last executing test programs:

9m25.402802356s ago: executing program 32 (id=292):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r1, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r2, 0x4)

9m18.381680427s ago: executing program 33 (id=325):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

9m15.82710458s ago: executing program 34 (id=341):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000)
close(0x3)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/172, 0xfffffffffffffeb6, 0x0, 0x0}, &(0x7f0000000040)=0x40)

9m14.923804272s ago: executing program 0 (id=348):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

9m14.612190377s ago: executing program 0 (id=350):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)

9m14.431958336s ago: executing program 0 (id=352):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

9m14.206676566s ago: executing program 0 (id=354):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
clock_gettime(0x0, &(0x7f0000000e40))
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0)
creat(&(0x7f0000002640)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

9m13.549850631s ago: executing program 0 (id=356):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x40005a3)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)
getdents(r3, 0x0, 0x0)

9m10.510498789s ago: executing program 0 (id=363):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}]}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x800)

9m10.324384667s ago: executing program 35 (id=363):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}]}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x800)

8m10.723195453s ago: executing program 5 (id=730):
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x2b)
acct(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000000)='./file0\x00', 0x4142, 0xba)

8m10.325398904s ago: executing program 5 (id=736):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x80)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

8m9.920355163s ago: executing program 5 (id=738):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r1, 0x1)
flock(r2, 0x1)
flock(r0, 0x5)

8m9.680562471s ago: executing program 5 (id=742):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)

8m9.517769653s ago: executing program 5 (id=743):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)

8m8.171450857s ago: executing program 5 (id=755):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}], 0x7}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40)

8m7.758286535s ago: executing program 36 (id=755):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}], 0x7}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40)

7m14.738148004s ago: executing program 7 (id=1130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000180))

7m14.010507276s ago: executing program 7 (id=1133):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/199}, {&(0x7f0000000080)=""/108}, {&(0x7f00000006c0)=""/234}, {&(0x7f0000000280)=""/173}], 0x0, &(0x7f0000000140)=""/74}, 0x2}, {{&(0x7f0000000400)=@ax25={{0x3, @rose}, [@default, @bcast, @remote, @remote, @netrom, @default, @default, @bcast]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/142}, {&(0x7f00000007c0)=""/95}, {&(0x7f0000000d00)=""/4096}, {&(0x7f0000000840)=""/115}], 0x0, &(0x7f0000001d00)=""/94}, 0x7}, {{&(0x7f0000001d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/187}]}, 0x2}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001f00)=""/4096}, {&(0x7f0000002f00)=""/43}, {&(0x7f0000002f40)=""/148}, {&(0x7f0000003000)=""/191}, {&(0x7f00000030c0)=""/202}, {&(0x7f00000031c0)=""/150}], 0x0, &(0x7f0000003300)=""/42}, 0xb2e7}, {{&(0x7f0000003340)=@caif=@util, 0x0, &(0x7f0000003440)=[{&(0x7f00000033c0)=""/104}], 0x0, &(0x7f0000003480)=""/1}, 0x8ec4}], 0x400000000000272, 0x20000020, 0x0)

7m12.918273515s ago: executing program 7 (id=1140):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
close(0x3)
close(0x4)

7m12.665036671s ago: executing program 7 (id=1142):
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x84)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000280)='./file1\x00', 0xc000, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
unlink(&(0x7f0000000040)='./file0\x00')

7m11.97454299s ago: executing program 7 (id=1147):
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'})

7m11.692057161s ago: executing program 7 (id=1148):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

6m56.626505033s ago: executing program 37 (id=1148):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

6m15.217594865s ago: executing program 3 (id=1504):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000001c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@acl}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@inlinecrypt}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x5510, &(0x7f00000020c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980))
chdir(&(0x7f00000003c0)='./bus\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1380443, 0x0, 0x3, 0x0, &(0x7f0000000000))
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x247)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

6m13.402682177s ago: executing program 3 (id=1515):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

6m12.251763355s ago: executing program 3 (id=1523):
munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20040, 0x0)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000cb2000/0x1000)=nil, r1, 0x200000e, 0x305711d4b75a25b2, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, 0x0})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03, 0x2000000, 0x1}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6m11.774279082s ago: executing program 3 (id=1528):
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000002000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a0025000000170000003e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601"], 0x0}, 0x94)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x40)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r1 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e23, 0x7fff, @loopback, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

6m10.878269905s ago: executing program 6 (id=1534):
inotify_init()
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2c)
socket$nl_route(0x10, 0x3, 0x0)
r0 = eventfd2(0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r1=>0x0)
read$eventfd(r0, &(0x7f0000000000), 0x8)
io_submit(r1, 0x3, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xd5, r0, &(0x7f0000000040)="105d88874539ed6d98", 0x9, 0x3, 0x0, 0x1, r0}, 0x0, 0x0])
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}])

6m10.694011063s ago: executing program 3 (id=1535):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0)

6m9.610604643s ago: executing program 3 (id=1541):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfffffffffffffe4e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

6m9.610194513s ago: executing program 6 (id=1542):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)

6m9.228824207s ago: executing program 6 (id=1546):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8)

6m9.01854157s ago: executing program 6 (id=1549):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, 0x0)

6m8.897539478s ago: executing program 6 (id=1550):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2})

6m7.806507987s ago: executing program 6 (id=1559):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

6m7.552469913s ago: executing program 38 (id=1559):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

5m54.504285279s ago: executing program 39 (id=1541):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfffffffffffffe4e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1m11.932984656s ago: executing program 8 (id=2882):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x508, 0x368, 0x220, 0xffffffff, 0xf0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff0000ff]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @port=0x4e21, @gre_key=0xa2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0xe], 0x3166, 0x1e, 0x1}}, @common=@unspec=@cgroup0={{0x28}, {0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/11, 0xb}, 0x1}], 0xfffffffffffffe12, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r0, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14)

1m10.108920186s ago: executing program 8 (id=2889):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

1m9.070270785s ago: executing program 8 (id=2891):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
landlock_restrict_self(0xffffffffffffffff, 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m5.113460372s ago: executing program 8 (id=2907):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=")
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x3ea, 0xffffffff, 0x40})
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x2000000)
mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0xc01a2, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)

1m3.682707252s ago: executing program 8 (id=2915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8c}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2fd9e5fb6e622145}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4)

58.671078319s ago: executing program 8 (id=2933):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x4})
fcntl$lock(r4, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0x9})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d})

42.863846464s ago: executing program 40 (id=2933):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x4})
fcntl$lock(r4, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0x9})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d})

17.928804462s ago: executing program 4 (id=3041):
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010029bd7000fddbdf25200000001c002d80080002"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16.093971188s ago: executing program 4 (id=3046):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x600)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', 0x0})

13.890946455s ago: executing program 4 (id=3050):
r0 = socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x78, r4})

7.004949138s ago: executing program 9 (id=3062):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)

6.990870616s ago: executing program 2 (id=3063):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="fc61e9597f4d9e9ea4db0de246bd87b4e239c239e441ed865dc1e26738f9f212de5680398f39e30c4f6cf935c3b4479ba9639795eff8d7fa09be54fb29e848f309e61aa47584fe80", 0x48}, {&(0x7f0000000380)="2edee5732b01b8ebcf4032595f6e8b6913b4353cc642461a92f9d3ca887c83b4f1adc4c157548ac445eb85444248b506314dee35eea0b9eccdfe0ac7e8ea40031de7b4cbaa1139599e37adb0c46cfaab548ebfefc78a6e9502a3a87f944796573f4bb9fefe7f9e69b083194f62e12014eb8e5c44bbeab9b91c755a859a05929791960a037194decb9fbf35dd1e9ff213f7874f140abf94f07386c7070dda09be3e784e8d406c3ae8f9967f23b699384f87d6504760fa23abdf3341f874acd40b5e50b66b8a1aef50603554c4383867f9ad5287798d2b1c3cd4df6de4d9ae65d606cacf9bcc2567e69eec5bd8ba02e0cec374837a0dc0cb15", 0xf8}, {&(0x7f0000000480)="f393ba8e169f0247c0f02d75b52a1384c49d010ef7d09de15e9b3d514e4df11c73509218777d2996de132ff0e2", 0x2d}], 0x3}, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)

6.940441907s ago: executing program 4 (id=3064):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x31c000, 0x1000, 0x101, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000340)=0x10, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60)

6.893637438s ago: executing program 1 (id=3065):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r3, 0x0, 0x0, 0x56)
close_range(r0, 0xffffffffffffffff, 0x0)

6.336062757s ago: executing program 4 (id=3067):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

6.324944335s ago: executing program 2 (id=3068):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

6.274162615s ago: executing program 1 (id=3069):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

5.106976023s ago: executing program 4 (id=3070):
socket$inet_tcp(0x2, 0x1, 0x0)
fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20)
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0)

5.105834152s ago: executing program 2 (id=3079):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0)

4.021806964s ago: executing program 9 (id=3071):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b)

4.015245933s ago: executing program 1 (id=3081):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000640)=@ethtool_drvinfo={0x3, "59df9bafbcfdb56315f245396a297796990e82b4ae58f23aceb70576cbc23bcf", "2b536027a7994037f51fcc3a0ec483e3792474f83462ba98870aa688d1b5cdb0", "918ccf48820000000000cd231f8ff94845fe17b702610000000000429200", "34f231ce71b6afd5f9585a8787eb6a402f9c0012781f716b2a5ccab61835cc21", "bb500649861d98c16388c83d37d69c38e4bef90c3cb04c56b47c7dc408fa5f7c", "5958dd3d80c1542523c508e5", 0x882c, 0x0, 0xbc, 0x201}})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc", @ANYBLOB], 0x50)

2.524612711s ago: executing program 9 (id=3072):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000380)={0x0, 0x6, 0x2, "a20d"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000001180)={0x0, 0x12, 0x5, "3745b4446a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

2.510114038s ago: executing program 2 (id=3073):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000340)='./file0\x00', r3}, 0x18)

2.331732576s ago: executing program 1 (id=3074):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn'])
chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44)

2.319364973s ago: executing program 2 (id=3075):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r0, 0x402, 0x1a)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000cc0)="409b", 0x2)
syz_pidfd_open(0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5})

1.578409098s ago: executing program 2 (id=3076):
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x18a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0)

1.374817451s ago: executing program 9 (id=3077):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0))

1.046397011s ago: executing program 1 (id=3078):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x24, 0x0, &(0x7f0000000000)=0x5a96966c)

1.046008941s ago: executing program 9 (id=3080):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)

279.07µs ago: executing program 1 (id=3082):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)

0s ago: executing program 9 (id=3083):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000)
close(0x3)

kernel console output (not intermixed with test programs):

