][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1045.165037][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1045.180192][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1045.196413][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1045.207492][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1045.488287][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1045.517631][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1045.987568][ T9419] device bridge_slave_0 left promiscuous mode
[ 1046.005938][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.697373][ T4290] Bluetooth: hci4: command 0x0409 tx timeout
[ 1048.191446][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1048.202834][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1048.213468][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1048.221674][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1048.234684][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1048.244518][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1048.590754][ T9419] team0 (unregistering): Port device team_slave_1 removed
[ 1048.802799][ T9419] team0 (unregistering): Port device team_slave_0 removed
[ 1048.954783][ T9419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1049.011884][ T9419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1049.192799][ T9419] bond0 (unregistering): Released all slaves
[ 1049.778306][ T4290] Bluetooth: hci4: command 0x041b tx timeout
[ 1049.976989][ T9419] team0 (unregistering): Port device team_slave_1 removed
[ 1050.256955][ T9419] team0 (unregistering): Port device team_slave_0 removed
[ 1050.322249][ T9419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1050.350142][ T4278] Bluetooth: hci5: command 0x0409 tx timeout
[ 1050.405432][ T9419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1050.775539][ T9419] bond0 (unregistering): Released all slaves
[ 1050.874712][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1050.973189][T13901] netlink: 'syz.4.2212': attribute type 1 has an invalid length.
[ 1051.014921][T13887] device syzkaller0 entered promiscuous mode
[ 1051.098951][T13868] wg1 speed is unknown, defaulting to 1000
[ 1052.164250][ T4278] Bluetooth: hci4: command 0x040f tx timeout
[ 1052.385118][T13914] wg1 speed is unknown, defaulting to 1000
[ 1052.436965][ T4278] Bluetooth: hci5: command 0x041b tx timeout
[ 1052.861101][T13948] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1054.177330][ T4290] Bluetooth: hci4: command 0x0419 tx timeout
[ 1054.385928][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.392578][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.499259][ T4290] Bluetooth: hci5: command 0x040f tx timeout
[ 1056.454304][T13868] chnl_net:caif_netlink_parms(): no params data found
[ 1056.736862][ T4290] Bluetooth: hci5: command 0x0419 tx timeout
[ 1057.976300][T13868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1057.986901][T13868] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1057.995159][T13868] device bridge_slave_0 entered promiscuous mode
[ 1058.006196][T13868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.038033][T13868] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1058.067227][T13868] device bridge_slave_1 entered promiscuous mode
[ 1058.221439][T13868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1058.290165][T13868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1058.553245][T14005] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1059.356035][T14006] overlayfs: missing 'lowerdir'
[ 1059.545293][T14007] CacheFiles: Failed to register: -95
[ 1060.551856][T13914] chnl_net:caif_netlink_parms(): no params data found
[ 1061.788493][T13868] team0: Port device team_slave_0 added
[ 1062.568736][T13868] team0: Port device team_slave_1 added
[ 1062.677607][T13868] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1062.694892][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1063.185254][T13868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1063.266238][T13868] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1063.287370][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.288484][T13868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1064.627989][T13914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1064.635135][T13914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.260028][T13914] device bridge_slave_0 entered promiscuous mode
[ 1065.327765][T13914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1065.395993][T13914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.489744][T13914] device bridge_slave_1 entered promiscuous mode
[ 1065.628978][T13914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1067.311659][T13868] device hsr_slave_0 entered promiscuous mode
[ 1067.342170][T13868] device hsr_slave_1 entered promiscuous mode
[ 1067.489179][T13914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1068.834286][T13914] team0: Port device team_slave_0 added
[ 1069.724160][T13914] team0: Port device team_slave_1 added
[ 1069.747611][T14092] loop8: detected capacity change from 0 to 512
[ 1069.790684][T14092] EXT4-fs: Ignoring removed orlov option
[ 1069.836515][T14092] ext4: Bad value for 'data'
[ 1070.125561][T13914] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1070.140877][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1070.801812][T13914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1071.257833][T13914] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1071.282528][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1071.896475][T13914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.062018][T14098] wg1 speed is unknown, defaulting to 1000
[ 1072.098385][T13914] device hsr_slave_0 entered promiscuous mode
[ 1072.151351][T13914] device hsr_slave_1 entered promiscuous mode
[ 1072.172833][T13914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1072.196926][T13914] Cannot create hsr debugfs directory
[ 1073.252015][T14106] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1077.193178][T13868] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1077.400051][T13868] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1077.601887][T13868] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1077.778197][T13868] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1079.314585][T13868] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1079.525917][T13914] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1080.142132][T13868] 8021q: adding VLAN 0 to HW filter on device team0
[ 1080.150398][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1080.163311][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1080.175533][T13914] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1080.260040][T13914] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1080.295188][T13914] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1080.566429][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1080.580420][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1081.257685][T14198] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1081.422234][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1081.429443][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1081.710299][ T5403] device hsr_slave_0 left promiscuous mode
[ 1081.737441][ T5403] device hsr_slave_1 left promiscuous mode
[ 1081.754799][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1081.782912][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1081.811991][ T5403] device bridge_slave_1 left promiscuous mode
[ 1081.847996][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.889079][ T5403] device bridge_slave_0 left promiscuous mode
[ 1081.895360][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1082.029620][ T5403] device hsr_slave_0 left promiscuous mode
[ 1082.049176][ T5403] device hsr_slave_1 left promiscuous mode
[ 1082.059399][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1082.598112][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1082.715036][ T5403] device bridge_slave_1 left promiscuous mode
[ 1082.737695][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.806027][ T5403] device bridge_slave_0 left promiscuous mode
[ 1082.857081][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.165325][T14223] futex_wake_op: syz.4.2268 tries to shift op by 144; fix this program
[ 1083.729056][ T5403] team0 (unregistering): Port device team_slave_1 removed
[ 1083.799246][ T5403] team0 (unregistering): Port device team_slave_0 removed
[ 1083.849958][ T5403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1083.939681][ T5403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1084.640018][ T5403] bond0 (unregistering): Released all slaves
[ 1086.732186][ T5403] team0 (unregistering): Port device team_slave_1 removed
[ 1086.792182][ T5403] team0 (unregistering): Port device team_slave_0 removed
[ 1086.850654][ T5403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1086.908446][ T5403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1087.286980][ T5403] bond0 (unregistering): Released all slaves
[ 1087.427476][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1087.435608][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1087.445318][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1087.455346][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.462520][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1087.472624][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1087.483444][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1087.492710][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1087.522007][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1087.535894][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1087.551092][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1087.560921][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1087.606620][T14220] netlink: 'syz.8.2265': attribute type 2 has an invalid length.
[ 1087.687944][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1087.746600][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1087.827211][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1087.839044][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1087.879354][T13868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1089.034175][T13914] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1089.159126][T14268] netlink: 'syz.0.2279': attribute type 1 has an invalid length.
