last executing test programs:

18m3.831578941s ago: executing program 2 (id=71):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x482841, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r1 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000020c0))
r2 = msgget$private(0x0, 0xd)
msgrcv(r2, 0x0, 0x0, 0x0, 0x1000)
msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x8, 0x800)
msgctl$IPC_RMID(r2, 0x0)
io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000180)={0xfa55, 0x6})
openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x800)

18m2.795508994s ago: executing program 2 (id=74):
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4048000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x14)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x10, 0x2, 0x10)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fsopen(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)

18m1.754301848s ago: executing program 2 (id=76):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
socket$isdn(0x22, 0x3, 0x21)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
getpgrp(0x0)
pread64(r1, &(0x7f00000003c0)=""/142, 0x8e, 0x33)
io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xc8a1, 0x400, 0x9, 0xc1, 0x0, r1})

17m59.159918461s ago: executing program 2 (id=79):
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
socket$nl_audit(0x10, 0x3, 0x9)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

17m58.0237084s ago: executing program 2 (id=83):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro'])
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

17m55.52399992s ago: executing program 2 (id=89):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

17m40.37162311s ago: executing program 32 (id=89):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

17m31.667634374s ago: executing program 4 (id=160):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x482841, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000020c0))
r1 = msgget$private(0x0, 0xd)
msgrcv(r1, 0x0, 0x0, 0x0, 0x1000)
msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x8, 0x800)
msgctl$IPC_RMID(r1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000180)={0xfa55, 0x6})
openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x800)

17m30.790020149s ago: executing program 4 (id=161):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x10}, 0xc)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

17m30.219141799s ago: executing program 4 (id=166):
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$packet(0x11, 0x3, 0x300)
epoll_create(0x100806)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x18a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0)

17m26.299863804s ago: executing program 4 (id=173):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000f80)='./file2\x00', 0x0, &(0x7f0000000440)={[{@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x1, 0x7a1, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES16], 0x1, 0x152d, &(0x7f0000001980)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x40844, &(0x7f0000000500)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}], [{@obj_role={'obj_role', 0x3d, '}-#-)/!:)'}}, {@smackfsroot={'smackfsroot', 0x3d, 'jqfmt=vfsv1'}}, {@uid_eq}, {@flag='nomand'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}, 0x1, 0x781, &(0x7f0000000800)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)
write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa)
sendfile(r2, r1, 0x0, 0x40001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x400)

17m22.005916937s ago: executing program 4 (id=180):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x8800)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000200)={[{@inlinecrypt}, {@inlinecrypt}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$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")

17m18.447563843s ago: executing program 4 (id=188):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x482841, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r1 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000020c0))
r2 = msgget$private(0x0, 0xd)
msgrcv(r2, 0x0, 0x0, 0x0, 0x1000)
msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x8, 0x800)
msgctl$IPC_RMID(r2, 0x0)
io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xfa55, 0x6})
openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x800)

17m16.864196676s ago: executing program 33 (id=188):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x482841, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r1 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000020c0))
r2 = msgget$private(0x0, 0xd)
msgrcv(r2, 0x0, 0x0, 0x0, 0x1000)
msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x8, 0x800)
msgctl$IPC_RMID(r2, 0x0)
io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xfa55, 0x6})
openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x800)

10m11.711615749s ago: executing program 6 (id=1244):
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0)
keyctl$get_persistent(0x16, 0x0, r3)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

10m10.35111922s ago: executing program 6 (id=1246):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

10m5.799394657s ago: executing program 6 (id=1253):
r0 = socket$kcm(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0xe00)

10m4.621956629s ago: executing program 6 (id=1256):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

10m4.515970854s ago: executing program 6 (id=1257):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x200, 0x6, 0x1000, 0x10}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x4011)

9m58.142553516s ago: executing program 6 (id=1264):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)
getsockname$packet(r0, 0x0, &(0x7f0000000080))
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, 0x0, 0x0, 0xc054)

9m41.317383363s ago: executing program 34 (id=1264):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)
getsockname$packet(r0, 0x0, &(0x7f0000000080))
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, 0x0, 0x0, 0xc054)

17.551852141s ago: executing program 5 (id=2597):
unshare(0x4a000200)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40ca1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40440e4}, 0x40000)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)

17.128572094s ago: executing program 5 (id=2602):
semget(0x1, 0x4, 0x3c4)

16.947958073s ago: executing program 5 (id=2604):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0xfffffffffffffffe, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r2, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r2, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0)
sendto(r2, &(0x7f00000007c0)="5bea", 0x2, 0x8001, 0x0, 0x0)
socket(0x2, 0x2, 0xf)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
writev(r4, &(0x7f0000000140), 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000002840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)}}, {{&(0x7f0000002080)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c, &(0x7f0000002180)=[{&(0x7f00000020c0)}], 0x1}}], 0x2, 0x0)
shutdown(r5, 0x1)
setsockopt(r5, 0x84, 0x82, &(0x7f00000002c0)="1a000000", 0x4)
read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r3)

16.423928381s ago: executing program 5 (id=2608):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000002500)=ANY=[], 0x4, 0x1f0, &(0x7f00000003c0)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f0000001280)="$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")
r1 = fanotify_init(0x40, 0x40000)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0)
socket$alg(0x26, 0x5, 0x0)
getdents64(r2, 0x0, 0x0)

15.540008688s ago: executing program 5 (id=2615):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x39d, &(0x7f0000000080)={0x0, 0x20000851, 0x200, 0x4, 0x3a1}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200))
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

14.836017385s ago: executing program 5 (id=2619):
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xba01}, 0x8004)
socket$inet6(0xa, 0x3, 0x7)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120c, &(0x7f0000003680)="$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")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0)

14.628263786s ago: executing program 35 (id=2619):
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xba01}, 0x8004)
socket$inet6(0xa, 0x3, 0x7)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120c, &(0x7f0000003680)="$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")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0)

10.631808338s ago: executing program 1 (id=2649):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x60)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x4000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2020)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