)
[  227.346513][ T8334] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1007: bg 0: block 361: padding at end of block bitmap is not set
[  227.361449][ T8334] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6179: Corrupt filesystem
[  227.375364][ T8334] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1007: attempt to clear invalid blocks 33619980 len 1
[  227.390274][ T8334] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1007: invalid indirect mapped block 1819239214 (level 0)
[  227.405541][ T8334] EXT4-fs (loop6): 1 truncate cleaned up
[  227.411293][ T8334] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  227.446204][ T8334] EXT4-fs: Ignoring removed orlov option
[  227.454756][ T8334] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  227.474334][ T8334] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  227.544938][ T8334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e11c, mo2=0003]
[  227.576290][ T4648] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 6e:cf:41:78:b9:63
[  227.590102][ T8334] EXT4-fs (loop6): re-mounted. Quota mode: none.
[  227.612678][ T4648] usb 7-1: USB disconnect, device number 11
[  227.629408][ T4648] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[  228.012445][ T5489] EXT4-fs (loop6): unmounting filesystem.
[  228.873064][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1017'.
[  230.135839][ T8419] device macvlan2 entered promiscuous mode
[  230.174039][ T8419] device bond3 entered promiscuous mode
[  230.180243][ T8419] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  230.474998][ T8419] device bond3 left promiscuous mode
[  230.869450][ T8441] sctp: [Deprecated]: syz.4.1031 (pid 8441) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.869450][ T8441] Use struct sctp_sack_info instead
[  231.480042][ T8462] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  232.218291][ T8499] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  232.248060][ T8495] kvm: pic: single mode not supported
[  232.248083][ T8495] kvm: pic: level sensitive irq not supported
[  232.280423][ T8495] kvm: pic: non byte write
[  232.311771][ T8495] kvm: pic: level sensitive irq not supported
[  232.311846][ T8495] kvm: pic: non byte write
[  232.326702][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'.
[  232.448170][ T8507] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  232.488467][ T8507] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  232.560511][ T8512] device macvlan2 entered promiscuous mode
[  232.573623][ T8512] bond4: (slave macvlan2): Error -98 calling set_mac_address
[  233.047915][ T8532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  235.834727][ T8571] loop7: detected capacity change from 0 to 32768
[  235.948846][ T8571] XFS (loop7): Mounting V5 Filesystem
[  236.060755][ T8571] XFS (loop7): Ending clean mount
[  236.413097][ T8631] netlink: 'syz.8.1076': attribute type 6 has an invalid length.
[  236.438618][ T8631] netlink: 'syz.8.1076': attribute type 6 has an invalid length.
[  236.555312][ T5539] XFS (loop7): Unmounting Filesystem
[  237.967837][ T8683] input: syz0 as /devices/virtual/input/input9
[  238.316993][ T8694] loop8: detected capacity change from 0 to 256
[  238.335316][ T8694] exfat: Deprecated parameter 'utf8'
[  238.343380][ T8694] exfat: Deprecated parameter 'utf8'
[  238.374969][ T8694] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[  239.957893][ T8720] loop8: detected capacity change from 0 to 32768
[  240.048458][ T8720] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.1099 (8720)
[  240.196462][ T8720] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  240.249795][ T8720] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[  240.290980][ T8720] BTRFS info (device loop8): force zlib compression, level 3
[  240.329869][ T8720] BTRFS info (device loop8): force clearing of disk cache
[  240.362674][ T8720] BTRFS info (device loop8): setting nodatasum
[  240.413610][ T8720] BTRFS info (device loop8): allowing degraded mounts
[  240.462919][ T8720] BTRFS info (device loop8): enabling disk space caching
[  240.504692][ T8720] BTRFS info (device loop8): disk space caching is enabled
[  240.851012][ T8720] BTRFS info (device loop8): rebuilding free space tree
[  240.897104][ T8720] BTRFS info (device loop8): disabling free space tree
[  240.956139][ T8720] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.004814][ T8720] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  241.120462][ T8805] netlink: 'syz.4.1111': attribute type 10 has an invalid length.
[  241.186743][ T8805] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  241.407572][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1113'.
[  241.526936][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1114'.
[  241.683121][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'.
[  241.730792][ T8814] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  242.485110][ T5616] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  242.507677][ T8846] loop9: detected capacity change from 0 to 8
[  242.545685][ T8846] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  242.582219][ T8360] udevd[8360]: incorrect cramfs checksum on /dev/loop9
[  242.688237][ T8360] udevd[8360]: incorrect cramfs checksum on /dev/loop9
[  242.780609][ T8853] cramfs: Error -3 while decompressing!
[  242.828760][ T8853] cramfs: ffffffff96d8a178(16)->ffff88803a7b0000(4096)
[  242.978742][ T8853] cramfs: Error -3 while decompressing!
[  243.029393][ T8853] cramfs: ffffffff96d8a178(16)->ffff88803a7b0000(4096)
[  243.047971][   T27] audit: type=1800 audit(1773163617.733:31): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1122" name="file0" dev="loop9" ino=244 res=0 errno=0
[  243.470194][ T8868] netlink: 'syz.9.1128': attribute type 1 has an invalid length.
[  243.578308][ T8870] device bond1 entered promiscuous mode
[  243.599615][ T8870] 8021q: adding VLAN 0 to HW filter on device bond1
[  244.324500][ T8868] 8021q: adding VLAN 0 to HW filter on device bond2
[  244.368053][ T8868] device bond2 entered promiscuous mode
[  244.441486][ T8868] bond1: (slave bond2): Enslaving as a backup interface with a down link
[  244.970594][ T8891] netlink: 'syz.4.1134': attribute type 1 has an invalid length.
[  245.124172][ T8892] device bond6 entered promiscuous mode
[  245.140744][ T8892] 8021q: adding VLAN 0 to HW filter on device bond6
[  245.274717][ T8895] device bridge2 entered promiscuous mode
[  245.315729][ T8895] bond6: (slave bridge2): Enslaving as a backup interface with an up link
[  245.324678][   T46] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  245.364183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  245.412895][ T8916] loop8: detected capacity change from 0 to 256
[  245.709402][   T46] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  246.344248][    T7] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  246.624607][ T8360] blk_print_req_error: 406 callbacks suppressed
[  246.624626][ T8360] I/O error, dev loop8, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  246.745857][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.767342][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.787673][    T7] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  246.808880][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.845505][    T7] usb 7-1: config 0 descriptor??
[  247.259783][    T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  247.277077][    T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  247.294682][    T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  247.312051][    T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  247.332306][    T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  247.351995][    T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  247.368179][    T7] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  247.393759][    T7] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  247.517953][    T7] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE
[  247.533095][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  247.890518][ T8970] tipc: Started in network mode
[  247.904077][ T8970] tipc: Node identity 84e, cluster identity 4711
[  247.911115][ T8970] tipc: Node number set to 2126
[  247.919215][    T7] cp2112 0003:10C4:EA90.0006: error setting SMBus config
[  247.948260][    T7] cp2112: probe of 0003:10C4:EA90.0006 failed with error -71
[  248.037137][    T7] usb 7-1: USB disconnect, device number 12
[  248.244540][ T8978] fido_id[8978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  248.783639][ T9000] input: syz0 as /devices/virtual/input/input10
[  249.565300][ T9029] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  250.771969][ T9059] input: syz0 as /devices/virtual/input/input11
[  251.130379][ T9078] tipc: Failed to remove unknown binding: 66,0,0/0:4158249274/4158249275
[  251.141963][ T9071] block device autoloading is deprecated and will be removed.
[  252.653099][ T4284] Bluetooth: hci0: command 0x0406 tx timeout
[  252.736097][ T9143] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1196'.
[  252.960338][ T9148] netlink: 'syz.6.1197': attribute type 10 has an invalid length.
[  253.011636][ T9148] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  253.159580][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1199'.
[  254.317402][ T9199] netlink: 'syz.6.1206': attribute type 10 has an invalid length.
[  254.332118][ T9199] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  254.884713][ T9224] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  255.696220][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  255.702615][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  256.142260][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1221'.
[  258.451712][ T9298] loop8: detected capacity change from 0 to 40427
[  258.496749][ T9298] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  258.521076][ T9298] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  258.587033][ T9298] F2FS-fs (loop8): Found nat_bits in checkpoint
[  258.799959][ T9298] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  258.810619][ T9298] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  259.000747][ T9331] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  260.159049][ T9354] kvm: pic: single mode not supported
[  260.159072][ T9354] kvm: pic: level sensitive irq not supported
[  260.167094][ T9354] kvm: pic: non byte write
[  260.178272][ T9354] kvm: pic: non byte write
[  261.172748][ T9396] overlayfs: failed to clone upperpath
[  262.996166][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  263.009426][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  263.022590][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  263.034753][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  263.042716][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  263.050649][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  264.117012][ T9428] chnl_net:caif_netlink_parms(): no params data found
[  264.559400][   T33] tipc: Left network mode
[  264.560116][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.684524][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.704666][ T9428] device bridge_slave_0 entered promiscuous mode
[  265.069249][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.133162][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  265.192173][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.257011][ T9428] device bridge_slave_1 entered promiscuous mode
[  265.422121][ T9487] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  265.431529][ T9487] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  265.440491][ T9487] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  265.449489][ T9487] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  265.668518][ T9428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.742726][ T9428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.042378][ T9428] team0: Port device team_slave_0 added
[  266.147395][ T9428] team0: Port device team_slave_1 added
[  266.260379][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.271367][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.301014][ T9428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.375741][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.403753][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.503340][ T9428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.702267][ T9510] loop9: detected capacity change from 0 to 8192
[  266.820536][ T9428] device hsr_slave_0 entered promiscuous mode
[  266.853400][ T9428] device hsr_slave_1 entered promiscuous mode
[  266.874102][ T9428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.902201][ T9428] Cannot create hsr debugfs directory
[  266.985881][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'.
[  267.213508][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  267.901681][   T33] device hsr_slave_0 left promiscuous mode
[  267.921245][   T33] device hsr_slave_1 left promiscuous mode
[  268.617203][   T33] bond1 (unregistering): Released all slaves
[  269.293128][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  269.552672][   T27] audit: type=1326 audit(2000000002.669:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c1d9c799 code=0x0
[  270.889535][   T33] bond0 (unregistering): Released all slaves
[  271.373168][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  271.882481][ T9632] loop9: detected capacity change from 0 to 128
[  271.951433][ T8360] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  272.485694][   T27] audit: type=1326 audit(2000000005.599:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.8.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x0
[  272.508143][    C0] vkms_vblank_simulate: vblank timer overrun
[  272.539943][ T9644] binder: 9643:9644 ioctl c0306201 2000000003c0 returned -14
[  272.955803][ T9428] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  272.989446][ T9428] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  273.037205][ T9428] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  273.060506][ T9428] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  273.087772][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1310'.
[  273.250029][ T9671] netlink: 'syz.4.1312': attribute type 4 has an invalid length.
[  273.270893][ T9671] netlink: 'syz.4.1312': attribute type 4 has an invalid length.
[  273.435612][ T9428] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.519018][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  273.536875][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  273.575344][ T9428] 8021q: adding VLAN 0 to HW filter on device team0
[  273.601006][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  273.619702][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  273.660870][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.668162][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.745690][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  273.781489][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  273.822949][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  273.915686][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.923439][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.951379][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  273.997725][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  274.024545][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  274.081966][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  274.114623][ T9704] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3112096379/3112096380