[ 1089.185243][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1089.214360][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1089.250028][T13914] 8021q: adding VLAN 0 to HW filter on device team0
[ 1089.274964][T14268] device lo entered promiscuous mode
[ 1089.314896][T14268] device tunl0 entered promiscuous mode
[ 1089.463653][T14268] device gre0 entered promiscuous mode
[ 1090.125459][T14268] device gretap0 entered promiscuous mode
[ 1090.267593][T14268] device erspan0 entered promiscuous mode
[ 1090.314532][T14268] device ip_vti0 entered promiscuous mode
[ 1090.349898][T14268] device ip6_vti0 entered promiscuous mode
[ 1090.401228][T14268] device sit0 entered promiscuous mode
[ 1090.597594][T14268] device ip6tnl0 entered promiscuous mode
[ 1090.692462][T14268] device ip6gre0 entered promiscuous mode
[ 1090.825839][T14268] device ip6gretap0 entered promiscuous mode
[ 1090.885892][T14268] bridge0: port 3(dummy0) entered disabled state
[ 1090.892485][T14268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.899814][T14268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.923296][T14268] device bridge0 entered promiscuous mode
[ 1091.000860][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1091.037937][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1091.099473][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.106646][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1091.217597][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1091.255682][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1091.307949][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.315154][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1092.427236][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1092.468943][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1092.496895][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1092.508897][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1093.514086][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1093.581708][T14298] wg1 speed is unknown, defaulting to 1000
[ 1093.828163][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1093.837971][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1093.891725][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1093.929468][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1093.947695][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1093.977707][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1093.985282][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1094.052799][T13868] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1094.091895][T13914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1094.137069][T13914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1094.189558][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1094.198964][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1094.308286][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1094.336219][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1094.469681][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1094.518194][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1094.606652][T13868] device veth0_vlan entered promiscuous mode
[ 1094.627606][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1094.639077][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1094.897817][T13868] device veth1_vlan entered promiscuous mode
[ 1095.183759][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1095.257327][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1095.347197][T13868] device veth0_macvtap entered promiscuous mode
[ 1095.399944][T13868] device veth1_macvtap entered promiscuous mode
[ 1095.647836][T13868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.726989][T13868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.824923][T13868] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1095.879182][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1095.918484][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1095.973834][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1096.044193][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1096.121031][T13868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.170958][T13868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.183851][T13868] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1096.211809][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1096.224550][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1096.265316][T13868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.284883][T13868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.306743][T13868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.316021][T13868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.339180][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1096.366301][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1097.244414][T13914] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1097.376513][T13914] device veth0_vlan entered promiscuous mode
[ 1097.390307][T13914] device veth1_vlan entered promiscuous mode
[ 1097.555677][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1097.577962][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1097.644031][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1097.668999][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1097.696404][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1097.808107][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1097.816888][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1097.825026][ T9415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1099.317346][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1099.384461][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1099.449894][T13914] device veth0_macvtap entered promiscuous mode
[ 1099.469923][T14345] netlink: 'syz.4.2291': attribute type 10 has an invalid length.
[ 1099.496857][T14345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2291'.
[ 1099.589767][T13914] device veth1_macvtap entered promiscuous mode
[ 1099.869276][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1100.852031][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1100.866899][T13914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.900580][T13914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.932766][T13914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.955769][T13914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.990792][T14361] fuse: Bad value for 'fd'
[ 1101.017593][T13914] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1101.027392][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1101.036145][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1101.128047][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1101.266347][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1101.367649][T14366] syz.4.2295 sent an empty control message without MSG_MORE.
[ 1102.367994][T13914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.415485][T13914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.466874][T13914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.532958][T13914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.685096][T13914] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1102.793139][T14378] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1102.890560][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1102.970022][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1103.528029][T13914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.556938][T13914] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.565703][T13914] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.635100][T13914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1106.086537][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1106.115084][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1106.175251][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1106.208592][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1106.220307][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1106.230701][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1106.240532][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1106.249882][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1106.258086][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1106.383972][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1106.403948][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1106.452039][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1106.477118][T14420] wg1 speed is unknown, defaulting to 1000
[ 1107.244781][ T5403] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.283044][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1107.297226][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1107.307931][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1107.320637][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1107.334765][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1107.342890][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1107.543403][ T5403] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.624656][T14429] wg1 speed is unknown, defaulting to 1000
[ 1107.739978][ T5403] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.758573][T14420] chnl_net:caif_netlink_parms(): no params data found
[ 1107.879250][ T5403] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1108.094602][T14420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.116136][T14420] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1108.124657][T14420] device bridge_slave_0 entered promiscuous mode
[ 1108.169361][T14429] chnl_net:caif_netlink_parms(): no params data found
[ 1108.189759][T14420] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.207091][T14420] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.215486][T14420] device bridge_slave_1 entered promiscuous mode
[ 1108.263331][T14420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1108.329492][T14420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1108.338940][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[ 1108.386412][T14420] team0: Port device team_slave_0 added
[ 1108.429529][T14420] team0: Port device team_slave_1 added
[ 1108.454565][T14420] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1108.461896][T14420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.488528][T14420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1108.529829][T14420] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1108.540318][T14420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.567853][T14420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1108.722514][T14429] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.742857][T14429] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1108.762501][T14429] device bridge_slave_0 entered promiscuous mode
[ 1108.827243][T14429] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.834402][T14429] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.858117][T14429] device bridge_slave_1 entered promiscuous mode
[ 1108.870352][T14420] device hsr_slave_0 entered promiscuous mode
[ 1108.883654][T14420] device hsr_slave_1 entered promiscuous mode
[ 1108.894770][T14420] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1108.913147][T14420] Cannot create hsr debugfs directory
[ 1109.032070][T14429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1109.102695][T14429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1109.202200][T14429] team0: Port device team_slave_0 added
[ 1109.250163][T14429] team0: Port device team_slave_1 added
[ 1109.326282][T14429] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1109.333822][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1109.363337][T14429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1109.377576][ T4290] Bluetooth: hci4: command 0x0409 tx timeout
[ 1109.444676][T14429] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1109.452912][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1109.491830][T14429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1109.661166][T14429] device hsr_slave_0 entered promiscuous mode
[ 1109.669556][T14429] device hsr_slave_1 entered promiscuous mode
[ 1109.685876][T14429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1109.714375][T14429] Cannot create hsr debugfs directory
[ 1110.211874][T14429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.345668][T14429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.379167][ T5403] device hsr_slave_0 left promiscuous mode
[ 1110.386074][ T5403] device hsr_slave_1 left promiscuous mode
[ 1110.394275][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1110.402591][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1110.411908][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1110.420970][ T4290] Bluetooth: hci0: command 0x041b tx timeout
[ 1110.429415][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1110.447669][ T5403] device bridge_slave_1 left promiscuous mode
[ 1110.453916][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1110.464308][ T5403] device bridge_slave_0 left promiscuous mode
[ 1110.479912][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1110.572567][ T5403] device veth1_macvtap left promiscuous mode
[ 1110.583048][ T5403] device veth0_macvtap left promiscuous mode
[ 1110.595708][ T5403] device veth1_vlan left promiscuous mode
[ 1110.605078][ T5403] device veth0_vlan left promiscuous mode
[ 1111.458581][ T4290] Bluetooth: hci4: command 0x041b tx timeout
[ 1111.742799][ T5403] team0 (unregistering): Port device team_slave_1 removed
[ 1111.813040][ T5403] team0 (unregistering): Port device team_slave_0 removed
[ 1111.870307][ T5403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1111.930124][ T5403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1112.376142][ T5403] bond0 (unregistering): Released all slaves
[ 1112.506846][T14429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.507591][ T4290] Bluetooth: hci0: command 0x040f tx timeout