9.646752109s ago: executing program 1 (id=2658):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10167, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
socket(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=@bridge_getlink={0x28, 0x12, 0x201, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8900, 0x1000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x80)

4.927798459s ago: executing program 1 (id=2683):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xd396, 0x44}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
sendmmsg$inet(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001240)="cc5fd2518c506ebf347763559129e729164723d0e47c59f1b71a169d2bf45153816f628ff44cbe57e3b69377793663b2d7f0c39319dd2d25cf661253e80493fe43d4bd2521579cc80e15640e30cfedcde5be166f87dd93bc68ac7b179df08a08b19ec17b48e6ffa0026287ca02aec3d811c6262f219143baf964dd95c9ac5055ae4a8714ed7e524ab664ace9643ce2a56eb25288920ade7434d6be5cb5815dec", 0xa0}], 0x1}}], 0x1, 0x2090)

3.952468771s ago: executing program 0 (id=2694):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb8d4a000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000013e000/0x4000)=nil, 0x4000, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000012f000/0x4000)=nil)

3.852860827s ago: executing program 1 (id=2697):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x43, &(0x7f0000000940)=""/4109, 0x0, 0x67}, 0x94)

3.173970022s ago: executing program 1 (id=2701):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$session_to_parent(0x12)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x4046b4, 0x80, 0x2, 0x1c8}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000))
syz_io_uring_setup(0x10278e, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd67, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
io_uring_enter(r3, 0x369a, 0x0, 0x1, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4001af84, 0xfffffffffffffffe)

2.307931188s ago: executing program 1 (id=2704):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioprio_set$pid(0x3, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
sendfile(r0, r1, 0x0, 0x10ffff)

2.207131513s ago: executing program 7 (id=2705):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0xffa0}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ab4d}, 0x94)

2.137463127s ago: executing program 3 (id=2706):
r0 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, &(0x7f0000000940)='\x00', 0x0)
request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r0)

2.115767048s ago: executing program 8 (id=2620):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

1.981463565s ago: executing program 3 (id=2707):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000feffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.840479323s ago: executing program 0 (id=2708):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x400000000000043, 0x0)

1.804120714s ago: executing program 7 (id=2709):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)

1.793432845s ago: executing program 8 (id=2710):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="090000025e08b7a20fcf7acbe9a2300d0000000000000000", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004080)=[{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000440)="0dca45ed902b45a98e5992ff635aa408c0b164298555ad6cf6c81d5bae1551d8bfd4b7ef00212aae6bed0e89d829e870ac8a8d814f65d46074184b0a67656557f8e9413e886ace681b585978c390e4c95a2e78fa40b833386c782c9f2866bf0e2e09627e14464089b5f6e3a805ce9ccef02714f7e3b3254af5252524c94ce071d7f775e7c76e7b766a616932fa362863286a9508ba83fdcdfae6d84aca36d1", 0x9f}, {&(0x7f0000000500)="0181aa15020e0fe4e3bff8b6cf497686c5eb365e5f452f5ed0ba723db96fd394ed0242a2", 0x24}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x84)
recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0xc2}], 0x1}, 0x6}], 0x1, 0x2120, 0x0)

1.679930662s ago: executing program 3 (id=2711):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c880}, 0x4000000)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)="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", 0x69d}], 0x1)

1.679750422s ago: executing program 0 (id=2712):
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r0, &(0x7f0000000080)=""/1, 0x1)
sendfile(r0, r0, 0x0, 0xbf9)

1.550143678s ago: executing program 7 (id=2713):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$session_to_parent(0x12)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x4046b4, 0x80, 0x2, 0x1c8}, &(0x7f0000000180), &(0x7f0000000700), &(0x7f0000000000))
syz_io_uring_setup(0x10278e, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd67, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4001af84, 0xfffffffffffffffe)

1.5217048s ago: executing program 0 (id=2714):
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$setregset(0x4205, r0, 0x405, &(0x7f0000000000)={0x0})

1.423743145s ago: executing program 3 (id=2715):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00')
mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r1=>0x0}, 0x6)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x0, 0x39d})
io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

592.812219ms ago: executing program 3 (id=2716):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)

491.507824ms ago: executing program 8 (id=2717):
r0 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, &(0x7f0000000940)='\x00', 0x0)
request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r0)

434.421727ms ago: executing program 7 (id=2718):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xb, 0x6a, 0xa, 0x3, 0x1, 0x6, 0x6, 0x7, 0x85, 0xb, 0x81, 0x4c, 0x2, 0x1}, 0xe)
shutdown(r0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000400)='=', 0x1}], 0x1}, 0x20008044)

319.934993ms ago: executing program 0 (id=2719):
chroot(0x0)
getcwd(0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @empty, @void, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x0, 0x6, "a5b690", 0x14, 0x6, 0x0, @mcast1, @loopback, {[], {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xfffc}}}}}}}}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe1, &(0x7f0000001c00)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xbd3, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xbbf, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0)

319.589713ms ago: executing program 3 (id=2720):
write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1b, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32f1cc26f7061a74df2cfc06c89fd3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
writev(r0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000640)="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", 0xe06}, {0x0}], 0x3)

295.337255ms ago: executing program 7 (id=2721):
syz_open_procfs(0x0, 0x0)
unshare(0x22020600)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000)
syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(r1)
fsmount(r0, 0x0, 0x3)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[], 0x10)

286.745555ms ago: executing program 8 (id=2722):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, r0, 0xffffffff}, 0x50)
io_uring_setup(0x72ad, &(0x7f0000000000)={0x0, 0xa891, 0x800, 0x0, 0x100})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)

72.303556ms ago: executing program 0 (id=2723):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r1 = socket$unix(0x1, 0x1, 0x0)
listen(r1, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffc2, 0x0, 0xcf, 0x2, 0x5, "0c411be01fbcd2b7cb366b00", 0x1004, 0xffffffff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf)