[  274.135660][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  274.162446][ T9704] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3112096379/3112096380
[  274.222768][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  274.239172][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  274.321554][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  274.351325][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  274.385462][ T9428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  274.411332][ T9428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  274.431636][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  274.441216][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  274.447265][ T9718] loop6: detected capacity change from 0 to 512
[  274.461929][ T9720] device batadv_slave_0 entered promiscuous mode
[  274.556492][ T8360] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  274.597373][ T9719] device batadv_slave_0 left promiscuous mode
[  274.825478][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1324'.
[  274.829686][ T9735] fuse: Bad value for 'fd'
[  275.189487][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  275.203385][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  275.237450][ T9428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.309826][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  275.335813][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  275.398807][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  275.423798][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  275.445488][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  275.474267][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  275.517254][ T9759] device bond6 left promiscuous mode
[  275.522614][ T9759] device bridge2 left promiscuous mode
[  275.538786][ T9428] device veth0_vlan entered promiscuous mode
[  275.595061][ T9428] device veth1_vlan entered promiscuous mode
[  275.661300][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  275.677803][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  275.706499][ T9428] device veth0_macvtap entered promiscuous mode
[  275.729339][ T9428] device veth1_macvtap entered promiscuous mode
[  275.791110][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.812959][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.840126][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.862536][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  275.877012][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  275.897647][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  275.919290][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  275.962419][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.982803][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.008359][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.027884][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  276.044692][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  276.068102][ T9428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.086075][ T9428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.107235][ T9428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.129371][ T9428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.394145][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.402093][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.440938][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  276.528218][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.581004][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.619430][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  277.922759][ T9809] x_tables: duplicate underflow at hook 2
[  278.771356][ T4284] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  279.023141][ T4312] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  279.226063][ T4312] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  279.243715][ T4312] usb 7-1: config 0 has no interface number 0
[  279.269764][ T4312] usb 7-1: config 0 interface 41 has no altsetting 0
[  279.311953][ T4312] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  279.355618][ T4312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.396721][ T4312] usb 7-1: Product: syz
[  279.411051][ T4312] usb 7-1: Manufacturer: syz
[  279.432890][ T4312] usb 7-1: SerialNumber: syz
[  279.467182][ T4312] usb 7-1: config 0 descriptor??
[  279.878761][   T27] audit: type=1326 audit(2000000012.999:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9825 comm="syz.9.1347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c1d9c799 code=0x0
[  280.303704][ T4312] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  281.606173][ T4312] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  281.650830][ T4312] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  281.693266][ T4753] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  281.710164][ T4312] CoreChips: probe of 7-1:0.41 failed with error -71
[  281.758059][ T4312] usb 7-1: USB disconnect, device number 13
[  281.887492][ T4753] usb 10-1: not running at top speed; connect to a high speed hub
[  281.898036][ T4753] usb 10-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  281.914642][ T4753] usb 10-1: config 1 interface 0 has no altsetting 0
[  281.938299][ T4753] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  281.957972][ T4753] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.981819][ T4753] usb 10-1: Product: ࠧ
[  281.988974][ T4753] usb 10-1: Manufacturer: ч
[  282.003415][ T4753] usb 10-1: SerialNumber: Л
[  282.019388][ T9896] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  282.311079][ T4753] cdc_ether: probe of 10-1:1.0 failed with error -71
[  282.361119][ T4753] usb 10-1: USB disconnect, device number 2
[  283.218224][ T4753] libceph: connect (1)[c::]:6789 error -101
[  283.248129][ T4753] libceph: mon0 (1)[c::]:6789 connect error
[  283.277616][ T9962] ceph: No mds server is up or the cluster is laggy
[  283.291474][ T4753] libceph: connect (1)[c::]:6789 error -101
[  283.317599][ T4753] libceph: mon0 (1)[c::]:6789 connect error
[  283.668912][ T9978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1379'.
[  283.840167][ T9986] device ip6gretap2 entered promiscuous mode
[  283.873596][ T9986] bond7: (slave ip6gretap2): no link monitoring support
[  283.919214][ T9986] bond7: (slave ip6gretap2): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[  284.028676][ T9986] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link
[  284.248549][T10004] device ip6gretap1 entered promiscuous mode
[  284.280551][T10004] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  284.670127][T10026] loop6: detected capacity change from 0 to 512
[  284.719104][T10026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  284.764681][T10026] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1391: iget: bad i_size value: 38620345925642
[  284.785090][T10026] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1391: couldn't read orphan inode 15 (err -117)
[  284.853093][T10026] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  285.014584][T10026] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1391: bg 0: block 5: invalid block bitmap
[  285.063968][T10026] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 216 with error 28
[  285.086981][T10026] EXT4-fs (loop6): This should not happen!! Data will be lost
[  285.086981][T10026] 
[  285.187477][T10026] EXT4-fs (loop6): Total free blocks count 0
[  285.221066][T10026] EXT4-fs (loop6): Free/Dirty block details
[  285.273143][T10026] EXT4-fs (loop6): free_blocks=0
[  285.342319][T10026] EXT4-fs (loop6): dirty_blocks=220
[  285.364043][T10026] EXT4-fs (loop6): Block reservation details
[  285.384348][T10026] EXT4-fs (loop6): i_reserved_data_blocks=220
[  285.527128][ T5489] EXT4-fs (loop6): unmounting filesystem.
[  285.692859][T10064] program syz.6.1398 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  285.744632][T10067] program syz.6.1398 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  286.158723][T10078] netlink: 'syz.6.1399': attribute type 4 has an invalid length.
[  286.207054][T10078] netlink: 'syz.6.1399': attribute type 4 has an invalid length.
[  286.516694][T10092] tipc: Failed to remove unknown binding: 66,0,0/2126:390821028/390821029
[  286.549181][T10092] tipc: Failed to remove unknown binding: 66,0,0/2126:390821028/390821029
[  287.663130][ T4274] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  287.865102][ T4274] usb 7-1: config 0 has no interfaces?
[  287.870734][ T4274] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  287.900630][ T4274] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.938101][ T4274] usb 7-1: config 0 descriptor??
[  288.165540][ T4651] usb 7-1: USB disconnect, device number 14
[  288.735516][ T4651] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  288.925820][ T4651] usb 7-1: unable to get BOS descriptor or descriptor too short
[  288.938206][ T4651] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  288.989985][ T4651] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  289.047340][ T4651] usb 7-1: string descriptor 0 read error: -22
[  289.086372][ T4651] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  289.137849][ T4651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.378718][ T4651] usb 7-1: Can't get UAC3 power state for id 10
[  289.715238][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1425'.
[  289.998363][ T4651] usb 7-1: 2:0: failed to get current value for ch 0 (-32)
[  290.418306][ T4651] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2)
[  290.595709][ T4651] usb 7-1: USB disconnect, device number 15
[  291.069414][T10202] loop6: detected capacity change from 0 to 256
[  291.173771][   T27] audit: type=1326 audit(2000000024.289:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10176 comm="syz.9.1429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c1d9c799 code=0x0
[  294.185374][T10289] loop9: detected capacity change from 0 to 512
[  294.225910][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1455'.
[  294.437033][T10289] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  294.483246][T10289] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.552519][   T27] audit: type=1800 audit(2000000027.669:36): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1456" name="file1" dev="loop9" ino=15 res=0 errno=0
[  294.614394][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1456'.
[  294.643081][   T27] audit: type=1800 audit(2000000027.709:37): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1456" name="file2" dev="loop9" ino=16 res=0 errno=0
[  294.850716][ T7347] EXT4-fs (loop9): unmounting filesystem.
[  295.015061][T10310] program syz.9.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  295.066660][T10312] program syz.9.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  295.136809][T10307] bond1 (unregistering): Released all slaves
[  297.384691][T10345] loop6: detected capacity change from 0 to 131072
[  297.419070][T10345] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  297.427259][T10345] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  297.441274][T10345] F2FS-fs (loop6): invalid crc value
[  297.518095][T10345] F2FS-fs (loop6): Found nat_bits in checkpoint
[  297.597724][T10345] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  297.604852][T10345] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  300.342493][T10412] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  304.051893][T10481] loop3: detected capacity change from 0 to 40427
[  304.126550][T10481] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  304.143888][T10481] F2FS-fs (loop3): inline encryption not supported
[  304.167401][T10481] F2FS-fs (loop3): invalid crc value
[  304.186476][T10481] F2FS-fs (loop3): Found nat_bits in checkpoint
[  304.232181][T10509] overlayfs: failed to clone upperpath
[  304.351689][T10481] F2FS-fs (loop3): Start checkpoint disabled!
[  304.463290][T10481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  304.524607][T10515] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1511'.
[  304.579701][T10515] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.587244][T10515] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.706750][T10519] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1511'.
[  304.742737][T10519] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.750085][T10519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.757644][T10519] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.764845][T10519] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.784039][T10519] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1511'.
[  304.809651][ T4492] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_inode+0x531/0x760
[  304.836956][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'.
[  304.876800][T10519] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.884118][T10519] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.043289][ T4274] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  305.243128][ T4274] usb 7-1: Using ep0 maxpacket: 16
[  305.252748][ T4274] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  305.293268][ T4274] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  305.314268][ T4274] usb 7-1: Product: syz
[  305.318583][ T4274] usb 7-1: Manufacturer: syz
[  305.353114][ T4274] usb 7-1: SerialNumber: syz
[  305.374032][ T4274] usb 7-1: config 0 descriptor??
[  305.406429][T10545] loop9: detected capacity change from 0 to 512
[  305.464693][T10545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  305.578416][T10545] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1519: iget: bad i_size value: 38620345925642
[  305.593812][ T4274] usb 7-1: USB disconnect, device number 16
[  305.638896][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.658740][T10545] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1519: couldn't read orphan inode 15 (err -117)
[  305.671963][T10545] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  305.857928][T10545] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1519: bg 0: block 5: invalid block bitmap
[  305.891579][T10545] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 652 with error 28
[  305.939771][T10545] EXT4-fs (loop9): This should not happen!! Data will be lost
[  305.939771][T10545] 
[  305.973926][T10545] EXT4-fs (loop9): Total free blocks count 0
[  305.979975][T10545] EXT4-fs (loop9): Free/Dirty block details
[  305.997696][T10545] EXT4-fs (loop9): free_blocks=0
[  306.013733][T10545] EXT4-fs (loop9): dirty_blocks=656
[  306.023104][T10545] EXT4-fs (loop9): Block reservation details
[  306.040136][T10545] EXT4-fs (loop9): i_reserved_data_blocks=656
[  306.261045][ T7347] EXT4-fs (loop9): unmounting filesystem.
[  306.412409][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1525'.
[  307.435244][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1532'.
[  309.205212][T10651] loop9: detected capacity change from 0 to 128
[  309.350724][T10651] syz.9.1548: attempt to access beyond end of device
[  309.350724][T10651] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128
[  309.636388][T10651] syz.9.1548: attempt to access beyond end of device