[ 1112.619902][T14429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.899297][T14429] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1112.914956][T14429] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1112.970151][T14429] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1112.981823][T14429] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1113.124285][T14420] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1113.157617][T14420] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1113.178694][T14420] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1113.203022][T14420] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1113.275970][T14429] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1113.335788][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1113.345310][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1113.371636][T14429] 8021q: adding VLAN 0 to HW filter on device team0
[ 1113.460692][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1113.476143][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1113.493596][T12710] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1113.500804][T12710] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1113.524872][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1113.536975][ T4290] Bluetooth: hci4: command 0x040f tx timeout
[ 1113.607189][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1113.616044][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1113.634681][T12710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1113.641867][T12710] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1113.665478][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1113.688944][T14420] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1113.725956][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1113.768789][T14420] 8021q: adding VLAN 0 to HW filter on device team0
[ 1113.801355][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1113.821636][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1113.839685][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1113.856607][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1113.875483][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1113.885033][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1113.904716][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1113.914568][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1113.931722][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1113.949972][T14429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1113.970207][T14429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1114.050621][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1114.060576][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1114.073916][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1114.092662][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1114.105386][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1114.112608][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1114.122591][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1114.132089][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1114.153263][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1114.160475][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1114.176602][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1114.206442][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1114.215098][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1114.306639][T14420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1114.317471][T14420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1114.340256][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1114.361555][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1114.377999][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1114.400222][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1114.428024][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1114.448685][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1114.462298][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1114.471490][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1114.548698][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1114.558280][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1114.577805][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[ 1114.823972][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1114.841737][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1114.914800][T14429] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1115.087488][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1115.108633][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1115.284910][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1115.295436][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1115.306109][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1115.318657][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1115.329691][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1115.340591][ T9418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1115.355428][T14429] device veth0_vlan entered promiscuous mode
[ 1115.394391][T14420] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1115.416630][T14429] device veth1_vlan entered promiscuous mode
[ 1115.437002][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1115.445169][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1115.459191][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1115.509512][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1115.519008][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1115.539390][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1115.560164][T14420] device veth0_vlan entered promiscuous mode
[ 1115.582488][T14429] device veth0_macvtap entered promiscuous mode
[ 1115.594613][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1115.604557][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1115.613868][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1115.624973][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1115.627261][ T4290] Bluetooth: hci4: command 0x0419 tx timeout
[ 1115.640706][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1115.657438][T14429] device veth1_macvtap entered promiscuous mode
[ 1115.693166][ T5403] device hsr_slave_0 left promiscuous mode
[ 1115.700551][ T5403] device hsr_slave_1 left promiscuous mode
[ 1115.707982][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1115.715445][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1115.731685][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1115.744673][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1115.761759][ T5403] device bridge_slave_1 left promiscuous mode
[ 1115.771771][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.782028][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.789015][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.810063][ T5403] device bridge_slave_0 left promiscuous mode
[ 1115.816383][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1115.901053][ T5403] device veth1_macvtap left promiscuous mode
[ 1115.915505][ T5403] device veth0_macvtap left promiscuous mode
[ 1115.923441][ T5403] device veth1_vlan left promiscuous mode
[ 1115.936234][ T5403] device veth0_vlan left promiscuous mode
[ 1117.001912][ T5403] team0 (unregistering): Port device team_slave_1 removed
[ 1117.069924][ T5403] team0 (unregistering): Port device team_slave_0 removed
[ 1117.128093][ T5403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1117.191616][ T5403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1117.650698][ T5403] bond0 (unregistering): Released all slaves
[ 1117.780290][T14420] device veth1_vlan entered promiscuous mode
[ 1117.819169][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.831361][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.847651][T14429] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1117.865718][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1117.884846][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1117.899074][T14429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1117.920303][T14429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.943272][T14429] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1117.967310][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1117.978199][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1118.012127][T14429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.022894][T14429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.032429][T14429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.041253][T14429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.062030][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1118.078556][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1118.101649][T14420] device veth0_macvtap entered promiscuous mode
[ 1118.143237][T14420] device veth1_macvtap entered promiscuous mode
[ 1118.222985][T14420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.235065][T14420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.246147][T14420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.258486][T14420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.270762][T14420] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1118.286867][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1118.299147][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1118.315470][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1118.325519][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1118.376860][T14420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.397760][T14420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.415277][T14420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.428266][T14420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.472882][T14420] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.492768][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1118.505986][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1118.526985][ T5206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1118.534861][ T5206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1118.558112][T14420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.577531][T14420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.586299][T14420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.595653][T14420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.620068][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1118.658981][ T9414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1118.683144][ T9414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1118.721106][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1118.868761][ T9414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1118.876655][ T9414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1118.947712][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1119.059048][T12710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.088176][T12710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.143736][T12710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1121.254805][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2303'.
[ 1121.264234][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2303'.
[ 1122.778865][T14625] loop1: detected capacity change from 0 to 512
[ 1122.799360][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x30
[ 1122.799618][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x74
[ 1122.808694][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x69
[ 1122.818925][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x66
[ 1122.829193][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x65
[ 1122.838472][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x5f
[ 1122.850609][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x30
[ 1123.259996][T14625] EXT4-fs: Ignoring removed orlov option
[ 1123.500924][T14625] ext4: Bad value for 'data'
[ 1123.731574][T14407] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1128.482515][T14681] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2326'.
[ 1129.329073][T14693] sctp: [Deprecated]: syz.4.2330 (pid 14693) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1129.329073][T14693] Use struct sctp_sack_info instead
[ 1133.664124][T14716] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1140.360642][T14785] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[ 1140.787886][T14800] loop3: detected capacity change from 0 to 64
[ 1141.061393][T14800] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2362'.
[ 1146.843402][T14860] loop1: detected capacity change from 0 to 128
[ 1148.623791][T14877] wg1 speed is unknown, defaulting to 1000
[ 1149.334369][T14887] loop3: detected capacity change from 0 to 8
[ 1157.043935][T14909] netlink: 'syz.8.2382': attribute type 10 has an invalid length.
[ 1157.091517][T14909] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2382'.
[ 1157.158622][T14909] device dummy0 entered promiscuous mode
[ 1157.165915][T14909] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1160.886559][T14942] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1160.956379][T14940] loop1: detected capacity change from 0 to 1024
[ 1162.488127][ T4336] hfsplus: bad catalog file entry
[ 1163.959351][T14960] netlink: 'syz.1.2395': attribute type 10 has an invalid length.
[ 1164.013946][T14960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2395'.
[ 1164.072184][T14960] device dummy0 entered promiscuous mode
[ 1164.098700][T14960] bridge0: port 3(dummy0) entered blocking state
[ 1164.132209][T14960] bridge0: port 3(dummy0) entered disabled state
[ 1164.298902][T14960] bridge0: port 3(dummy0) entered blocking state
[ 1164.305453][T14960] bridge0: port 3(dummy0) entered forwarding state
[ 1165.326514][T14970] UBIFS error (pid: 14970): cannot open "(null)", error -22
[ 1173.779253][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2413'.