72.065716ms ago: executing program 8 (id=2724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000020c0)=@newtfilter={0x7c, 0x2c, 0xd3f, 0x30bd29, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0x15}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc5, 0x20000000, 0x5, 0x1, 0x3b5, {0xf, 0x1, 0x6, 0x5, 0x3, 0x62b}, {0x3, 0x1, 0x5, 0x1, 0x9, 0x99}, 0x5, 0x9, 0x6}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xf49}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 7 (id=2725):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x30)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000140))

kernel console output (not intermixed with test programs):

/18/2026
[  553.596233][ T9320] Call Trace:
[  553.599558][ T9320]  <TASK>
[  553.602524][ T9320]  dump_stack_lvl+0x188/0x250
[  553.607247][ T9320]  ? show_regs_print_info+0x20/0x20
[  553.612483][ T9320]  ? load_image+0x400/0x400
[  553.617040][ T9320]  sysfs_warn_dup+0x8a/0xa0
[  553.621595][ T9320]  sysfs_do_create_link_sd+0xc0/0x110
[  553.627006][ T9320]  device_add+0x7ed/0xfb0
[  553.631391][ T9320]  wiphy_register+0x1e81/0x2c30
[  553.636325][ T9320]  ? cfg80211_event_work+0x40/0x40
[  553.641501][ T9320]  ? minstrel_ht_alloc+0x808/0x980
[  553.646665][ T9320]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  553.652788][ T9320]  ieee80211_register_hw+0x2aa1/0x3af0
[  553.658315][ T9320]  ? ieee80211_tasklet_handler+0x20/0x20
[  553.663996][ T9320]  ? rcu_is_watching+0x11/0xa0
[  553.668796][ T9320]  ? memset+0x1e/0x40
[  553.672816][ T9320]  ? hrtimer_init+0x10c/0x220
[  553.677565][ T9320]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  553.683368][ T9320]  hwsim_new_radio_nl+0xa6f/0xc40
[  553.688512][ T9320]  genl_rcv_msg+0xcea/0xf90
[  553.693247][ T9320]  ? lock_chain_count+0x20/0x20
[  553.698171][ T9320]  ? genl_bind+0x380/0x380
[  553.702643][ T9320]  ? verify_lock_unused+0x140/0x140
[  553.707884][ T9320]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  553.714523][ T9320]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  553.721095][ T9320]  netlink_rcv_skb+0x1f5/0x440
[  553.725903][ T9320]  ? genl_bind+0x380/0x380
[  553.730359][ T9320]  ? netlink_ack+0xb50/0xb50
[  553.735098][ T9320]  ? __lock_acquire+0x7d10/0x7d10
[  553.740190][ T9320]  ? down_read+0x1aa/0x2e0
[  553.744654][ T9320]  genl_rcv+0x24/0x40
[  553.748671][ T9320]  netlink_unicast+0x774/0x920
[  553.753488][ T9320]  netlink_sendmsg+0x8ba/0xbe0
[  553.758295][ T9320]  ? netlink_getsockopt+0x570/0x570
[  553.763564][ T9320]  ? aa_sock_msg_perm+0x94/0x150
[  553.768544][ T9320]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  553.773866][ T9320]  ? security_socket_sendmsg+0x7c/0xa0
[  553.779373][ T9320]  ? netlink_getsockopt+0x570/0x570
[  553.784634][ T9320]  ____sys_sendmsg+0x5b7/0x8f0
[  553.789456][ T9320]  ? __sys_sendmsg_sock+0x30/0x30
[  553.794971][ T9320]  ? import_iovec+0x6f/0xa0
[  553.799665][ T9320]  ___sys_sendmsg+0x236/0x2e0
[  553.804415][ T9320]  ? __sys_sendmsg+0x2a0/0x2a0
[  553.809260][ T9320]  __se_sys_sendmsg+0x1af/0x290
[  553.814156][ T9320]  ? __x64_sys_sendmsg+0x80/0x80
[  553.819131][ T9320]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  553.825166][ T9320]  ? lockdep_hardirqs_on+0x94/0x140
[  553.830406][ T9320]  do_syscall_64+0x4c/0xa0
[  553.834868][ T9320]  ? clear_bhb_loop+0x30/0x80
[  553.839588][ T9320]  ? clear_bhb_loop+0x30/0x80
[  553.844303][ T9320]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  553.850240][ T9320] RIP: 0033:0x7fdd6b85edd9
[  553.854699][ T9320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.874345][ T9320] RSP: 002b:00007fdd69a76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  553.882808][ T9320] RAX: ffffffffffffffda RBX: 00007fdd6bad8180 RCX: 00007fdd6b85edd9
[  553.890912][ T9320] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  553.898921][ T9320] RBP: 00007fdd6b8f4d69 R08: 0000000000000000 R09: 0000000000000000
[  553.906922][ T9320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  553.914934][ T9320] R13: 00007fdd6bad8218 R14: 00007fdd6bad8180 R15: 00007ffcfb83b2f8
[  553.922964][ T9320]  </TASK>
[  554.558552][ T9326] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1236'.
[  554.575879][ T9326] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  554.585177][ T9326] CPU: 0 PID: 9326 Comm: syz.1.1236 Not tainted syzkaller #0
[  554.592615][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  554.602826][ T9326] Call Trace:
[  554.606152][ T9326]  <TASK>
[  554.609121][ T9326]  dump_stack_lvl+0x188/0x250
[  554.613852][ T9326]  ? show_regs_print_info+0x20/0x20
[  554.619086][ T9326]  ? load_image+0x400/0x400
[  554.623635][ T9326]  sysfs_warn_dup+0x8a/0xa0
[  554.628175][ T9326]  sysfs_do_create_link_sd+0xc0/0x110
[  554.633622][ T9326]  device_add+0x7ed/0xfb0
[  554.638036][ T9326]  wiphy_register+0x1e81/0x2c30
[  554.642951][ T9326]  ? cfg80211_event_work+0x40/0x40
[  554.648106][ T9326]  ? minstrel_ht_alloc+0x808/0x980
[  554.653273][ T9326]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  554.659429][ T9326]  ieee80211_register_hw+0x2aa1/0x3af0
[  554.664952][ T9326]  ? ieee80211_tasklet_handler+0x20/0x20
[  554.670627][ T9326]  ? rcu_is_watching+0x11/0xa0
[  554.675426][ T9326]  ? memset+0x1e/0x40