[  309.636388][T10651] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128
[  311.058567][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.095646][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.106783][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.115044][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.124657][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  311.132530][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.216979][T10713] overlayfs: failed to clone upperpath
[  311.525669][T10707] chnl_net:caif_netlink_parms(): no params data found
[  311.857747][T10707] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.912193][T10707] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.930530][T10707] device bridge_slave_0 entered promiscuous mode
[  311.950540][T10707] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.966466][T10707] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.999883][T10707] device bridge_slave_1 entered promiscuous mode
[  312.369676][T10752] device wg1 entered promiscuous mode
[  312.922373][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.956736][T10754] netlink: 'syz.4.1572': attribute type 10 has an invalid length.
[  312.976339][T10754] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  312.988427][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.050653][T10707] team0: Port device team_slave_0 added
[  313.064695][T10707] team0: Port device team_slave_1 added
[  313.086486][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.098196][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.124835][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.142511][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.160007][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.215187][ T4284] Bluetooth: hci1: command 0x0409 tx timeout
[  313.215823][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.382583][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1577'.
[  313.398714][T10707] device hsr_slave_0 entered promiscuous mode
[  313.434930][T10707] device hsr_slave_1 entered promiscuous mode
[  313.443349][T10707] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.451052][T10707] Cannot create hsr debugfs directory
[  313.962063][T10799] loop9: detected capacity change from 0 to 512
[  314.005492][T10799] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  314.090674][T10799] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  314.099851][ T4284] Bluetooth: hci4: command 0x0406 tx timeout
[  314.124289][T10799] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.327669][ T8360] udevd[8360]: incorrect ext4 checksum on /dev/loop9
[  314.507402][T10814] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.1583: dx entry: limit 0 != root limit 252
[  314.520753][ T5884] udevd[5884]: incorrect ext4 checksum on /dev/loop9
[  314.573753][T10814] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1583: Corrupt directory, running e2fsck is recommended
[  314.758413][ T8360] udevd[8360]: incorrect ext4 checksum on /dev/loop9
[  314.808416][ T7347] EXT4-fs (loop9): unmounting filesystem.
[  314.887526][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1587'.
[  315.293385][ T4284] Bluetooth: hci1: command 0x041b tx timeout
[  315.597453][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1591'.
[  315.610017][T10707] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.643853][T10707] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  315.664643][T10707] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  315.693718][T10707] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  315.870036][T10707] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.906542][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  315.921764][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  315.958844][T10707] 8021q: adding VLAN 0 to HW filter on device team0
[  316.150992][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  316.160496][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  316.169161][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.176405][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.185903][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  316.199793][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  316.209117][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.216463][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.233714][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  316.242884][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  316.284137][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  316.298579][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  316.311481][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  316.322373][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  316.360750][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  316.387323][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  316.500181][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  316.520835][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  316.549922][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  316.580011][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  316.607560][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  316.660860][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1600'.
[  317.135893][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  317.142274][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  317.330995][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.339358][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.367621][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.374587][ T4284] Bluetooth: hci1: command 0x040f tx timeout
[  317.424741][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  317.451359][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  317.523883][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  317.538512][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  317.555257][T10707] device veth0_vlan entered promiscuous mode
[  317.562386][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  317.581179][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  317.608084][T10707] device veth1_vlan entered promiscuous mode
[  317.699321][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  317.718113][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  317.729040][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  317.742566][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  317.765756][T10707] device veth0_macvtap entered promiscuous mode
[  317.778619][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  317.791763][T10707] device veth1_macvtap entered promiscuous mode
[  317.818405][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.831205][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.846322][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.871023][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.882516][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.890400][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  317.915319][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  317.928511][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.953364][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.973139][ T4648] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  317.978206][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.995132][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.012889][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.027165][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  318.038731][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  318.052627][T10707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.066896][T10707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.077690][T10707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.089235][T10707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.102725][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'.
[  318.136260][T10922] 8021q: adding VLAN 0 to HW filter on device team1
[  318.176205][ T4648] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  318.198654][ T4648] usb 10-1: config 0 has no interface number 0
[  318.223142][ T4648] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  318.267065][ T4648] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  318.305316][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.325074][ T4648] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  318.326550][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.361985][ T4648] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.371351][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  318.393337][ T4648] usb 10-1: Product: syz
[  318.397643][ T4648] usb 10-1: Manufacturer: syz
[  318.402346][ T4648] usb 10-1: SerialNumber: syz
[  318.415358][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.425907][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.444564][ T4648] usb 10-1: config 0 descriptor??
[  318.450243][T10909] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  318.455290][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  318.476899][T10909] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  318.508353][ T4648] smsc95xx v2.0.0
[  318.603723][T10928] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1612'.
[  318.733931][T10909] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  318.764480][T10909] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  318.921649][T10949] loop1: detected capacity change from 0 to 256
[  318.987649][ T4648] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  319.013058][ T4648] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  319.453399][ T4284] Bluetooth: hci1: command 0x0419 tx timeout
[  319.979842][T10986] tipc: Failed to remove unknown binding: 66,1,1/0:1150865205/1150865207
[  320.020315][T10986] tipc: Failed to remove unknown binding: 66,1,1/0:1150865205/1150865207
[  320.036915][T10986] tipc: Failed to remove unknown binding: 66,1,1/0:1150865205/1150865207
[  320.192545][   T27] audit: type=1326 audit(2000000053.309:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.253192][   T27] audit: type=1326 audit(2000000053.309:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.343433][   T27] audit: type=1326 audit(2000000053.309:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.414029][   T27] audit: type=1326 audit(2000000053.309:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.437811][ T4648] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[  320.466158][   T27] audit: type=1326 audit(2000000053.309:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.479946][ T4648] smsc95xx: probe of 10-1:0.67 failed with error -71
[  320.548619][   T27] audit: type=1326 audit(2000000053.309:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.557645][ T4648] usb 10-1: USB disconnect, device number 3
[  320.622180][   T27] audit: type=1326 audit(2000000053.309:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.706709][   T27] audit: type=1326 audit(2000000053.309:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.760740][   T27] audit: type=1326 audit(2000000053.309:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  320.803918][   T27] audit: type=1326 audit(2000000053.309:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10989 comm="syz.4.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7fc00000
[  321.431493][T11038] loop9: detected capacity change from 0 to 256
[  323.332382][T11091] loop9: detected capacity change from 0 to 128
[  323.378258][T11091] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  323.492773][T11091] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  323.593859][T11091] ext2 filesystem being mounted at /164/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.353294][ T7347] EXT4-fs (loop9): unmounting filesystem.
[  325.366531][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  325.402712][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  325.413304][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  325.446096][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  325.455694][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  325.465241][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  325.751790][ T4847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.936122][ T4847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.008360][T11135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  326.050256][T11135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  326.073655][T11135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  326.225238][ T4847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.243781][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1666'.
[  326.322786][ T4847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.345434][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1666'.
[  326.583516][T11113] chnl_net:caif_netlink_parms(): no params data found
[  326.754622][T11165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.927378][T11113] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.943867][T11113] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.963955][T11113] device bridge_slave_0 entered promiscuous mode
[  327.066465][T11113] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.075016][T11113] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.083768][T11113] device bridge_slave_1 entered promiscuous mode
[  327.166576][T11113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.180998][T11113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.191523][   T27] kauditd_printk_skb: 55 callbacks suppressed
[  327.191539][   T27] audit: type=1326 audit(2000000060.321:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.251006][   T27] audit: type=1326 audit(2000000060.321:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.274211][   T27] audit: type=1326 audit(2000000060.351:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.301443][   T27] audit: type=1326 audit(2000000060.351:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.374561][T11113] team0: Port device team_slave_0 added
[  327.383297][   T27] audit: type=1326 audit(2000000060.351:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.412039][   T27] audit: type=1326 audit(2000000060.351:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.498828][   T27] audit: type=1326 audit(2000000060.351:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.534425][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[  327.538608][   T27] audit: type=1326 audit(2000000060.351:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.582687][   T27] audit: type=1326 audit(2000000060.351:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.587715][T11113] team0: Port device team_slave_1 added
[  327.706655][   T27] audit: type=1326 audit(2000000060.351:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11180 comm="syz.8.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  327.895196][T11113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.907715][T11113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.943528][T11113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.999162][ T4533] bond0: (slave bridge0): interface is now down
[  328.016973][ T4533] bond0: (slave wlan1): interface is now down