[ 1177.368013][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.374401][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.179142][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1178.189596][ T4290] CPU: 1 PID: 4290 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1178.197198][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1178.207296][ T4290] Workqueue: hci1 hci_rx_work
[ 1178.212058][ T4290] Call Trace:
[ 1178.215383][ T4290]  <TASK>
[ 1178.218350][ T4290]  dump_stack_lvl+0x188/0x24e
[ 1178.223097][ T4290]  ? show_regs_print_info+0x12/0x12
[ 1178.228357][ T4290]  ? load_image+0x410/0x410
[ 1178.232927][ T4290]  sysfs_create_dir_ns+0x26a/0x290
[ 1178.238104][ T4290]  ? __lock_acquire+0x7c40/0x7c40
[ 1178.243181][ T4290]  ? sysfs_warn_dup+0xa0/0xa0
[ 1178.247911][ T4290]  ? do_raw_spin_unlock+0x11d/0x230
[ 1178.253160][ T4290]  kobject_add_internal+0x617/0xca0
[ 1178.258418][ T4290]  kobject_add+0x160/0x230
[ 1178.262904][ T4290]  ? kobject_init+0x1c0/0x1c0
[ 1178.267615][ T4290]  ? __raw_spin_lock_init+0x41/0x100
[ 1178.272927][ T4290]  ? klist_children_get+0x50/0x50
[ 1178.277997][ T4290]  ? get_device_parent+0x121/0x3e0
[ 1178.283142][ T4290]  device_add+0x470/0x1050
[ 1178.287591][ T4290]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1178.292566][ T4290]  le_conn_complete_evt+0xfac/0x15c0
[ 1178.297896][ T4290]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[ 1178.304184][ T4290]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1178.309850][ T4290]  ? mutex_unlock+0x10/0x10
[ 1178.314382][ T4290]  ? skb_pull_data+0xec/0x1f0
[ 1178.319091][ T4290]  hci_le_conn_complete_evt+0x183/0x440
[ 1178.324675][ T4290]  ? hci_remote_host_features_evt+0x230/0x230
[ 1178.330771][ T4290]  hci_event_packet+0x7b3/0x1290
[ 1178.335735][ T4290]  ? lock_chain_count+0x20/0x20
[ 1178.340618][ T4290]  ? hci_conn_valid+0x220/0x220
[ 1178.345493][ T4290]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1178.351429][ T4290]  ? kcov_remote_start+0x50f/0x810
[ 1178.356566][ T4290]  ? lockdep_hardirqs_on+0x94/0x140
[ 1178.361816][ T4290]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1178.367051][ T4290]  hci_rx_work+0x3eb/0xd40
[ 1178.371510][ T4290]  ? _raw_spin_unlock+0x40/0x40
[ 1178.376400][ T4290]  ? process_one_work+0x7b4/0x1160
[ 1178.381539][ T4290]  process_one_work+0x8ab/0x1160
[ 1178.386517][ T4290]  ? worker_detach_from_pool+0x240/0x240
[ 1178.392177][ T4290]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1178.397241][ T4290]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1178.402838][ T4290]  ? wq_worker_running+0x97/0x190
[ 1178.407910][ T4290]  worker_thread+0xaf5/0x12a0
[ 1178.412638][ T4290]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1178.418574][ T4290]  kthread+0x29d/0x330
[ 1178.422661][ T4290]  ? worker_clr_flags+0x1a0/0x1a0
[ 1178.427718][ T4290]  ? kthread_blkcg+0xd0/0xd0
[ 1178.432342][ T4290]  ret_from_fork+0x1f/0x30
[ 1178.436800][ T4290]  </TASK>
[ 1178.443088][ T4290] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1178.457326][ T4290] Bluetooth: hci1: failed to register connection device
[ 1178.693428][T15090] 9pnet: p9_errstr2errno: server reported unknown error tun
[ 1178.702455][T15092] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2425'.
[ 1178.724207][T15092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1180.273638][T15102] loop3: detected capacity change from 0 to 128
[ 1186.666921][T15151] Option 'dnserror' to dns_resolver key: bad/missing value
[ 1187.934548][T15162] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1190.062250][   T12] rcu_tasks_wait_gp: rcu_tasks grace period 13 is 1134 jiffies old.
[ 1190.454331][T15176] netlink: 'syz.4.2450': attribute type 1 has an invalid length.
[ 1190.895229][T15188] device syzkaller0 entered promiscuous mode
[ 1190.940251][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'.
[ 1190.965381][T15188] tipc: Started in network mode
[ 1190.977627][T15188] tipc: Node identity 4e2edc807085, cluster identity 4711
[ 1190.999804][T15188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1191.048397][T15186] tipc: Resetting bearer <eth:syzkaller0>
[ 1191.171908][T15186] tipc: Disabling bearer <eth:syzkaller0>
[ 1192.260863][T15202] loop3: detected capacity change from 0 to 1024
[ 1192.286193][T15202] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[ 1192.371575][T15202] EXT4-fs (loop3): barriers disabled
[ 1192.400538][T15202] JBD2: no valid journal superblock found
[ 1192.406357][T15202] EXT4-fs (loop3): error loading journal
[ 1194.975240][T15240] loop3: detected capacity change from 0 to 256
[ 1195.156043][T15240] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[ 1200.390458][T15278] netlink: 'syz.3.2471': attribute type 10 has an invalid length.
[ 1200.406862][T15278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2471'.
[ 1200.713177][T15278] device dummy0 entered promiscuous mode
[ 1201.027611][T15278] bridge0: port 3(dummy0) entered blocking state
[ 1201.087582][T15278] bridge0: port 3(dummy0) entered disabled state
[ 1201.168991][T15278] bridge0: port 3(dummy0) entered blocking state
[ 1201.175663][T15278] bridge0: port 3(dummy0) entered forwarding state
[ 1201.302882][T15286] wg1 speed is unknown, defaulting to 1000
[ 1201.981211][T15293] device syzkaller0 entered promiscuous mode
[ 1202.816830][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1206.732883][T15330] wg1 speed is unknown, defaulting to 1000
[ 1213.056294][T15387] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2494'.
[ 1224.066936][T11596] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1224.970103][T11596] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1224.982866][T11596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.002243][T11596] usb 4-1: config 0 descriptor??
[ 1225.036872][T11596] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1225.488920][T11596] gp8psk: usb in 128 operation failed.
[ 1225.508363][T11596] gp8psk: usb in 137 operation failed.
[ 1225.513967][T11596] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1226.498568][T11596] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1226.553265][T11596] usb 4-1: media controller created
[ 1226.697130][T11596] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1226.982883][T11596] gp8psk_fe: Frontend attached
[ 1226.989263][T11596] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1227.778160][T11596] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1228.046302][T11596] gp8psk: usb in 138 operation failed.
[ 1228.051934][T11596] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1228.120699][T15531] loop3: detected capacity change from 0 to 2048
[ 1228.135068][T11596] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1228.171419][T15531] UDF-fs: bad mount option "0xffffffffffffffff" or missing value
[ 1228.200185][T11596] usb 4-1: USB disconnect, device number 9
[ 1229.785907][T11596] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1230.570983][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[ 1230.572132][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[ 1231.364696][T15568] jffs2: notice: (15568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1231.910789][T15568] jffs2: fork failed for JFFS2 garbage collect thread: 4
[ 1232.880072][T15570] loop1: detected capacity change from 0 to 4096
[ 1238.762677][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.769138][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.267908][T15605] Console: switching to colour VGA+ 80x25
[ 1240.919598][T15617] netlink: 'syz.1.2549': attribute type 10 has an invalid length.