[  554.679452][ T9326]  ? hrtimer_init+0x10c/0x220
[  554.684171][ T9326]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  554.689957][ T9326]  hwsim_new_radio_nl+0xa6f/0xc40
[  554.695036][ T9326]  genl_rcv_msg+0xcea/0xf90
[  554.699580][ T9326]  ? lock_chain_count+0x20/0x20
[  554.704513][ T9326]  ? genl_bind+0x380/0x380
[  554.709093][ T9326]  ? verify_lock_unused+0x140/0x140
[  554.714353][ T9326]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  554.721112][ T9326]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  554.727697][ T9326]  netlink_rcv_skb+0x1f5/0x440
[  554.732505][ T9326]  ? genl_bind+0x380/0x380
[  554.736963][ T9326]  ? netlink_ack+0xb50/0xb50
[  554.741594][ T9326]  ? __lock_acquire+0x7d10/0x7d10
[  554.746670][ T9326]  ? down_read+0x1aa/0x2e0
[  554.751233][ T9326]  genl_rcv+0x24/0x40
[  554.755261][ T9326]  netlink_unicast+0x774/0x920
[  554.760086][ T9326]  netlink_sendmsg+0x8ba/0xbe0
[  554.764902][ T9326]  ? netlink_getsockopt+0x570/0x570
[  554.770139][ T9326]  ? aa_sock_msg_perm+0x94/0x150
[  554.775250][ T9326]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  554.780705][ T9326]  ? security_socket_sendmsg+0x7c/0xa0
[  554.786212][ T9326]  ? netlink_getsockopt+0x570/0x570
[  554.791630][ T9326]  ____sys_sendmsg+0x5b7/0x8f0
[  554.796471][ T9326]  ? __sys_sendmsg_sock+0x30/0x30
[  554.801578][ T9326]  ? import_iovec+0x6f/0xa0
[  554.806163][ T9326]  ___sys_sendmsg+0x236/0x2e0
[  554.811251][ T9326]  ? __sys_sendmsg+0x2a0/0x2a0
[  554.816270][ T9326]  __se_sys_sendmsg+0x1af/0x290
[  554.821211][ T9326]  ? __x64_sys_sendmsg+0x80/0x80
[  554.826217][ T9326]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  554.832279][ T9326]  ? lockdep_hardirqs_on+0x94/0x140
[  554.837565][ T9326]  do_syscall_64+0x4c/0xa0
[  554.842024][ T9326]  ? clear_bhb_loop+0x30/0x80
[  554.846740][ T9326]  ? clear_bhb_loop+0x30/0x80
[  554.851454][ T9326]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  554.857389][ T9326] RIP: 0033:0x7fc4e88e2dd9
[  554.861842][ T9326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.881479][ T9326] RSP: 002b:00007fc4e6afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.889942][ T9326] RAX: ffffffffffffffda RBX: 00007fc4e8b5c180 RCX: 00007fc4e88e2dd9
[  554.897949][ T9326] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  554.906085][ T9326] RBP: 00007fc4e8978d69 R08: 0000000000000000 R09: 0000000000000000
[  554.914225][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.922238][ T9326] R13: 00007fc4e8b5c218 R14: 00007fc4e8b5c180 R15: 00007fff2e500408
[  554.930710][ T9326]  </TASK>
[  554.933814][    C0] vkms_vblank_simulate: vblank timer overrun
[  555.378467][   T26] audit: type=1326 audit(1777009396.799:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.5.1239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  563.139963][ T9385] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1253'.
[  563.157115][ T9385] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  563.165363][ T9385] CPU: 1 PID: 9385 Comm: syz.6.1253 Not tainted syzkaller #0
[  563.172778][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  563.182874][ T9385] Call Trace:
[  563.186189][ T9385]  <TASK>
[  563.189149][ T9385]  dump_stack_lvl+0x188/0x250
[  563.193874][ T9385]  ? show_regs_print_info+0x20/0x20
[  563.199112][ T9385]  ? load_image+0x400/0x400
[  563.203675][ T9385]  sysfs_warn_dup+0x8a/0xa0
[  563.208395][ T9385]  sysfs_do_create_link_sd+0xc0/0x110
[  563.213807][ T9385]  device_add+0x7ed/0xfb0
[  563.218189][ T9385]  wiphy_register+0x1e81/0x2c30
[  563.223104][ T9385]  ? cfg80211_event_work+0x40/0x40
[  563.228264][ T9385]  ? minstrel_ht_alloc+0x808/0x980
[  563.233547][ T9385]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  563.239683][ T9385]  ieee80211_register_hw+0x2aa1/0x3af0
[  563.245215][ T9385]  ? ieee80211_tasklet_handler+0x20/0x20
[  563.251124][ T9385]  ? rcu_is_watching+0x11/0xa0
[  563.255940][ T9385]  ? memset+0x1e/0x40
[  563.259971][ T9385]  ? hrtimer_init+0x10c/0x220
[  563.264825][ T9385]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  563.270627][ T9385]  hwsim_new_radio_nl+0xa6f/0xc40
[  563.275720][ T9385]  genl_rcv_msg+0xcea/0xf90
[  563.280265][ T9385]  ? lock_chain_count+0x20/0x20
[  563.285173][ T9385]  ? genl_bind+0x380/0x380
[  563.289651][ T9385]  ? verify_lock_unused+0x140/0x140
[  563.294916][ T9385]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  563.301572][ T9385]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  563.308151][ T9385]  netlink_rcv_skb+0x1f5/0x440
[  563.312971][ T9385]  ? genl_bind+0x380/0x380
[  563.317437][ T9385]  ? netlink_ack+0xb50/0xb50
[  563.322168][ T9385]  ? __lock_acquire+0x7d10/0x7d10
[  563.327352][ T9385]  ? down_read+0x1aa/0x2e0
[  563.331819][ T9385]  genl_rcv+0x24/0x40
[  563.335930][ T9385]  netlink_unicast+0x774/0x920
[  563.340755][ T9385]  netlink_sendmsg+0x8ba/0xbe0
[  563.345569][ T9385]  ? netlink_getsockopt+0x570/0x570
[  563.350816][ T9385]  ? aa_sock_msg_perm+0x94/0x150
[  563.355925][ T9385]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  563.361516][ T9385]  ? security_socket_sendmsg+0x7c/0xa0
[  563.367043][ T9385]  ? netlink_getsockopt+0x570/0x570
[  563.372283][ T9385]  ____sys_sendmsg+0x5b7/0x8f0