[  328.024543][T11207] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.103386][T11113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.114497][T11113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.151810][T11113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.178201][T11214] loop1: detected capacity change from 0 to 512
[  328.181014][ T4325] bond0: (slave bridge0): link status definitely down, disabling slave
[  328.227952][ T4325] bond0: (slave wlan1): link status definitely down, disabling slave
[  328.277584][ T4325] bond0: now running without any active interface!
[  328.326155][T11214] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  328.424757][T11214] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.579019][T11113] device hsr_slave_0 entered promiscuous mode
[  328.588406][T11113] device hsr_slave_1 entered promiscuous mode
[  328.595976][T11113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  328.604933][T11113] Cannot create hsr debugfs directory
[  328.611730][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1688'.
[  329.149239][ T4847] device hsr_slave_0 left promiscuous mode
[  329.159830][ T4847] device hsr_slave_1 left promiscuous mode
[  329.189463][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.197273][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.401716][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.409606][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.417493][ T4847] device bridge_slave_1 left promiscuous mode
[  329.424131][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.449320][ T4847] device bridge_slave_0 left promiscuous mode
[  329.465843][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.513797][ T4847] device veth1_macvtap left promiscuous mode
[  329.520491][ T4847] device veth0_macvtap left promiscuous mode
[  329.526773][ T4847] device veth1_vlan left promiscuous mode
[  329.540569][ T4847] device veth0_vlan left promiscuous mode
[  329.619020][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[  329.658192][T10707] EXT4-fs (loop1): unmounting filesystem.
[  329.918356][T11251] loop1: detected capacity change from 0 to 128
[  329.981084][T11251] FAT-fs (loop1): Directory bread(block 524322) failed
[  330.004885][T11251] FAT-fs (loop1): Directory bread(block 524323) failed
[  330.044199][T11251] FAT-fs (loop1): Directory bread(block 524324) failed
[  330.054356][T11251] FAT-fs (loop1): Directory bread(block 524325) failed
[  330.088762][T11251] FAT-fs (loop1): Directory bread(block 524326) failed
[  330.098725][T11251] FAT-fs (loop1): Directory bread(block 524327) failed
[  330.118607][T11251] FAT-fs (loop1): Directory bread(block 524328) failed
[  330.136052][T11251] FAT-fs (loop1): Directory bread(block 524329) failed
[  330.273360][T11258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4273022513 (8546045026 ns) > initial count (2701865562 ns). Using initial count to start timer.
[  331.526433][ T4847] team0 (unregistering): Port device team_slave_1 removed
[  331.621577][ T4847] team0 (unregistering): Port device team_slave_0 removed
[  331.689957][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[  331.793610][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.936852][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.029617][T11297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.140325][T11298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.205007][T11297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.568431][ T4847] bond0 (unregistering): Released all slaves
[  332.702554][T11247] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  332.715812][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1709'.
[  333.051855][ T4286] Bluetooth: hci4: unexpected event for opcode 0x2010
[  333.424878][T11300] infiniband syz1: set down
[  333.434192][T11300] infiniband syz1: added syz_tun
[  333.629626][T11300] RDS/IB: syz1: added
[  333.651038][T11300] smc: adding ib device syz1 with port count 1
[  333.707328][T11300] smc:    ib device syz1 port 1 has pnetid 
[  333.778523][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[  334.799114][T11113] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  334.831179][T11113] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  335.230749][T11113] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  335.472466][T11113] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  335.648333][T11113] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.667604][T11113] 8021q: adding VLAN 0 to HW filter on device team0
[  335.684776][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  335.698518][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  335.707622][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  335.719475][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  335.743317][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.750509][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.766410][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  335.786994][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  335.798757][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.805954][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.824099][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  335.841174][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  335.864003][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  335.889103][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  335.925090][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  335.943122][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  335.959034][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  335.972933][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  335.991546][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  336.001248][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  336.017765][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  336.048590][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  336.079791][T11113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  336.618879][T11113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.650702][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.659035][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  336.706263][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  336.739132][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  336.791637][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.810792][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.841531][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.861792][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.889028][T11113] device veth0_vlan entered promiscuous mode
[  336.917910][T11113] device veth1_vlan entered promiscuous mode
[  337.839639][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  337.854813][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  337.949094][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.988870][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  338.019258][T11113] device veth0_macvtap entered promiscuous mode
[  338.051281][T11113] device veth1_macvtap entered promiscuous mode
[  338.121727][T11113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.164203][T11113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.205326][T11113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.244391][T11113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.278289][T11113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.291066][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  338.308583][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  338.326274][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.339862][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.351237][T11113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.366204][T11113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.388805][T11113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.406385][T11113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.422029][T11113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.453670][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.469554][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.503607][T11113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.529815][T11113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.576753][T11113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.605659][T11113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.924300][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.932169][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.018205][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  339.053115][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.078913][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.105403][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  339.327066][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'.
[  339.401266][T11450] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  339.419549][T11450] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  339.433339][T11450] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  339.453415][T11450] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  339.466936][T11450] device geneve2 entered promiscuous mode
[  339.475708][T11451] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  339.521271][T11456] netlink: 'syz.2.1759': attribute type 11 has an invalid length.
[  339.915183][T11469] loop1: detected capacity change from 0 to 1024
[  339.951203][T11469] EXT4-fs: Ignoring removed orlov option
[  340.074398][T11469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  340.090330][T11477] overlayfs: failed to clone upperpath
[  340.857210][T10707] EXT4-fs (loop1): unmounting filesystem.
[  340.892614][T11498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1771'.
[  340.987447][T11498] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.994826][T11498] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.193958][T11502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1772'.
[  341.216967][T11502] device ip6gre1 entered promiscuous mode
[  341.438274][T11505] netlink: 'syz.1.1772': attribute type 6 has an invalid length.
[  341.486334][T11505] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1772'.
[  341.529180][T11498] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1771'.
[  341.556656][T11498] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.563921][T11498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.571500][T11498] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.578671][T11498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.663973][T11498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1771'.
[  341.687083][T11498] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.694389][T11498] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.242452][ T4312] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  342.432449][ T4312] usb 2-1: Using ep0 maxpacket: 16
[  342.439942][ T4312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.470777][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  342.512700][ T4312] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  342.532056][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.572260][ T4312] usb 2-1: Product: syz
[  342.585314][ T4312] usb 2-1: Manufacturer: syz
[  342.592941][ T4312] usb 2-1: SerialNumber: syz
[  343.360706][T11518] loop1: detected capacity change from 0 to 512
[  343.403643][T11518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  343.476417][T11518] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  343.503450][T11518] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  344.464950][T11518] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  344.490678][T11518] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  344.557489][T11518] EXT4-fs (loop1): failed to initialize system zone (-117)
[  344.574218][T11518] EXT4-fs (loop1): mount failed
[  345.351332][ T4312] usb 2-1: 0:2 : does not exist
[  345.366737][ T4312] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  345.493852][ T4312] usb 2-1: USB disconnect, device number 7
[  346.145525][T11613] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1800'.
[  346.204790][   T27] kauditd_printk_skb: 21 callbacks suppressed
[  346.204805][   T27] audit: type=1326 audit(2000000079.340:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.262655][T11617] overlayfs: failed to clone upperpath
[  346.269896][   T27] audit: type=1326 audit(2000000079.340:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.330522][   T27] audit: type=1326 audit(2000000079.390:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.396548][   T27] audit: type=1326 audit(2000000079.390:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.444758][   T27] audit: type=1326 audit(2000000079.390:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.518870][   T27] audit: type=1326 audit(2000000079.400:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.580778][   T27] audit: type=1326 audit(2000000079.400:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.660213][   T27] audit: type=1326 audit(2000000079.400:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  346.730862][   T27] audit: type=1326 audit(2000000079.400:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa86f59b607 code=0x7ffc0000
[  346.754933][   T27] audit: type=1326 audit(2000000079.400:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.4.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  347.197694][T11660] overlayfs: failed to clone lowerpath
[  347.227018][T11660] overlayfs: failed to clone upperpath
[  347.253986][T11660] overlayfs: failed to clone lowerpath
[  347.474742][T11675] overlayfs: failed to clone upperpath
[  347.676573][T11682] tipc: Failed to remove unknown binding: 66,0,0/2886997007:189163500/189163502
[  347.701829][T11682] tipc: Failed to remove unknown binding: 66,0,0/2886997007:189163500/189163501
[  347.726576][T11682] tipc: Failed to remove unknown binding: 66,0,0/2886997007:189163500/189163502
[  347.762426][T11682] tipc: Failed to remove unknown binding: 66,0,0/2886997007:189163500/189163501
[  349.280180][T11709] device wg1 entered promiscuous mode
[  349.616513][T11713] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  349.677121][T11713] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  349.707094][T11713] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  349.726393][T11713] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  349.748282][T11713] device geneve2 entered promiscuous mode
[  350.115369][T11738] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  352.394931][   T27] kauditd_printk_skb: 15 callbacks suppressed
[  352.394947][   T27] audit: type=1326 audit(2000000085.533:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  352.491945][   T27] audit: type=1326 audit(2000000085.533:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  352.591330][   T27] audit: type=1326 audit(2000000085.543:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  352.651097][   T27] audit: type=1326 audit(2000000085.543:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  352.752035][   T27] audit: type=1326 audit(2000000085.573:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  352.849261][   T27] audit: type=1326 audit(2000000085.573:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  353.263285][   T27] audit: type=1326 audit(2000000085.573:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  353.644026][T11802] xt_CT: No such helper "snmp_trap"