[ 1240.948186][T15617] bridge0: port 3(dummy0) entered disabled state
[ 1240.954781][T15617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.962186][T15617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.237644][T15617] bridge0: port 3(dummy0) entered blocking state
[ 1241.244205][T15617] bridge0: port 3(dummy0) entered forwarding state
[ 1241.250950][T15617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.258128][T15617] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1241.265525][T15617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1241.272709][T15617] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1241.347418][T15623] jffs2: notice: (15623) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1241.916051][T15623] jffs2: fork failed for JFFS2 garbage collect thread: 4
[ 1244.184376][ T4278] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1244.197140][ T4278] Bluetooth: hci4: Injecting HCI hardware error event
[ 1244.208638][ T4290] Bluetooth: hci4: hardware error 0x00
[ 1244.364650][T15617] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1246.132785][   T26] audit: type=1326 audit(2000000994.990:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.0.2557" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b19e159 code=0x7fc00000
[ 1246.896930][ T4290] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1248.056837][   T12] rcu_tasks_wait_gp: rcu_tasks grace period 17 is 1050 jiffies old.
[ 1257.663762][T15734] loop3: detected capacity change from 0 to 128
[ 1267.318440][T15792] loop3: detected capacity change from 0 to 164
[ 1270.084972][T15801] loop1: detected capacity change from 0 to 128
[ 1271.167494][   T26] audit: type=1326 audit(2000001019.800:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1271.204320][T15800] loop3: detected capacity change from 0 to 512
[ 1271.278863][   T26] audit: type=1326 audit(2000001019.800:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1271.848685][T15800] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1271.865987][   T26] audit: type=1326 audit(2000001019.900:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1271.903737][T15800] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.2588: corrupted inode contents
[ 1272.073911][   T26] audit: type=1326 audit(2000001019.900:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1272.098910][T15800] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[ 1272.117257][T15800] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.2588: corrupted inode contents
[ 1272.144757][   T26] audit: type=1326 audit(2000001019.900:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1272.195568][T15800] EXT4-fs error (device loop3): ext4_evict_inode:329: inode #15: comm syz.3.2588: mark_inode_dirty error
[ 1272.297187][   T26] audit: type=1326 audit(2000001019.970:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1272.350172][T15800] EXT4-fs (loop3): 1 orphan inode deleted
[ 1272.386872][T15800] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1272.522282][   T26] audit: type=1326 audit(2000001019.970:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1273.280039][   T26] audit: type=1326 audit(2000001019.970:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.2600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b19e159 code=0x7ffc0000
[ 1273.346443][T14429] EXT4-fs (loop3): unmounting filesystem.
[ 1277.022200][T15870] jffs2: notice: (15870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1278.409836][T15889] loop3: detected capacity change from 0 to 2048
[ 1278.431015][T15889] UDF-fs: bad mount option "0x0000000000000004" or missing value
[ 1282.007667][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2615'.
[ 1282.994319][T15940] ubi0: attaching mtd0
[ 1283.002258][T15940] ubi0: scanning is finished
[ 1283.007048][T15940] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1283.048607][T15940] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1284.938173][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2636'.
[ 1289.963190][T16020] loop1: detected capacity change from 0 to 2048
[ 1289.993625][T16020] UDF-fs: bad mount option "0x0000000000000004" or missing value
[ 1293.007174][T16093] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[ 1293.015421][T16093] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[ 1293.024067][T16093] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[ 1300.099885][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.106326][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1306.779705][T16175] wg1 speed is unknown, defaulting to 1000
[ 1311.798051][   T12] rcu_tasks_wait_gp: rcu_tasks grace period 29 is 1073 jiffies old.
[ 1311.936780][ T4290] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1311.945734][ T4290] Bluetooth: hci0: Injecting HCI hardware error event
[ 1311.957394][ T4278] Bluetooth: hci0: hardware error 0x00
[ 1314.319959][T16218] "syz.3.2675" (16218) uses obsolete ecb(arc4) skcipher
[ 1314.897389][ T4278] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1317.354791][T16239] loop3: detected capacity change from 0 to 256
[ 1317.362345][T16239] exfat: Deprecated parameter 'namecase'
[ 1317.378786][T16239] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 1317.487653][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1317.500825][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1317.514830][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1317.526468][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1317.535003][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1317.546530][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1317.739708][T16242] wg1 speed is unknown, defaulting to 1000
[ 1319.696989][ T4290] Bluetooth: hci5: command 0x0409 tx timeout
[ 1322.031036][ T4290] Bluetooth: hci5: command 0x041b tx timeout
[ 1324.108014][ T4290] Bluetooth: hci5: command 0x040f tx timeout
[ 1324.351901][T16242] chnl_net:caif_netlink_parms(): no params data found
[ 1324.660533][ T9419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1326.261145][ T4290] Bluetooth: hci5: command 0x0419 tx timeout
[ 1326.547301][T16289] sctp: [Deprecated]: syz.8.2690 (pid 16289) Use of int in max_burst socket option.
[ 1326.547301][T16289] Use struct sctp_assoc_value instead
[ 1326.709526][ T9419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1326.989164][T16301] CIFS: Attempting to mount \\127.0.0.1\share
[ 1327.185267][ T9419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1327.364275][T16242] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1327.379612][T16242] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1327.388610][T16242] device bridge_slave_0 entered promiscuous mode
[ 1327.399044][T16242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1327.406470][T16242] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1327.417431][T16242] device bridge_slave_1 entered promiscuous mode
[ 1327.548192][ T9419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1327.607988][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1327.691330][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1327.786040][T16301] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1328.950085][T16242] team0: Port device team_slave_0 added
[ 1329.894956][T16242] team0: Port device team_slave_1 added
[ 1330.146526][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1330.322309][ T5403] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1331.076805][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1331.103147][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1331.129310][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1331.136405][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1331.162565][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1331.292707][ T9419] tipc: Disabling bearer <udp:syz2>
[ 1331.311941][ T9419] tipc: Left network mode
[ 1331.588896][T16242] device hsr_slave_0 entered promiscuous mode
[ 1331.955590][T16242] device hsr_slave_1 entered promiscuous mode
[ 1332.337163][ T4290] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1336.524225][   T12] rcu_tasks_wait_gp: rcu_tasks grace period 37 is 1190 jiffies old.
[ 1336.959524][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888056ec0400: rx timeout, send abort
[ 1337.462777][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88802f2f6800: rx timeout, send abort
[ 1337.471343][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888056ec0400: abort rx timeout. Force session deactivation
[ 1337.971188][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88802f2f6800: abort rx timeout. Force session deactivation
[ 1339.244326][T16358] sctp: [Deprecated]: syz.8.2704 (pid 16358) Use of int in max_burst socket option.