[  563.377099][ T9385]  ? __sys_sendmsg_sock+0x30/0x30
[  563.382181][ T9385]  ? import_iovec+0x6f/0xa0
[  563.386723][ T9385]  ___sys_sendmsg+0x236/0x2e0
[  563.391473][ T9385]  ? __sys_sendmsg+0x2a0/0x2a0
[  563.396323][ T9385]  __se_sys_sendmsg+0x1af/0x290
[  563.401213][ T9385]  ? __x64_sys_sendmsg+0x80/0x80
[  563.406198][ T9385]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  563.412240][ T9385]  ? lockdep_hardirqs_on+0x94/0x140
[  563.417526][ T9385]  do_syscall_64+0x4c/0xa0
[  563.421985][ T9385]  ? clear_bhb_loop+0x30/0x80
[  563.426703][ T9385]  ? clear_bhb_loop+0x30/0x80
[  563.431432][ T9385]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  563.437365][ T9385] RIP: 0033:0x7fdd6b85edd9
[  563.441812][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.461537][ T9385] RSP: 002b:00007fdd69a76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  563.469990][ T9385] RAX: ffffffffffffffda RBX: 00007fdd6bad8180 RCX: 00007fdd6b85edd9
[  563.478031][ T9385] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  563.486032][ T9385] RBP: 00007fdd6b8f4d69 R08: 0000000000000000 R09: 0000000000000000
[  563.494036][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.502053][ T9385] R13: 00007fdd6bad8218 R14: 00007fdd6bad8180 R15: 00007ffcfb83b2f8
[  563.510101][ T9385]  </TASK>
[  567.083878][ T9396] device syzkaller0 entered promiscuous mode
[  567.095521][   T26] audit: type=1326 audit(1777009407.766:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.5.1258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  584.118555][   T26] audit: type=1326 audit(1777009423.694:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.0.1285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  584.219945][ T9513] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1284'.
[  584.233040][ T9513] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  584.241184][ T9513] CPU: 1 PID: 9513 Comm: syz.5.1284 Not tainted syzkaller #0
[  584.248608][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  584.259191][ T9513] Call Trace:
[  584.262663][ T9513]  <TASK>
[  584.265949][ T9513]  dump_stack_lvl+0x188/0x250
[  584.270697][ T9513]  ? show_regs_print_info+0x20/0x20
[  584.275945][ T9513]  ? load_image+0x400/0x400
[  584.280521][ T9513]  sysfs_warn_dup+0x8a/0xa0
[  584.285098][ T9513]  sysfs_do_create_link_sd+0xc0/0x110
[  584.290667][ T9513]  device_add+0x7ed/0xfb0
[  584.295139][ T9513]  wiphy_register+0x1e81/0x2c30
[  584.300237][ T9513]  ? cfg80211_event_work+0x40/0x40
[  584.305557][ T9513]  ? minstrel_ht_alloc+0x808/0x980
[  584.310733][ T9513]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  584.316858][ T9513]  ieee80211_register_hw+0x2aa1/0x3af0
[  584.322410][ T9513]  ? lockdep_hardirqs_on+0x94/0x140
[  584.327684][ T9513]  ? ieee80211_tasklet_handler+0x20/0x20
[  584.333666][ T9513]  ? rcu_is_watching+0x11/0xa0
[  584.338647][ T9513]  ? memset+0x1e/0x40
[  584.342800][ T9513]  ? hrtimer_init+0x10c/0x220
[  584.347549][ T9513]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  584.353335][ T9513]  hwsim_new_radio_nl+0xa6f/0xc40
[  584.358419][ T9513]  genl_rcv_msg+0xcea/0xf90
[  584.362967][ T9513]  ? lock_chain_count+0x20/0x20
[  584.367885][ T9513]  ? genl_bind+0x380/0x380
[  584.372350][ T9513]  ? verify_lock_unused+0x140/0x140
[  584.377602][ T9513]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  584.384250][ T9513]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  584.390893][ T9513]  netlink_rcv_skb+0x1f5/0x440
[  584.395699][ T9513]  ? genl_bind+0x380/0x380
[  584.400152][ T9513]  ? netlink_ack+0xb50/0xb50
[  584.404785][ T9513]  ? __lock_acquire+0x7d10/0x7d10
[  584.409867][ T9513]  ? down_read+0x1aa/0x2e0
[  584.414652][ T9513]  genl_rcv+0x24/0x40
[  584.418692][ T9513]  netlink_unicast+0x774/0x920
[  584.423518][ T9513]  netlink_sendmsg+0x8ba/0xbe0
[  584.428528][ T9513]  ? netlink_getsockopt+0x570/0x570
[  584.433771][ T9513]  ? aa_sock_msg_perm+0x94/0x150
[  584.438754][ T9513]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  584.444077][ T9513]  ? security_socket_sendmsg+0x7c/0xa0
[  584.449891][ T9513]  ? netlink_getsockopt+0x570/0x570
[  584.455169][ T9513]  ____sys_sendmsg+0x5b7/0x8f0
[  584.460020][ T9513]  ? __sys_sendmsg_sock+0x30/0x30
[  584.465105][ T9513]  ? import_iovec+0x6f/0xa0
[  584.469656][ T9513]  ___sys_sendmsg+0x236/0x2e0
[  584.474384][ T9513]  ? __sys_sendmsg+0x2a0/0x2a0
[  584.479231][ T9513]  __se_sys_sendmsg+0x1af/0x290
[  584.484127][ T9513]  ? __x64_sys_sendmsg+0x80/0x80
[  584.489100][ T9513]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  584.495139][ T9513]  ? lockdep_hardirqs_on+0x94/0x140
[  584.500390][ T9513]  do_syscall_64+0x4c/0xa0
[  584.504847][ T9513]  ? clear_bhb_loop+0x30/0x80
[  584.509564][ T9513]  ? clear_bhb_loop+0x30/0x80
[  584.514281][ T9513]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  584.520217][ T9513] RIP: 0033:0x7faea53f5dd9
[  584.524672][ T9513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.544322][ T9513] RSP: 002b:00007faea360d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  584.552776][ T9513] RAX: ffffffffffffffda RBX: 00007faea566f180 RCX: 00007faea53f5dd9