[  353.781427][   T27] audit: type=1326 audit(2000000085.573:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  353.867996][T11810] overlayfs: failed to clone upperpath
[  353.886851][   T27] audit: type=1326 audit(2000000085.573:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  353.947310][   T27] audit: type=1326 audit(2000000085.573:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  354.464039][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1855'.
[  355.243995][T11851] rdma_rxe: rxe_register_device failed with error -23
[  355.338074][T11851] rdma_rxe: failed to add syz_tun
[  359.204854][   T27] kauditd_printk_skb: 53 callbacks suppressed
[  359.204871][   T27] audit: type=1804 audit(2000000092.347:222): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1881" name="/newroot/26/file0" dev="fuse" ino=1 res=1 errno=0
[  359.715641][T11931] loop2: detected capacity change from 0 to 2048
[  359.771190][T11931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.670734][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1885'.
[  360.769303][T11940] 8021q: adding VLAN 0 to HW filter on device team1
[  361.576941][T11948] gfs2: gfs2 mount does not exist
[  362.240879][T11984] netlink: 'syz.9.1897': attribute type 11 has an invalid length.
[  362.320986][T11994] 9pnet: p9_errstr2errno: server reported unknown error �@��?���߾�I�퉲r��6��~��D��m�ʄ!\
[  363.052523][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1901'.
[  363.292818][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'.
[  363.363332][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1902'.
[  364.237879][T12053] netlink: 'syz.2.1911': attribute type 10 has an invalid length.
[  364.301358][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1911'.
[  365.555727][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1917'.
[  367.648872][T12101] netlink: 'syz.9.1929': attribute type 2 has an invalid length.
[  368.349950][T12101] netlink: 'syz.9.1929': attribute type 1 has an invalid length.
[  369.016210][T12129] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  370.099336][   T27] audit: type=1804 audit(2000000103.252:223): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1950" name="/newroot/61/file0" dev="fuse" ino=1 res=1 errno=0
[  371.182911][T12197] loop2: detected capacity change from 0 to 1024
[  371.219898][T12197] EXT4-fs: Ignoring removed bh option
[  371.297418][T12197] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  371.371362][T12197] EXT4-fs error (device loop2): __ext4_remount:6644: comm syz.2.1957: Abort forced by user
[  371.460240][T12197] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  371.511935][T12197] netlink: 'syz.2.1957': attribute type 9 has an invalid length.
[  371.547785][T12197] netlink: 'syz.2.1957': attribute type 6 has an invalid length.
[  371.691635][T11113] EXT4-fs (loop2): unmounting filesystem.
[  372.674524][T12215] overlayfs: failed to clone upperpath
[  373.983282][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1968'.
[  374.038638][T12237] device bond3 entered promiscuous mode
[  374.044697][T12237] 8021q: adding VLAN 0 to HW filter on device bond3
[  375.101234][T12241] device gretap1 entered promiscuous mode
[  375.116873][T12241] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  375.179702][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  375.289050][T12252] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.318372][T12252] team0: Port device bond0 added
[  375.333515][T12255] netlink: 'syz.4.1971': attribute type 16 has an invalid length.
[  375.343556][T12255] netlink: 'syz.4.1971': attribute type 17 has an invalid length.
[  376.455353][ T4648] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  376.648201][ T4648] usb 3-1: Using ep0 maxpacket: 16
[  376.654965][ T4648] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.699975][ T4648] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  376.744540][ T4648] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  376.783954][ T4648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.811220][ T4648] usb 3-1: Product: syz
[  376.825469][ T4648] usb 3-1: Manufacturer: syz
[  376.840107][ T4648] usb 3-1: SerialNumber: syz
[  377.076492][ T4648] usb 3-1: 0:2 : does not exist
[  377.101794][ T4648] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  377.190358][ T4648] usb 3-1: USB disconnect, device number 4
[  378.584621][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  378.590962][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  380.756809][T12378] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2006'.
[  384.226881][T12416] syz.9.2015 (12416) used greatest stack depth: 19888 bytes left
[  384.364769][T12428] overlayfs: failed to clone upperpath
[  386.245946][   T27] audit: type=1804 audit(2000000119.400:224): pid=12463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2030" name="bus" dev="ramfs" ino=65247 res=1 errno=0
[  386.316506][   T27] audit: type=1804 audit(2000000119.470:225): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2030" name="bus" dev="ramfs" ino=65247 res=1 errno=0
[  386.715737][T12470] loop2: detected capacity change from 0 to 2048
[  386.717429][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'.
[  387.249727][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'.
[  387.279639][T12493] netlink: 'syz.8.2037': attribute type 3 has an invalid length.
[  387.301949][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'.
[  387.391716][T12497] netlink: 'syz.8.2037': attribute type 10 has an invalid length.
[  387.414435][T12497] 8021q: adding VLAN 0 to HW filter on device team0
[  387.493148][T12497] bond0: (slave team0): Enslaving as an active interface with an up link
[  388.393738][T12506] xt_time: invalid argument - start or stop time greater than 23:59:59
[  389.203531][T12514] overlayfs: failed to clone upperpath
[  389.301050][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2043'.
[  389.349255][T12522] binder: 12521:12522 ioctl c0306201 200000000140 returned -14
[  390.392869][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2048'.
[  390.438471][T12530] device bridge_slave_1 left promiscuous mode
[  390.444787][T12530] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.657374][T12530] device bridge_slave_0 left promiscuous mode
[  391.690618][T12530] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.158371][T12554] loop1: detected capacity change from 0 to 512
[  392.202529][T12554] EXT4-fs: Ignoring removed oldalloc option
[  392.245072][T12554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  392.685582][T12560] xt_time: invalid argument - start or stop time greater than 23:59:59
[  392.761037][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2057'.
[  392.782544][T12554] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2055: inode has both inline data and extents flags
[  392.850903][T12554] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2055: couldn't read orphan inode 15 (err -117)
[  392.891347][T12554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  392.965018][T12554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters
[  393.272134][T10707] EXT4-fs (loop1): unmounting filesystem.
[  395.106718][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'.
[  395.191875][T12611] IPv6: addrconf: prefix option has invalid lifetime
[  396.418931][T12625] loop2: detected capacity change from 0 to 512
[  396.652903][T12637] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  399.752643][T12687] netlink: 'syz.2.2087': attribute type 1 has an invalid length.
[  400.040329][T12688] bond1: (slave gretap1): making interface the new active one
[  400.075165][T12688] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  400.271039][T12704] loop1: detected capacity change from 0 to 128
[  400.319987][T12704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  400.346596][T12704] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  400.410685][T12704] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  400.682140][T12715] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  400.918146][T10707] EXT4-fs (loop1): unmounting filesystem.
[  402.372826][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2101'.
[  405.304043][T12799] debugfs: Directory 'netdev:nicvf0' with parent '
' already present!
[  405.820758][ T4316] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  406.010620][ T4316] usb 2-1: Using ep0 maxpacket: 32
[  406.017854][ T4316] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  406.028173][ T4316] usb 2-1: config 0 has no interface number 0
[  406.049350][ T4316] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  406.072764][ T4316] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  406.085935][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.095363][ T4316] usb 2-1: Product: syz
[  406.100068][ T4316] usb 2-1: Manufacturer: syz
[  406.108178][ T4316] usb 2-1: SerialNumber: syz
[  406.126534][ T4316] usb 2-1: config 0 descriptor??
[  406.137376][T12810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  406.365119][T12810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  407.697243][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2133'.
[  407.787640][ T4316] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  407.826864][ T4316] asix: probe of 2-1:0.188 failed with error -71
[  407.847166][ T4316] usb 2-1: USB disconnect, device number 8
[  408.017745][T12889] netlink: 'syz.9.2134': attribute type 1 has an invalid length.
[  408.075209][T12889] 8021q: adding VLAN 0 to HW filter on device bond4
[  408.095661][T12892] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  408.159205][T12893] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  408.449491][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  411.775864][T12937] loop2: detected capacity change from 0 to 4096
[  411.860758][T12937] NILFS (loop2): invalid segment: Checksum error in segment payload
[  411.913010][T12937] NILFS (loop2): trying rollback from an earlier position
[  411.951569][T12937] NILFS (loop2): recovery complete
[  411.977262][T12954] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  416.946721][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2175'.
[  417.831865][T13060] VFS: Mount too revealing
[  420.081088][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2186'.
[  420.147843][T13097] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  420.156790][T13097] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  420.165788][T13097] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  420.174620][T13097] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  420.233934][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2186'.
[  421.241528][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2196'.
[  422.993289][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2200'.
[  423.085982][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2200'.
[  423.127702][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2200'.
[  423.406090][T13168] netlink: 'syz.9.2207': attribute type 4 has an invalid length.
[  427.131160][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2232'.
[  431.983942][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'.
[  431.997046][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'.
[  432.006233][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'.
[  432.016944][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'.
[  432.027087][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'.
[  433.467036][T13366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2259'.
[  437.111279][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2268'.
[  437.149264][T13407] unsupported nlmsg_type 40
[  437.154981][T13409] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2271'.
[  437.184214][T13409] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  437.260043][T13415] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2271'.
[  437.278614][T13415] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  438.757211][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  439.969098][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  439.975495][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  440.113009][T13474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2284'.
[  440.571045][T13496] overlayfs: failed to clone upperpath
[  441.698119][T13524] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  445.653685][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2314'.
[  445.755930][T13585] device ip6gre1 entered promiscuous mode
[  447.174438][T13593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2316'.
[  447.422803][T13605] binder: 13603:13605 ioctl c0306201 0 returned -14
[  447.992489][T13629] loop2: detected capacity change from 0 to 512
[  448.112174][T13629] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[  448.169218][T13629] EXT4-fs (loop2): group descriptors corrupted!
[  448.451153][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'.
[  449.465545][   T27] audit: type=1804 audit(2000000438.638:226): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2330" name="/newroot/124/file0" dev="fuse" ino=1 res=1 errno=0
[  449.674674][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2331'.
[  450.133097][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'.
[  451.441181][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2343'.
[  452.423544][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[  452.555642][T13738] overlayfs: failed to clone upperpath
[  453.610458][T13753] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  455.968334][T13808] netlink: 'syz.4.2367': attribute type 8 has an invalid length.
[  456.060307][T13814] loop1: detected capacity change from 0 to 1024
[  456.186076][T13814] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  457.202687][T13814] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3850: comm syz.1.2371: Allocating blocks 497-513 which overlap fs metadata
[  457.267696][ T4648] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  457.301565][T13814] EXT4-fs (loop1): pa ffff888058e878c0: logic 80, phys. 209, len 19
[  457.310641][T13814] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1
[  458.179766][ T4648] usb 3-1: Using ep0 maxpacket: 32
[  458.201341][ T4648] usb 3-1: config 250 has an invalid interface number: 230 but max is 0
[  458.210994][ T4648] usb 3-1: config 250 has no interface number 0
[  458.224159][ T4648] usb 3-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  458.234479][ T4648] usb 3-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  458.245715][ T4648] usb 3-1: config 250 interface 230 has no altsetting 0
[  458.262143][ T4648] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  458.283822][ T4648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.292472][T13852] overlayfs: failed to clone upperpath
[  458.299700][ T4648] usb 3-1: Product: syz
[  458.307395][ T4648] usb 3-1: Manufacturer: syz
[  458.312126][ T4648] usb 3-1: SerialNumber: syz
[  458.344324][T10707] EXT4-fs (loop1): unmounting filesystem.
[  458.541100][ T4648] ums-usbat 3-1:250.230: USB Mass Storage device detected
[  458.595871][ T4648] ums-usbat 3-1:250.230: Quirks match for vid 0781 pid 0005: 1
[  458.663716][ T4648] ums-usbat: probe of 3-1:250.230 failed with error -5
[  458.716968][ T4648] usb 3-1: USB disconnect, device number 5
[  459.697513][T13877] overlayfs: failed to clone upperpath