[ 1339.244326][T16358] Use struct sctp_assoc_value instead
[ 1349.787796][T16448] loop3: detected capacity change from 0 to 1024
[ 1351.903871][T16242] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1352.022035][T16242] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1352.849845][T16242] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1352.981564][T16242] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1353.160907][T16494] loop3: detected capacity change from 0 to 2048
[ 1353.210795][T16494] UDF-fs: bad mount option "0x0000000000000004" or missing value
[ 1354.132981][T16242] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1356.134199][ T9419] bridge0: port 1(dummy0) entered disabled state
[ 1356.177299][T16513] loop1: detected capacity change from 0 to 128
[ 1357.435764][T16513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1357.534958][T16513] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1357.678444][ T9419] device vxlan0 left promiscuous mode
[ 1357.731394][ T9419] team0 (unregistering): Port device vxlan0 removed
[ 1357.814902][ T9419] bond3 (unregistering): Released all slaves
[ 1358.483968][T14420] EXT4-fs (loop1): unmounting filesystem.
[ 1361.752344][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.758843][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.098772][ T9419] bond2 (unregistering): Released all slaves
[ 1362.182844][ T9419] bond1 (unregistering): Released all slaves
[ 1364.688598][T16553] CIFS: Attempting to mount \\127.0.0.1\share
[ 1365.891327][T16553] CIFS: VFS: error -4 create cifsd thread
[ 1366.041212][T16553] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1366.083590][T16559] loop1: detected capacity change from 0 to 512
[ 1366.131445][T16559] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1366.174915][T16559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1368.351301][T16559] EXT4-fs (loop1): 1 truncate cleaned up
[ 1368.370701][T16559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1369.225635][T16559] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1371.195631][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1371.209516][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1371.221743][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1371.244979][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1371.254511][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1371.262169][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1373.456810][ T4290] Bluetooth: hci3: command 0x0409 tx timeout
[ 1374.995759][ T4278] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1375.013468][ T4278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1375.035159][ T4278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1375.047232][ T4278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1375.054938][ T4278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1375.065974][ T4278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1375.258411][T10176] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1375.412392][ T5393] smc: removing ib device syz2
[ 1375.467463][T10176] usb 4-1: Using ep0 maxpacket: 8
[ 1375.493285][T10176] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1375.512588][T10176] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1375.536729][ T4290] Bluetooth: hci3: command 0x041b tx timeout
[ 1375.570006][T10176] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1375.586994][T10176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1375.600585][T10176] usb 4-1: Product: syz
[ 1375.604835][T10176] usb 4-1: Manufacturer: syz
[ 1375.610284][T10176] usb 4-1: SerialNumber: syz
[ 1375.633596][T10176] usbtest 4-1:1.0: couldn't get endpoints, -22
[ 1375.646814][T10176] usbtest: probe of 4-1:1.0 failed with error -22
[ 1376.006036][ T9419] bond0 (unregistering): Released all slaves
[ 1376.158245][T16567] netlink: 'syz.1.2734': attribute type 13 has an invalid length.
[ 1376.183961][T16567] netlink: 'syz.1.2734': attribute type 27 has an invalid length.
[ 1376.287843][T10176] usb 4-1: USB disconnect, device number 10
[ 1376.430068][T14420] EXT4-fs (loop1): unmounting filesystem.
[ 1377.564547][ T4278] Bluetooth: hci6: command 0x0409 tx timeout
[ 1377.617066][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[ 1379.693306][ T4278] Bluetooth: hci6: command 0x041b tx timeout
[ 1379.699520][ T4290] Bluetooth: hci3: command 0x0419 tx timeout
[ 1381.816856][ T4278] Bluetooth: hci6: command 0x040f tx timeout
[ 1383.194469][T16581] chnl_net:caif_netlink_parms(): no params data found
[ 1383.234428][T16603] chnl_net:caif_netlink_parms(): no params data found
[ 1383.563684][T16581] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1383.574524][T16581] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1383.583223][T16581] device bridge_slave_0 entered promiscuous mode
[ 1383.592831][T16603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1383.609393][T16603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1383.621531][T16603] device bridge_slave_0 entered promiscuous mode
[ 1383.637422][T16581] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1383.644547][T16581] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1383.660712][T16581] device bridge_slave_1 entered promiscuous mode
[ 1383.669691][T16603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1383.681870][T16603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1383.696086][T16603] device bridge_slave_1 entered promiscuous mode
[ 1383.856951][ T4289] Bluetooth: hci6: command 0x0419 tx timeout
[ 1386.435950][T16581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1386.498016][T16581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1386.510015][T16603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1386.602375][T16603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1386.666220][T16581] team0: Port device team_slave_0 added
[ 1386.874774][T16659] ubi0: attaching mtd0
[ 1386.880186][T16659] ubi0: scanning is finished
[ 1386.884836][T16659] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1386.898146][T16581] team0: Port device team_slave_1 added
[ 1386.927750][T16659] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1387.077483][T16603] team0: Port device team_slave_0 added
[ 1387.122301][T16603] team0: Port device team_slave_1 added