[  584.561079][ T9513] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  584.569239][ T9513] RBP: 00007faea548bd69 R08: 0000000000000000 R09: 0000000000000000
[  584.577428][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  584.585456][ T9513] R13: 00007faea566f218 R14: 00007faea566f180 R15: 00007ffdc5b3f418
[  584.593502][ T9513]  </TASK>
[  585.885694][ T9523] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1288'.
[  585.899660][ T9523] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  585.907950][ T9523] CPU: 1 PID: 9523 Comm: syz.3.1288 Not tainted syzkaller #0
[  585.916000][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  585.926538][ T9523] Call Trace:
[  585.929863][ T9523]  <TASK>
[  585.932823][ T9523]  dump_stack_lvl+0x188/0x250
[  585.937545][ T9523]  ? show_regs_print_info+0x20/0x20
[  585.943513][ T9523]  ? load_image+0x400/0x400
[  585.948329][ T9523]  sysfs_warn_dup+0x8a/0xa0
[  585.953191][ T9523]  sysfs_do_create_link_sd+0xc0/0x110
[  585.958674][ T9523]  device_add+0x7ed/0xfb0
[  585.963083][ T9523]  wiphy_register+0x1e81/0x2c30
[  585.968095][ T9523]  ? cfg80211_event_work+0x40/0x40
[  585.973261][ T9523]  ? minstrel_ht_alloc+0x808/0x980
[  585.978526][ T9523]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  585.984670][ T9523]  ieee80211_register_hw+0x2aa1/0x3af0
[  585.990335][ T9523]  ? ieee80211_tasklet_handler+0x20/0x20
[  585.996124][ T9523]  ? rcu_is_watching+0x11/0xa0
[  586.000948][ T9523]  ? memset+0x1e/0x40
[  586.004978][ T9523]  ? hrtimer_init+0x10c/0x220
[  586.009715][ T9523]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  586.015865][ T9523]  hwsim_new_radio_nl+0xa6f/0xc40
[  586.021258][ T9523]  genl_rcv_msg+0xcea/0xf90
[  586.025837][ T9523]  ? lock_chain_count+0x20/0x20
[  586.031298][ T9523]  ? genl_bind+0x380/0x380
[  586.035999][ T9523]  ? verify_lock_unused+0x140/0x140
[  586.041265][ T9523]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  586.048202][ T9523]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  586.054800][ T9523]  netlink_rcv_skb+0x1f5/0x440
[  586.060023][ T9523]  ? genl_bind+0x380/0x380
[  586.064669][ T9523]  ? netlink_ack+0xb50/0xb50
[  586.069331][ T9523]  ? __lock_acquire+0x7d10/0x7d10
[  586.074411][ T9523]  ? down_read+0x1aa/0x2e0
[  586.078889][ T9523]  genl_rcv+0x24/0x40
[  586.082950][ T9523]  netlink_unicast+0x774/0x920
[  586.088056][ T9523]  netlink_sendmsg+0x8ba/0xbe0
[  586.092889][ T9523]  ? netlink_getsockopt+0x570/0x570
[  586.098254][ T9523]  ? aa_sock_msg_perm+0x94/0x150
[  586.103404][ T9523]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  586.108825][ T9523]  ? security_socket_sendmsg+0x7c/0xa0
[  586.114620][ T9523]  ? netlink_getsockopt+0x570/0x570
[  586.119895][ T9523]  ____sys_sendmsg+0x5b7/0x8f0
[  586.124738][ T9523]  ? __sys_sendmsg_sock+0x30/0x30
[  586.129998][ T9523]  ? import_iovec+0x6f/0xa0
[  586.134561][ T9523]  ___sys_sendmsg+0x236/0x2e0
[  586.139342][ T9523]  ? __sys_sendmsg+0x2a0/0x2a0
[  586.144346][ T9523]  __se_sys_sendmsg+0x1af/0x290
[  586.149416][ T9523]  ? __x64_sys_sendmsg+0x80/0x80
[  586.154417][ T9523]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  586.160660][ T9523]  ? lockdep_hardirqs_on+0x94/0x140
[  586.166067][ T9523]  do_syscall_64+0x4c/0xa0
[  586.170534][ T9523]  ? clear_bhb_loop+0x30/0x80
[  586.175362][ T9523]  ? clear_bhb_loop+0x30/0x80
[  586.180107][ T9523]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  586.186088][ T9523] RIP: 0033:0x7f11a10cadd9
[  586.190557][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.210839][ T9523] RSP: 002b:00007f119f2e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.219478][ T9523] RAX: ffffffffffffffda RBX: 00007f11a1344180 RCX: 00007f11a10cadd9
[  586.227684][ T9523] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  586.235877][ T9523] RBP: 00007f11a1160d69 R08: 0000000000000000 R09: 0000000000000000
[  586.243902][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.251926][ T9523] R13: 00007f11a1344218 R14: 00007f11a1344180 R15: 00007fffcbcb0648
[  586.259966][ T9523]  </TASK>
[  586.263033][    C1] vkms_vblank_simulate: vblank timer overrun
[  586.882756][   T26] audit: type=1326 audit(1777009426.286:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9515 comm="syz.5.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  590.836806][   T26] audit: type=1326 audit(1777009429.991:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.3.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  591.330347][ T4860] Bluetooth: hci5: command 0x0409 tx timeout
[  592.141487][   T26] audit: type=1326 audit(1777009431.199:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9574 comm="syz.0.1302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  592.163382][    C1] vkms_vblank_simulate: vblank timer overrun
[  592.177464][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  592.194415][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  592.976032][ T4378] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.017730][ T9538] chnl_net:caif_netlink_parms(): no params data found
[  593.255513][ T4378] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.467903][ T9538] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.475976][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.484333][ T9538] device bridge_slave_0 entered promiscuous mode