[  460.658979][T13885] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  462.464821][T13922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.517816][T13922] device batadv_slave_0 entered promiscuous mode
[  462.588939][T13926] loop2: detected capacity change from 0 to 512
[  462.651711][T13926] EXT4-fs: Ignoring removed oldalloc option
[  462.743936][T13926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  462.802546][T13926] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  462.820031][T13926] EXT4-fs (loop2): 1 truncate cleaned up
[  462.826944][T13926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  463.503531][T13945] netlink: 'syz.8.2400': attribute type 8 has an invalid length.
[  463.550471][T11113] EXT4-fs (loop2): unmounting filesystem.
[  472.677732][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2439'.
[  475.157138][T14115] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  478.633103][T14165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2456'.
[  479.575028][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2457'.
[  480.347789][T14180] device bond2 entered promiscuous mode
[  480.442805][T14187] device bond_slave_0 entered promiscuous mode
[  480.449935][T14187] device bond_slave_1 entered promiscuous mode
[  480.472040][T14187] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  480.490098][T14192] loop1: detected capacity change from 0 to 256
[  480.503745][T14187] bond2: (slave macvlan2): making interface the new active one
[  480.535848][T14187] device macvlan2 entered promiscuous mode
[  480.552010][T14187] device bond0 entered promiscuous mode
[  480.559793][T14187] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  482.532837][   T27] audit: type=1326 audit(2000000471.708:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz.4.2466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x0
[  484.299711][T14234] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2473'.
[  486.486604][T14270] xt_nat: multiple ranges no longer supported
[  489.659445][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2487'.
[  489.725096][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2487'.
[  491.841271][T14348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2497'.
[  492.252823][   T27] audit: type=1326 audit(2000000481.428:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14351 comm="syz.9.2508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c1d9c799 code=0x0
[  493.020267][T14366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2512'.
[  495.927624][T14409] xt_hashlimit: max too large, truncated to 1048576
[  495.935258][T14409] xt_limit: Overflow, try lower: 0/0
[  495.958620][T14408] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2509'.
[  496.658986][T14408] tc_dump_action: action bad kind
[  496.670776][T14402] device syzkaller0 entered promiscuous mode
[  496.787371][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'.
[  496.803540][T14412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  497.056755][T14412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  497.143103][T14420] kvm: vcpu 0: requested 768 ns lapic timer period limited to 200000 ns
[  498.032230][   T27] audit: type=1326 audit(2000000487.168:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14428 comm="syz.8.2513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x0
[  498.267488][T14430] kvm: pic: non byte write
[  501.396603][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  501.403000][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  501.442806][T14472] netlink: 'syz.4.2527': attribute type 4 has an invalid length.
[  501.467009][T14472] netlink: 'syz.4.2527': attribute type 4 has an invalid length.
[  503.265043][   T27] audit: type=1326 audit(2000000492.148:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14499 comm="syz.2.2528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f025a39c799 code=0x0
[  510.332515][T14576] device bond5 entered promiscuous mode
[  510.906230][T14581] device bond_slave_0 entered promiscuous mode
[  510.912520][T14581] device bond_slave_1 entered promiscuous mode
[  510.919526][T14581] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  510.951113][T14581] bond5: (slave macvlan2): making interface the new active one
[  511.011490][T14581] device macvlan2 entered promiscuous mode
[  511.041931][T14581] device bond0 entered promiscuous mode
[  511.067230][T14581] bond5: (slave macvlan2): Enslaving as an active interface with an up link
[  511.308239][T14594] bond0: (slave team0): Releasing backup interface
[  511.594575][T14594] bond1: (slave bond2): Releasing backup interface
[  512.792860][T14622] loop2: detected capacity change from 0 to 256
[  516.175646][T14657] netlink: 'syz.8.2568': attribute type 10 has an invalid length.
[  516.210768][T14660] binder: BINDER_SET_CONTEXT_MGR already set
[  516.260860][T14660] binder: 14659:14660 ioctl 4018620d 2000000002c0 returned -16
[  516.308644][T14657] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  516.785768][T14666] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  517.858124][T14678] loop1: detected capacity change from 0 to 256
[  518.650023][T12596] bond0: (slave bond_slave_0): interface is now down
[  518.663707][T14688] netlink: 'syz.2.2576': attribute type 10 has an invalid length.
[  518.713364][T12596] bond0: (slave bond_slave_1): interface is now down
[  518.756703][ T4847] bond0: (slave bond_slave_0): interface is now down
[  518.803059][ T4847] bond0: (slave bond_slave_1): interface is now down
[  518.834267][   T11] bond0: (slave bond_slave_0): interface is now down
[  518.843887][   T11] bond0: (slave bond_slave_1): interface is now down
[  518.883685][ T4847] bond0: (slave bond_slave_0): interface is now down
[  518.892244][ T4847] bond0: (slave bond_slave_1): interface is now down
[  518.911725][T14688] device syz_tun entered promiscuous mode
[  518.947319][T14695] overlayfs: failed to clone upperpath
[  518.971199][T14688] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  518.980403][ T4847] bond0: (slave bond_slave_0): interface is now down
[  518.996285][ T4847] bond0: (slave bond_slave_1): interface is now down
[  519.013375][ T4847] bond0: (slave syz_tun): interface is now down
[  519.055365][ T4847] bond0: now running without any active interface!
[  519.092751][T14699] device vlan3 entered promiscuous mode
[  519.101624][T14699] device bond0 entered promiscuous mode
[  519.163896][T14699] device wlan1 entered promiscuous mode
[  519.416619][T14706] device bridge2 entered promiscuous mode
[  521.886164][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'.
[  521.895355][T14732] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  522.818313][T14757] device syzkaller0 entered promiscuous mode
[  523.525708][T14768] tipc: Started in network mode
[  523.530728][T14768] tipc: Node identity 0aa558836cf3, cluster identity 4711
[  523.565885][T14768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.568840][ T4286] Bluetooth: hci0: unexpected event for opcode 0x2060
[  523.593246][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'.
[  523.642199][T14753] tipc: Resetting bearer <eth:syzkaller0>
[  523.709600][T14753] tipc: Disabling bearer <eth:syzkaller0>
[  524.826739][   T27] audit: type=1326 audit(2000000514.008:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  524.913107][   T27] audit: type=1326 audit(2000000514.058:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  524.965390][   T27] audit: type=1326 audit(2000000514.058:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  525.885310][   T27] audit: type=1326 audit(2000000514.058:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  526.325986][   T27] audit: type=1326 audit(2000000514.058:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  526.570899][   T27] audit: type=1326 audit(2000000514.058:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  526.750055][   T27] audit: type=1326 audit(2000000514.058:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  526.936915][   T27] audit: type=1326 audit(2000000514.058:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  527.118370][   T27] audit: type=1326 audit(2000000514.058:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  527.677677][   T27] audit: type=1326 audit(2000000514.058:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86f59c799 code=0x7ffc0000
[  529.504138][T14843] syz.4.2620 (14843) used greatest stack depth: 18096 bytes left
[  529.566351][T14848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2628'.
[  532.991249][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'.
[  533.799548][T14903] ipt_REJECT: ECHOREPLY no longer supported.
[  537.182559][T14953] netlink: 'syz.8.2648': attribute type 39 has an invalid length.
[  537.295413][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2651'.
[  537.361242][   T33] smc: removing ib device syz1
[  537.744027][T14974] ptrace attach of "./syz-executor exec"[14976] was attempted by "./syz-executor exec"[14974]
[  541.068020][T15020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2666'.
[  541.189189][T15023] bridge3: port 1(vlan2) entered blocking state
[  541.205970][T15023] bridge3: port 1(vlan2) entered disabled state
[  541.227449][T15023] device vlan2 entered promiscuous mode
[  541.244649][T15023] device bridge0 entered promiscuous mode
[  543.891303][T15062] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2672'.
[  544.535637][T15086] --map-set only usable from mangle table
[  545.997342][T15114] netlink: 'syz.1.2686': attribute type 10 has an invalid length.
[  546.087426][T15114] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  547.013482][   T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  547.294991][   T26] usb 3-1: Using ep0 maxpacket: 32
[  547.312596][   T26] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  547.424836][   T26] usb 3-1: config 0 has no interface number 0
[  547.437161][   T26] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  547.552666][   T26] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  547.562131][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.570363][   T26] usb 3-1: Product: syz
[  547.574807][   T26] usb 3-1: Manufacturer: syz
[  547.580019][   T26] usb 3-1: SerialNumber: syz
[  547.595912][   T26] usb 3-1: config 0 descriptor??
[  547.603107][T15135] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  548.683756][T15135] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  549.238293][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2698'.
[  549.381869][T15161] team0 (unregistering): Port device team_slave_0 removed
[  549.871259][T15161] team0 (unregistering): Port device team_slave_1 removed
[  552.241710][   T26] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  552.258875][   T26] asix: probe of 3-1:0.188 failed with error -71
[  552.269543][   T26] usb 3-1: USB disconnect, device number 6
[  553.183805][ T5499] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  553.366220][ T5499] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  553.483350][ T5499] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  553.498764][ T5499] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  553.513365][ T5499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  553.523630][ T5499] usb 2-1: SerialNumber: syz
[  553.752677][ T5499] usb 2-1: 0:2 : does not exist
[  553.834009][ T5499] usb 2-1: USB disconnect, device number 9
[  554.057235][T13833] udevd[13833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  554.430489][T15305] netlink: 'syz.9.2730': attribute type 11 has an invalid length.
[  555.418690][T15322] overlayfs: failed to clone upperpath
[  558.446648][T15373] xt_CT: You must specify a L4 protocol and not use inversions on it
[  559.650297][T15385] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2753'.
[  559.660546][T15385] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2753'.
[  560.383080][T15395] netlink: 'syz.9.2755': attribute type 1 has an invalid length.
[  560.404513][T15395] 8021q: adding VLAN 0 to HW filter on device bond6
[  560.429952][T15395] bond6: (slave vlan3): making interface the new active one
[  560.439487][T15395] bond6: (slave vlan3): Enslaving as an active interface with an up link
[  560.494578][T13180] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  561.450858][T15405] overlayfs: failed to clone upperpath
[  561.504855][T15407] overlayfs: failed to clone upperpath
[  561.692992][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2760'.
[  562.840162][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  562.846647][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  564.982047][   T27] kauditd_printk_skb: 16 callbacks suppressed
[  564.982062][   T27] audit: type=1326 audit(2000000554.158:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.044214][   T27] audit: type=1326 audit(2000000554.158:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.067539][   T27] audit: type=1326 audit(2000000554.158:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.138367][   T27] audit: type=1326 audit(2000000554.158:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.195814][   T27] audit: type=1326 audit(2000000554.158:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.279771][   T27] audit: type=1326 audit(2000000554.158:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.344330][   T27] audit: type=1326 audit(2000000554.158:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.367248][   T27] audit: type=1326 audit(2000000554.158:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.425686][   T27] audit: type=1326 audit(2000000554.158:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  565.975982][   T27] audit: type=1326 audit(2000000554.158:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.8.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1195f9c799 code=0x7ffc0000
[  567.413490][   T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  567.623405][   T26] usb 3-1: Using ep0 maxpacket: 8
[  567.630863][   T26] usb 3-1: unable to get BOS descriptor or descriptor too short
[  567.655834][   T26] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  567.685242][   T26] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  568.405398][   T26] usb 3-1: config 4 has no interface number 0
[  568.414792][   T26] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  568.424296][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.432331][   T26] usb 3-1: Product: syz
[  568.438302][   T26] usb 3-1: Manufacturer: syz
[  568.443033][   T26] usb 3-1: SerialNumber: syz
[  569.366965][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.473695][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.702931][   T26] usb 3-1: Found UVC 0.02 device syz (04f2:b746)
[  569.719031][   T26] usb 3-1: No valid video chain found.
[  569.726938][   T26] usb 3-1: USB disconnect, device number 7
[  569.912345][T15534] MPTCP: kernel_bind error, err=-99
[  574.117139][T15621] sctp: [Deprecated]: syz.9.2808 (pid 15621) Use of struct sctp_assoc_value in delayed_ack socket option.
[  574.117139][T15621] Use struct sctp_sack_info instead
[  574.273660][ T4286] Bluetooth: hci0: command 0x2016 tx timeout
[  575.807292][T15638] loop2: detected capacity change from 0 to 2048
[  576.120531][T15638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  578.415812][T15651] ptrace attach of "./syz-executor exec"[15652] was attempted by "./syz-executor exec"[15651]