[ 1387.135235][T16581] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1387.214610][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1388.295131][T16581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1388.927509][T16581] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1388.934525][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1388.992707][T16581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1389.090082][T16603] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1389.115424][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1389.221635][T16603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1389.259417][T16603] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1389.266420][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1389.375450][T16603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1389.400815][T16581] device hsr_slave_0 entered promiscuous mode
[ 1389.418017][T16581] device hsr_slave_1 entered promiscuous mode
[ 1389.430293][T16581] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1389.442226][T16581] Cannot create hsr debugfs directory
[ 1391.291053][T16603] device hsr_slave_0 entered promiscuous mode
[ 1391.305727][T16603] device hsr_slave_1 entered promiscuous mode
[ 1393.389560][T16603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1393.406869][T16603] Cannot create hsr debugfs directory
[ 1393.962241][ T4355] Process accounting resumed
[ 1401.200116][ T4565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.326994][T14330] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1401.336532][ T4565] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.443456][ T4565] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.521576][T14330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1401.538464][T14330] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 1401.549257][T14330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.587733][T14330] as10x_usb: device has been detected
[ 1401.596091][T14330] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 1401.619649][T14330] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 1401.642870][ T4565] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.700229][T14330] as10x_usb: error during firmware upload part1
[ 1401.718605][T14330] Registered device Abilis Systems DVB-Titan
[ 1402.000477][ T4565] tipc: Left network mode
[ 1402.391741][ T4322] usb 2-1: USB disconnect, device number 3
[ 1402.433403][ T4322] Unregistered device Abilis Systems DVB-Titan
[ 1402.460829][ T4322] as10x_usb: device has been disconnected
[ 1403.393563][T16783] CIFS: Attempting to mount \\127.0.0.1\share
[ 1404.596940][T16783] CIFS: VFS: cifs_mount failed w/return code = -112
[ 1404.611449][T16784] ==================================================================
[ 1404.619567][T16784] BUG: KASAN: use-after-free in string+0x204/0x290
[ 1404.626111][T16784] Read of size 1 at addr ffff8880630b3380 by task cifsd/16784
[ 1404.633609][T16784] 
[ 1404.635957][T16784] CPU: 1 PID: 16784 Comm: cifsd Not tainted syzkaller #0
[ 1404.643018][T16784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1404.653110][T16784] Call Trace:
[ 1404.656424][T16784]  <TASK>
[ 1404.659388][T16784]  dump_stack_lvl+0x188/0x24e
[ 1404.664147][T16784]  ? __lock_acquire+0x7c40/0x7c40
[ 1404.669219][T16784]  ? show_regs_print_info+0x12/0x12
[ 1404.674642][T16784]  ? load_image+0x410/0x410
[ 1404.679214][T16784]  ? __virt_addr_valid+0x467/0x540
[ 1404.684394][T16784]  ? string+0x204/0x290
[ 1404.688584][T16784]  print_report+0xa8/0x210
[ 1404.693043][T16784]  kasan_report+0x10b/0x140
[ 1404.697590][T16784]  ? string+0x204/0x290
[ 1404.701780][T16784]  string+0x204/0x290
[ 1404.705808][T16784]  vsnprintf+0x10db/0x1c20
[ 1404.710269][T16784]  scnprintf+0xfb/0x180
[ 1404.714467][T16784]  ? snprintf+0x140/0x140
[ 1404.718831][T16784]  ? reconn_set_ipaddr_from_hostname+0x112/0x600
[ 1404.725213][T16784]  ? rcu_is_watching+0x11/0xa0
[ 1404.730035][T16784]  ? reconn_set_ipaddr_from_hostname+0x112/0x600
[ 1404.736403][T16784]  ? __kmalloc+0xe4/0x240
[ 1404.740779][T16784]  reconn_set_ipaddr_from_hostname+0x152/0x600
[ 1404.746984][T16784]  ? cifs_abort_connection+0x1050/0x1050
[ 1404.752701][T16784]  ? cifs_tcp_ses_needs_reconnect+0x4c0/0x4c0
[ 1404.758813][T16784]  ? do_raw_spin_unlock+0x11d/0x230
[ 1404.764056][T16784]  __cifs_reconnect+0x1a5/0x870
[ 1404.768957][T16784]  cifs_reconnect+0x231/0xd20
[ 1404.773688][T16784]  ? preempt_schedule+0xbc/0xd0
[ 1404.778605][T16784]  ? preempt_schedule_common+0xa5/0xd0
[ 1404.784131][T16784]  ? preempt_schedule+0xbc/0xd0
[ 1404.789133][T16784]  ? schedule_preempt_disabled+0x20/0x20
[ 1404.794812][T16784]  ? cifs_mark_tcp_ses_conns_for_reconnect+0x770/0x770
[ 1404.801714][T16784]  ? __rwlock_init+0x140/0x140
[ 1404.806517][T16784]  cifs_readv_from_socket+0x782/0x8d0
[ 1404.811948][T16784]  cifs_demultiplex_thread+0x523/0x35b0
[ 1404.817546][T16784]  ? __lock_acquire+0x1465/0x7c40
[ 1404.822621][T16784]  ? cifs_resolve_server+0x240/0x240
[ 1404.827967][T16784]  ? verify_lock_unused+0x140/0x140
[ 1404.833206][T16784]  ? finish_task_switch+0x25d/0x8e0
[ 1404.838465][T16784]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1404.844506][T16784]  ? read_lock_is_recursive+0x10/0x10
[ 1404.849937][T16784]  ? lock_chain_count+0x20/0x20
[ 1404.854924][T16784]  ? finish_task_switch+0x262/0x8e0
[ 1404.860199][T16784]  ? __lock_acquire+0x7c40/0x7c40
[ 1404.865266][T16784]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1404.871299][T16784]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1404.877232][T16784]  ? __kthread_parkme+0x71/0x1c0
[ 1404.882207][T16784]  ? __kthread_parkme+0x15b/0x1c0
[ 1404.887275][T16784]  kthread+0x29d/0x330
[ 1404.891381][T16784]  ? cifs_resolve_server+0x240/0x240
[ 1404.896706][T16784]  ? kthread_blkcg+0xd0/0xd0
[ 1404.901353][T16784]  ret_from_fork+0x1f/0x30
[ 1404.905913][T16784]  </TASK>
[ 1404.908961][T16784] 
[ 1404.911335][T16784] Allocated by task 16783:
[ 1404.915788][T16784]  kasan_set_track+0x4b/0x70
[ 1404.920438][T16784]  __kasan_kmalloc+0x8e/0xa0
[ 1404.925078][T16784]  __kmalloc_node_track_caller+0xb0/0x240
[ 1404.930852][T16784]  kstrdup+0x37/0x70
[ 1404.934794][T16784]  cifs_get_tcp_session+0xea/0x1ad0
[ 1404.940035][T16784]  mount_get_conns+0xb6/0xec0
[ 1404.944777][T16784]  cifs_mount+0x16a/0x13c0
[ 1404.949249][T16784]  cifs_smb3_do_mount+0x366/0x760
[ 1404.954317][T16784]  smb3_get_tree+0x5a1/0xa90
[ 1404.958951][T16784]  vfs_get_tree+0x88/0x270
[ 1404.963408][T16784]  do_new_mount+0x247/0xa40
[ 1404.967954][T16784]  __se_sys_mount+0x2e3/0x3d0
[ 1404.972671][T16784]  do_syscall_64+0x4c/0xa0
[ 1404.977126][T16784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1404.983054][T16784] 
[ 1404.985403][T16784] Freed by task 16783:
[ 1404.989500][T16784]  kasan_set_track+0x4b/0x70
[ 1404.994132][T16784]  kasan_save_free_info+0x27/0x40
[ 1404.999185][T16784]  ____kasan_slab_free+0x126/0x1f0
[ 1405.004339][T16784]  slab_free_freelist_hook+0x133/0x1b0
[ 1405.009855][T16784]  __kmem_cache_free+0xb6/0x200
[ 1405.014749][T16784]  cifs_put_tcp_session+0x319/0x400
[ 1405.019987][T16784]  mount_put_conns+0xb0/0x270
[ 1405.024711][T16784]  cifs_mount+0x1097/0x13c0