[  593.512690][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.522302][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.882088][ T4860] Bluetooth: hci5: command 0x041b tx timeout
[  594.890626][ T9538] device bridge_slave_1 entered promiscuous mode
[  594.966098][ T4378] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.274164][ T9538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.288200][ T9538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.518438][ T4378] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.787874][ T9605] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1308'.
[  596.615851][ T9538] team0: Port device team_slave_0 added
[  596.662683][ T9605] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  596.671486][ T9605] CPU: 1 PID: 9605 Comm: syz.1.1308 Not tainted syzkaller #0
[  596.678910][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  596.689018][ T9605] Call Trace:
[  596.692341][ T9605]  <TASK>
[  596.695394][ T9605]  dump_stack_lvl+0x188/0x250
[  596.700120][ T9605]  ? show_regs_print_info+0x20/0x20
[  596.705360][ T9605]  ? load_image+0x400/0x400
[  596.709936][ T9605]  sysfs_warn_dup+0x8a/0xa0
[  596.714484][ T9605]  sysfs_do_create_link_sd+0xc0/0x110
[  596.719948][ T9605]  device_add+0x7ed/0xfb0
[  596.724354][ T9605]  wiphy_register+0x1e81/0x2c30
[  596.729289][ T9605]  ? cfg80211_event_work+0x40/0x40
[  596.734455][ T9605]  ? minstrel_ht_alloc+0x808/0x980
[  596.739716][ T9605]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  596.745854][ T9605]  ieee80211_register_hw+0x2aa1/0x3af0
[  596.751377][ T9605]  ? lockdep_hardirqs_on+0x94/0x140
[  596.756673][ T9605]  ? ieee80211_tasklet_handler+0x20/0x20
[  596.762373][ T9605]  ? rcu_is_watching+0x11/0xa0
[  596.767210][ T9605]  ? memset+0x1e/0x40
[  596.771241][ T9605]  ? hrtimer_init+0x10c/0x220
[  596.775970][ T9605]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  596.781774][ T9605]  hwsim_new_radio_nl+0xa6f/0xc40
[  596.786862][ T9605]  genl_rcv_msg+0xcea/0xf90
[  596.791418][ T9605]  ? genl_bind+0x380/0x380
[  596.795877][ T9605]  ? __schedule+0x11f7/0x43c0
[  596.800641][ T9605]  ? release_firmware_map_entry+0x190/0x190
[  596.806602][ T9605]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  596.813266][ T9605]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  596.819359][ T9605]  netlink_rcv_skb+0x1f5/0x440
[  596.824186][ T9605]  ? genl_bind+0x380/0x380
[  596.828741][ T9605]  ? netlink_ack+0xb50/0xb50
[  596.833399][ T9605]  ? genl_bind+0x380/0x380
[  596.837874][ T9605]  genl_rcv+0x24/0x40
[  596.841905][ T9605]  netlink_unicast+0x774/0x920
[  596.846817][ T9605]  netlink_sendmsg+0x8ba/0xbe0
[  596.851788][ T9605]  ? netlink_getsockopt+0x570/0x570
[  596.857052][ T9605]  ? aa_sock_msg_perm+0x94/0x150
[  596.862167][ T9605]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  596.867863][ T9605]  ? security_socket_sendmsg+0x7c/0xa0
[  596.873399][ T9605]  ? netlink_getsockopt+0x570/0x570
[  596.879014][ T9605]  ____sys_sendmsg+0x5b7/0x8f0
[  596.884136][ T9605]  ? __sys_sendmsg_sock+0x30/0x30
[  596.889242][ T9605]  ? import_iovec+0x6f/0xa0
[  596.893812][ T9605]  ___sys_sendmsg+0x236/0x2e0
[  596.898932][ T9605]  ? __sys_sendmsg+0x2a0/0x2a0
[  596.903883][ T9605]  __se_sys_sendmsg+0x1af/0x290
[  596.908883][ T9605]  ? __x64_sys_sendmsg+0x80/0x80
[  596.914137][ T9605]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  596.920318][ T9605]  ? lockdep_hardirqs_on+0x94/0x140
[  596.925580][ T9605]  do_syscall_64+0x4c/0xa0
[  596.930476][ T9605]  ? clear_bhb_loop+0x30/0x80
[  596.935225][ T9605]  ? clear_bhb_loop+0x30/0x80
[  596.939978][ T9605]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  596.946036][ T9605] RIP: 0033:0x7fc4e88e2dd9
[  596.950567][ T9605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.970421][ T9605] RSP: 002b:00007fc4e6afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.978917][ T9605] RAX: ffffffffffffffda RBX: 00007fc4e8b5c180 RCX: 00007fc4e88e2dd9
[  596.986938][ T9605] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  596.994969][ T9605] RBP: 00007fc4e8978d69 R08: 0000000000000000 R09: 0000000000000000
[  597.002993][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  597.011606][ T9605] R13: 00007fc4e8b5c218 R14: 00007fc4e8b5c180 R15: 00007fff2e500408
[  597.020081][ T9605]  </TASK>
[  597.023195][    C1] vkms_vblank_simulate: vblank timer overrun
[  597.142205][ T4304] Bluetooth: hci5: command 0x040f tx timeout
[  597.172076][ T9538] team0: Port device team_slave_1 added
[  597.260384][ T9619] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1311'.
[  597.652337][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  597.685114][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  597.766136][ T9538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  597.810617][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  597.903749][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.266994][ T9538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  598.888010][ T9619] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  598.897301][ T9619] CPU: 0 PID: 9619 Comm: syz.3.1311 Not tainted syzkaller #0