[  579.903460][ T5499] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  580.788042][ T5499] usb 2-1: Using ep0 maxpacket: 32
[  580.888676][T15660] netdevsim netdevsim8: Direct firmware load for /
[  580.888676][T15660]  failed with error -2
[  580.899943][T15660] netdevsim netdevsim8: Falling back to sysfs fallback for: /
[  580.899943][T15660] 
[  580.940314][ T5499] usb 2-1: device descriptor read/all, error -71
[  586.159704][T15719] loop1: detected capacity change from 0 to 256
[  586.452568][T15719] exfat: Deprecated parameter 'namecase'
[  586.777951][T15719] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  587.282848][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  587.282862][   T27] audit: type=1804 audit(2000000576.458:271): pid=15743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2837" name="bus" dev="ramfs" ino=72564 res=1 errno=0
[  590.162910][ T4325] bond2: (slave ip6gretap1): Releasing backup interface
[  593.190108][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2853'.
[  593.264478][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2853'.
[  593.423766][ T4284] Bluetooth: hci4: command 0x2021 tx timeout
[  593.550186][T15828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2855'.
[  594.258064][ T4325] bond0: (slave wlan1): Releasing backup interface
[  594.271547][ T4325] bond0: (slave wlan1): the permanent HWaddr of slave - aa:aa:00:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  596.519650][ T4325] device hsr_slave_0 left promiscuous mode
[  596.538382][ T4325] device hsr_slave_1 left promiscuous mode
[  596.567308][ T4325] bond2 (unregistering): Released all slaves
[  597.314945][ T4325] bond1 (unregistering): Released all slaves
[  602.287052][    C0] vkms_vblank_simulate: vblank timer overrun
[  602.798878][T15925] loop1: detected capacity change from 0 to 512
[  603.574228][T15925] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  603.583994][T15925] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  603.670509][T15925] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.2877: corrupted inode contents
[  603.783670][T15925] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.2877: mark_inode_dirty error
[  603.856036][T15925] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.2877: corrupted inode contents
[  604.201886][T15925] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2877: mark_inode_dirty error
[  605.194898][T10707] EXT4-fs (loop1): unmounting filesystem.
[  605.964851][ T4325] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  606.010171][ T4325] bond0 (unregistering): Released all slaves
[  607.420162][T15958] tipc: Started in network mode
[  607.433378][T15958] tipc: Node identity ac1414aa, cluster identity 4711
[  607.447302][T15958] tipc: Enabled bearer <udp:syz2>, priority 10
[  608.609966][   T26] tipc: Node number set to 2886997162
[  611.156840][T16007] loop2: detected capacity change from 0 to 256
[  611.191502][T16007] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  611.247273][T16006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2897'.
[  611.363785][ T4316] Process accounting resumed
[  611.380854][ T4316] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264)
[  611.762729][ T4316] FAT-fs (loop2): Filesystem has been set read-only
[  612.130831][T16017] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  615.409824][T16076] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  615.778543][T16089] device syzkaller0 entered promiscuous mode
[  622.224898][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'.
[  623.275812][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  623.346483][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  623.376674][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  624.277432][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  624.283825][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  627.133038][T16248] xt_bpf: check failed: parse error
[  633.275348][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2983'.
[  633.302746][T16327] overlayfs: failed to clone upperpath
[  633.592668][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  633.619646][T16322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  639.305021][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'.
[  640.495854][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2994'.
[  641.849944][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  641.863919][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  641.883145][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  641.996030][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  642.004183][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  642.028705][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  642.913741][T16392] bond0: (slave bond_slave_0): Releasing backup interface
[  643.466533][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3002'.
[  643.505991][T16438] bridge4: port 1(vlan2) entered blocking state
[  644.153405][ T4286] Bluetooth: hci5: command 0x0409 tx timeout
[  644.308550][T16438] bridge4: port 1(vlan2) entered disabled state
[  644.421919][T16438] device vlan2 entered promiscuous mode
[  644.427871][T16438] device bridge0 entered promiscuous mode
[  646.193607][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  646.287224][T16414] chnl_net:caif_netlink_parms(): no params data found
[  646.378255][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3005'.
[  648.475420][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  648.891932][T16484] Invalid ELF header type: 3 != 1
[  649.203988][T16484] ptrace attach of "./syz-executor exec"[16485] was attempted by "./syz-executor exec"[16484]
[  650.483843][T16414] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.491195][T16414] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.513631][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  650.525215][T16414] device bridge_slave_0 entered promiscuous mode
[  650.810147][T16414] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.819184][T16414] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.836187][T16414] device bridge_slave_1 entered promiscuous mode
[  653.270462][T12596] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  654.060468][T16414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.086489][T16414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.306247][T12596] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  654.675214][T16414] team0: Port device team_slave_0 added
[  655.775921][T12596] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  655.809114][T16414] team0: Port device team_slave_1 added
[  656.011418][T12596] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  656.084372][T16414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.091408][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.120669][T16414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.142250][T16414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.263692][ T5499] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  656.513372][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.943696][T16414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  657.133594][ T5499] usb 2-1: Using ep0 maxpacket: 8
[  657.142096][ T5499] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  657.156557][T16414] device hsr_slave_0 entered promiscuous mode
[  657.171049][ T5499] usb 2-1: config 0 has no interface number 0
[  657.178926][T16414] device hsr_slave_1 entered promiscuous mode
[  657.183132][ T5499] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  657.564438][ T5499] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024
[  657.575529][T16414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  657.575691][T16414] Cannot create hsr debugfs directory
[  657.589571][ T5499] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  657.598874][ T5499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.614944][ T5499] usb 2-1: config 0 descriptor??
[  657.622406][T16545] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  657.636102][T16560] device vlan4 entered promiscuous mode
[  657.667926][ T5499] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  657.777872][T16567] netlink: 'syz.4.3028': attribute type 11 has an invalid length.
[  657.903976][ T5499] usb 2-1: USB disconnect, device number 12
[  657.910148][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  658.735257][T16572] lo: Caught tx_queue_len zero misconfig
[  659.139099][T16585] loop1: detected capacity change from 0 to 1024
[  659.180552][T16585] EXT4-fs: Ignoring removed nomblk_io_submit option
[  659.324156][T16585] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  660.028700][T16594] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 315: padding at end of block bitmap is not set
[  660.523472][T12596] tipc: Disabling bearer <udp:syz2>
[  661.315627][T12596] tipc: Left network mode
[  661.717274][T10707] EXT4-fs (loop1): unmounting filesystem.
[  663.762749][T16638] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  665.413959][T16659] 8021q: VLANs not supported on vcan0
[  667.049801][T16684] device vlan3 entered promiscuous mode
[  667.061051][T16684] device bridge0 entered promiscuous mode
[  668.303788][T16689] ptrace attach of "./syz-executor exec"[16690] was attempted by "./syz-executor exec"[16689]
[  670.768094][T16703] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  671.006489][T16414] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  671.273744][T16414] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  671.302574][T16414] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  671.550345][T12596] bond0: (slave wlan1): Releasing backup interface
[  671.570363][T12596] device wlan1 left promiscuous mode
[  671.599761][T16414] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  672.105570][T12596] device hsr_slave_0 left promiscuous mode
[  672.131836][T12596] device hsr_slave_1 left promiscuous mode
[  672.736966][T12596] bond3 (unregistering): Released all slaves
[  678.395543][T12596] bond2 (unregistering): Released all slaves
[  679.142154][T12596] bond1 (unregistering): Released all slaves
[  681.246775][T12596] bond0 (unregistering): Released all slaves
[  681.353579][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3083'.
[  681.463789][ T4368] ------------[ cut here ]------------
[  681.470060][ T4368] WARNING: CPU: 0 PID: 4368 at io_uring/io_uring.c:2890 io_ring_exit_work+0x336/0x763
[  681.479855][ T4368] Modules linked in:
[  681.483935][ T4368] CPU: 0 PID: 4368 Comm: kworker/u4:8 Not tainted syzkaller #0
[  681.491585][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  681.501834][ T4368] Workqueue: events_unbound io_ring_exit_work
[  681.508386][ T4368] RIP: 0010:io_ring_exit_work+0x336/0x763
[  681.514166][ T4368] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c d5 5d f7 e9 16 fe ff ff e8 12 d5 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  681.533841][ T4368] RSP: 0018:ffffc9000472fac0 EFLAGS: 00010293
[  681.539936][ T4368] RAX: ffffffff8a249d9e RBX: ffff88805d97b018 RCX: ffff8880766f8000
[  681.547971][ T4368] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000
[  681.555978][ T4368] RBP: ffffc9000472fc30 R08: ffffc9000472fa47 R09: 1ffff920008e5f48
[  681.564000][ T4368] R10: dffffc0000000000 R11: fffff520008e5f49 R12: dffffc0000000000
[  681.571997][ T4368] R13: ffff88805d97b000 R14: 0000000100009451 R15: 0000000100009457
[  681.580005][ T4368] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  681.589055][ T4368] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  681.595684][ T4368] CR2: 000055e1f6750000 CR3: 0000000026ab2000 CR4: 00000000003506f0
[  681.603704][ T4368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  681.611707][ T4368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  681.619734][ T4368] Call Trace:
[  681.623125][ T4368]  <TASK>
[  681.626114][ T4368]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  681.631949][ T4368]  ? _raw_spin_unlock+0x40/0x40
[  681.636850][ T4368]  ? _raw_spin_unlock_irq+0x1f/0x40
[  681.642067][ T4368]  ? process_one_work+0x7b0/0x1160
[  681.647236][ T4368]  process_one_work+0x8a2/0x1160
[  681.652198][ T4368]  ? worker_detach_from_pool+0x240/0x240
[  681.657879][ T4368]  ? _raw_spin_lock_irq+0xb7/0xf0
[  681.662914][ T4368]  ? _raw_spin_lock_irqsave+0x100/0x100
[  681.668503][ T4368]  ? kthread_data+0x4b/0xc0
[  681.673026][ T4368]  worker_thread+0xaa2/0x1270
[  681.677867][ T4368]  kthread+0x29d/0x330
[  681.681946][ T4368]  ? worker_clr_flags+0x1a0/0x1a0
[  681.687042][ T4368]  ? kthread_blkcg+0xd0/0xd0
[  681.691653][ T4368]  ret_from_fork+0x1f/0x30
[  681.696134][ T4368]  </TASK>
[  681.699157][ T4368] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  681.706435][ T4368] CPU: 0 PID: 4368 Comm: kworker/u4:8 Not tainted syzkaller #0
[  681.713989][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  681.724060][ T4368] Workqueue: events_unbound io_ring_exit_work
[  681.730151][ T4368] Call Trace:
[  681.733450][ T4368]  <TASK>
[  681.736384][ T4368]  dump_stack_lvl+0x188/0x24e
[  681.741053][ T4368]  ? memcpy+0x3c/0x60
[  681.745035][ T4368]  ? show_regs_print_info+0x12/0x12
[  681.750238][ T4368]  ? load_image+0x400/0x400
[  681.754752][ T4368]  panic+0x2e5/0x730
[  681.758653][ T4368]  ? bpf_jit_dump+0xd0/0xd0
[  681.763144][ T4368]  ? ret_from_fork+0x1f/0x30
[  681.767749][ T4368]  __warn+0x2f8/0x4f0
[  681.771732][ T4368]  ? io_ring_exit_work+0x336/0x763
[  681.776840][ T4368]  ? io_ring_exit_work+0x336/0x763
[  681.781939][ T4368]  report_bug+0x2ba/0x4f0
[  681.786274][ T4368]  ? io_ring_exit_work+0x336/0x763
[  681.791396][ T4368]  handle_bug+0x3a/0x70
[  681.795559][ T4368]  exc_invalid_op+0x16/0x40
[  681.800076][ T4368]  asm_exc_invalid_op+0x16/0x20
[  681.804925][ T4368] RIP: 0010:io_ring_exit_work+0x336/0x763
[  681.810654][ T4368] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c d5 5d f7 e9 16 fe ff ff e8 12 d5 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  681.830278][ T4368] RSP: 0018:ffffc9000472fac0 EFLAGS: 00010293
[  681.836358][ T4368] RAX: ffffffff8a249d9e RBX: ffff88805d97b018 RCX: ffff8880766f8000
[  681.844332][ T4368] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000
[  681.852315][ T4368] RBP: ffffc9000472fc30 R08: ffffc9000472fa47 R09: 1ffff920008e5f48
[  681.860288][ T4368] R10: dffffc0000000000 R11: fffff520008e5f49 R12: dffffc0000000000
[  681.868270][ T4368] R13: ffff88805d97b000 R14: 0000000100009451 R15: 0000000100009457
[  681.876293][ T4368]  ? io_ring_exit_work+0x336/0x763
[  681.881497][ T4368]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  681.887324][ T4368]  ? _raw_spin_unlock+0x40/0x40
[  681.892195][ T4368]  ? _raw_spin_unlock_irq+0x1f/0x40
[  681.897390][ T4368]  ? process_one_work+0x7b0/0x1160
[  681.902512][ T4368]  process_one_work+0x8a2/0x1160
[  681.907469][ T4368]  ? worker_detach_from_pool+0x240/0x240
[  681.913116][ T4368]  ? _raw_spin_lock_irq+0xb7/0xf0
[  681.918134][ T4368]  ? _raw_spin_lock_irqsave+0x100/0x100
[  681.923682][ T4368]  ? kthread_data+0x4b/0xc0
[  681.928205][ T4368]  worker_thread+0xaa2/0x1270
[  681.932898][ T4368]  kthread+0x29d/0x330
[  681.936975][ T4368]  ? worker_clr_flags+0x1a0/0x1a0
[  681.942010][ T4368]  ? kthread_blkcg+0xd0/0xd0
[  681.946598][ T4368]  ret_from_fork+0x1f/0x30
[  681.951033][ T4368]  </TASK>
[  681.954410][ T4368] Kernel Offset: disabled
[  681.958809][ T4368] Rebooting in 86400 seconds..