[ 1405.029256][T16784]  cifs_smb3_do_mount+0x366/0x760
[ 1405.034317][T16784]  smb3_get_tree+0x5a1/0xa90
[ 1405.038940][T16784]  vfs_get_tree+0x88/0x270
[ 1405.043474][T16784]  do_new_mount+0x247/0xa40
[ 1405.048022][T16784]  __se_sys_mount+0x2e3/0x3d0
[ 1405.052753][T16784]  do_syscall_64+0x4c/0xa0
[ 1405.057240][T16784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1405.063181][T16784] 
[ 1405.065531][T16784] The buggy address belongs to the object at ffff8880630b3380
[ 1405.065531][T16784]  which belongs to the cache kmalloc-16 of size 16
[ 1405.079460][T16784] The buggy address is located 0 bytes inside of
[ 1405.079460][T16784]  16-byte region [ffff8880630b3380, ffff8880630b3390)
[ 1405.092517][T16784] 
[ 1405.094867][T16784] The buggy address belongs to the physical page:
[ 1405.101312][T16784] page:ffffea00018c2cc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x630b3
[ 1405.111500][T16784] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1405.119090][T16784] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff8880174413c0
[ 1405.127710][T16784] raw: 0000000000000000 0000000080800080 00000001ffffffff 0000000000000000
[ 1405.136312][T16784] page dumped because: kasan: bad access detected
[ 1405.142763][T16784] page_owner tracks the page as allocated
[ 1405.148503][T16784] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 14429, tgid 14429 (syz-executor), ts 1240135925508, free_ts 1240099320522
[ 1405.167302][T16784]  post_alloc_hook+0x173/0x1a0
[ 1405.172109][T16784]  get_page_from_freelist+0x206b/0x2180
[ 1405.177700][T16784]  __alloc_pages+0x1ec/0x4f0
[ 1405.182326][T16784]  alloc_slab_page+0x4f/0x180
[ 1405.187042][T16784]  new_slab+0x87/0x2d0
[ 1405.191155][T16784]  ___slab_alloc+0xbc5/0x1240
[ 1405.195864][T16784]  __kmem_cache_alloc_node+0x126/0x270
[ 1405.201365][T16784]  __kmalloc_node+0xa2/0x240
[ 1405.206008][T16784]  kvmalloc_node+0x6c/0x180
[ 1405.210582][T16784]  xt_replace_table+0x176/0x790
[ 1405.215494][T16784]  __do_replace+0x16a/0x980
[ 1405.220056][T16784]  do_ip6t_set_ctl+0xb3d/0xe10
[ 1405.224863][T16784]  nf_setsockopt+0x25f/0x280
[ 1405.229495][T16784]  __sys_setsockopt+0x2bf/0x3d0
[ 1405.234389][T16784]  __x64_sys_setsockopt+0xb1/0xc0
[ 1405.239455][T16784]  do_syscall_64+0x4c/0xa0
[ 1405.243932][T16784] page last free stack trace:
[ 1405.248632][T16784]  free_unref_page_prepare+0x8e5/0x9e0
[ 1405.254131][T16784]  free_unref_page+0x2e/0x3f0
[ 1405.258853][T16784]  __vunmap+0x874/0xa40
[ 1405.263058][T16784]  free_work+0x56/0x80
[ 1405.267170][T16784]  process_one_work+0x8ab/0x1160
[ 1405.272144][T16784]  worker_thread+0xaf5/0x12a0
[ 1405.276859][T16784]  kthread+0x29d/0x330
[ 1405.280972][T16784]  ret_from_fork+0x1f/0x30
[ 1405.285435][T16784] 
[ 1405.287791][T16784] Memory state around the buggy address:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1405.293461][T16784]  ffff8880630b3280: 00 00 fc fc fb fb fc fc fa fb fc fc 00 07 fc fc
[ 1405.301555][T16784]  ffff8880630b3300: 00 07 fc fc fb fb fc fc fa fb fc fc fb fb fc fc
[ 1405.309644][T16784] >ffff8880630b3380: fa fb fc fc fa fb fc fc fa fb fc fc fb fb fc fc
[ 1405.317744][T16784]                    ^
[ 1405.321832][T16784]  ffff8880630b3400: fb fb fc fc fb fb fc fc fb fb fc fc fb fb fc fc
[ 1405.329942][T16784]  ffff8880630b3480: fb fb fc fc fb fb fc fc fb fb fc fc fa fb fc fc
[ 1405.338031][T16784] ==================================================================
[ 1405.401336][T16784] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1405.408597][T16784] CPU: 0 PID: 16784 Comm: cifsd Not tainted syzkaller #0
[ 1405.415662][T16784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1405.425854][T16784] Call Trace:
[ 1405.429160][T16784]  <TASK>
[ 1405.432127][T16784]  dump_stack_lvl+0x188/0x24e
[ 1405.436857][T16784]  ? memcpy+0x3c/0x60
[ 1405.440879][T16784]  ? show_regs_print_info+0x12/0x12
[ 1405.446148][T16784]  ? load_image+0x410/0x410
[ 1405.450720][T16784]  panic+0x2d3/0x710
[ 1405.454661][T16784]  ? bpf_jit_dump+0xd0/0xd0
[ 1405.459206][T16784]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1405.465224][T16784]  ? _raw_spin_unlock+0x40/0x40
[ 1405.470199][T16784]  ? print_memory_metadata+0x314/0x400
[ 1405.475700][T16784]  check_panic_on_warn+0x80/0xa0
[ 1405.480661][T16784]  ? string+0x204/0x290
[ 1405.484840][T16784]  end_report+0x66/0x110
[ 1405.489106][T16784]  kasan_report+0x118/0x140
[ 1405.493638][T16784]  ? string+0x204/0x290
[ 1405.497817][T16784]  string+0x204/0x290
[ 1405.501829][T16784]  vsnprintf+0x10db/0x1c20
[ 1405.506279][T16784]  scnprintf+0xfb/0x180
[ 1405.510458][T16784]  ? snprintf+0x140/0x140
[ 1405.514805][T16784]  ? reconn_set_ipaddr_from_hostname+0x112/0x600
[ 1405.521176][T16784]  ? rcu_is_watching+0x11/0xa0
[ 1405.525968][T16784]  ? reconn_set_ipaddr_from_hostname+0x112/0x600
[ 1405.532315][T16784]  ? __kmalloc+0xe4/0x240
[ 1405.536669][T16784]  reconn_set_ipaddr_from_hostname+0x152/0x600
[ 1405.542844][T16784]  ? cifs_abort_connection+0x1050/0x1050
[ 1405.548502][T16784]  ? cifs_tcp_ses_needs_reconnect+0x4c0/0x4c0
[ 1405.554595][T16784]  ? do_raw_spin_unlock+0x11d/0x230
[ 1405.559812][T16784]  __cifs_reconnect+0x1a5/0x870
[ 1405.564693][T16784]  cifs_reconnect+0x231/0xd20
[ 1405.569396][T16784]  ? preempt_schedule+0xbc/0xd0
[ 1405.574270][T16784]  ? preempt_schedule_common+0xa5/0xd0
[ 1405.579756][T16784]  ? preempt_schedule+0xbc/0xd0
[ 1405.584628][T16784]  ? schedule_preempt_disabled+0x20/0x20
[ 1405.590285][T16784]  ? cifs_mark_tcp_ses_conns_for_reconnect+0x770/0x770
[ 1405.597183][T16784]  ? __rwlock_init+0x140/0x140
[ 1405.601980][T16784]  cifs_readv_from_socket+0x782/0x8d0
[ 1405.607391][T16784]  cifs_demultiplex_thread+0x523/0x35b0
[ 1405.613049][T16784]  ? __lock_acquire+0x1465/0x7c40
[ 1405.618113][T16784]  ? cifs_resolve_server+0x240/0x240
[ 1405.623439][T16784]  ? verify_lock_unused+0x140/0x140
[ 1405.628777][T16784]  ? finish_task_switch+0x25d/0x8e0
[ 1405.634031][T16784]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1405.640066][T16784]  ? read_lock_is_recursive+0x10/0x10
[ 1405.645486][T16784]  ? lock_chain_count+0x20/0x20
[ 1405.650374][T16784]  ? finish_task_switch+0x262/0x8e0
[ 1405.655615][T16784]  ? __lock_acquire+0x7c40/0x7c40
[ 1405.660675][T16784]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1405.666596][T16784]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1405.672517][T16784]  ? __kthread_parkme+0x71/0x1c0
[ 1405.677484][T16784]  ? __kthread_parkme+0x15b/0x1c0
[ 1405.682540][T16784]  kthread+0x29d/0x330
[ 1405.686632][T16784]  ? cifs_resolve_server+0x240/0x240
[ 1405.691948][T16784]  ? kthread_blkcg+0xd0/0xd0
[ 1405.696551][T16784]  ret_from_fork+0x1f/0x30
[ 1405.701002][T16784]  </TASK>
[ 1405.704615][T16784] Kernel Offset: disabled
[ 1405.708960][T16784] Rebooting in 86400 seconds..