[  598.904914][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  598.915161][ T9619] Call Trace:
[  598.918496][ T9619]  <TASK>
[  598.921487][ T9619]  dump_stack_lvl+0x188/0x250
[  598.926234][ T9619]  ? show_regs_print_info+0x20/0x20
[  598.931704][ T9619]  ? load_image+0x400/0x400
[  598.936280][ T9619]  sysfs_warn_dup+0x8a/0xa0
[  598.940845][ T9619]  sysfs_do_create_link_sd+0xc0/0x110
[  598.946467][ T9619]  device_add+0x7ed/0xfb0
[  598.950875][ T9619]  wiphy_register+0x1e81/0x2c30
[  598.955810][ T9619]  ? cfg80211_event_work+0x40/0x40
[  598.960988][ T9619]  ? minstrel_ht_alloc+0x808/0x980
[  598.966170][ T9619]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  598.972475][ T9619]  ieee80211_register_hw+0x2aa1/0x3af0
[  598.977991][ T9619]  ? lockdep_hardirqs_on+0x94/0x140
[  598.983524][ T9619]  ? ieee80211_tasklet_handler+0x20/0x20
[  598.989210][ T9619]  ? rcu_is_watching+0x11/0xa0
[  598.994020][ T9619]  ? memset+0x1e/0x40
[  598.998042][ T9619]  ? hrtimer_init+0x10c/0x220
[  599.002875][ T9619]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  599.008751][ T9619]  hwsim_new_radio_nl+0xa6f/0xc40
[  599.014080][ T9619]  genl_rcv_msg+0xcea/0xf90
[  599.018822][ T9619]  ? lock_chain_count+0x20/0x20
[  599.024028][ T9619]  ? genl_bind+0x380/0x380
[  599.028741][ T9619]  ? verify_lock_unused+0x140/0x140
[  599.034171][ T9619]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  599.040948][ T9619]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  599.047716][ T9619]  netlink_rcv_skb+0x1f5/0x440
[  599.052754][ T9619]  ? genl_bind+0x380/0x380
[  599.057200][ T9619]  ? netlink_ack+0xb50/0xb50
[  599.061938][ T9619]  ? __lock_acquire+0x7d10/0x7d10
[  599.067118][ T9619]  ? down_read+0x1aa/0x2e0
[  599.071847][ T9619]  genl_rcv+0x24/0x40
[  599.075890][ T9619]  netlink_unicast+0x774/0x920
[  599.080691][ T9619]  netlink_sendmsg+0x8ba/0xbe0
[  599.085664][ T9619]  ? netlink_getsockopt+0x570/0x570
[  599.091206][ T9619]  ? preempt_schedule_irq+0xe6/0x160
[  599.096561][ T9619]  ? aa_sock_msg_perm+0x94/0x150
[  599.101564][ T9619]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  599.107025][ T9619]  ? security_socket_sendmsg+0x7c/0xa0
[  599.112512][ T9619]  ? netlink_getsockopt+0x570/0x570
[  599.117849][ T9619]  ____sys_sendmsg+0x5b7/0x8f0
[  599.122654][ T9619]  ? __sys_sendmsg_sock+0x30/0x30
[  599.128014][ T9619]  ? import_iovec+0x6f/0xa0
[  599.132677][ T9619]  ___sys_sendmsg+0x236/0x2e0
[  599.137538][ T9619]  ? __sys_sendmsg+0x2a0/0x2a0
[  599.142369][ T9619]  __se_sys_sendmsg+0x1af/0x290
[  599.147247][ T9619]  ? __x64_sys_sendmsg+0x80/0x80
[  599.152416][ T9619]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  599.159019][ T9619]  ? lockdep_hardirqs_on+0x94/0x140
[  599.164287][ T9619]  do_syscall_64+0x4c/0xa0
[  599.168760][ T9619]  ? clear_bhb_loop+0x30/0x80
[  599.173481][ T9619]  ? clear_bhb_loop+0x30/0x80
[  599.178206][ T9619]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  599.184142][ T9619] RIP: 0033:0x7f11a10cadd9
[  599.188617][ T9619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.208281][ T9619] RSP: 002b:00007f119f2e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  599.216745][ T9619] RAX: ffffffffffffffda RBX: 00007f11a1344180 RCX: 00007f11a10cadd9
[  599.224769][ T9619] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  599.233037][ T9619] RBP: 00007f11a1160d69 R08: 0000000000000000 R09: 0000000000000000
[  599.241054][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  599.249053][ T9619] R13: 00007f11a1344218 R14: 00007f11a1344180 R15: 00007fffcbcb0648
[  599.257089][ T9619]  </TASK>
[  599.439296][ T4304] Bluetooth: hci5: command 0x0419 tx timeout
[  599.526881][   T26] audit: type=1326 audit(1777009438.114:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.0.1316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  601.370495][ T9538] device hsr_slave_0 entered promiscuous mode
[  601.849027][ T9538] device hsr_slave_1 entered promiscuous mode
[  601.879912][ T9538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  602.276877][ T9538] Cannot create hsr debugfs directory
[  604.096695][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'.
[  605.356883][   T26] audit: type=1326 audit(1777009443.570:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.3.1330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  606.628759][ T9538] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  606.754264][ T9538] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  606.870183][ T9538] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  608.013714][   T26] audit: type=1326 audit(1777009446.059:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.5.1334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  608.960088][ T9538] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  612.048640][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.258711][   T26] audit: type=1326 audit(1777009450.027:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9743 comm="syz.0.1342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  612.346132][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  613.155778][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  613.443123][ T9538] 8021q: adding VLAN 0 to HW filter on device team0
[  613.517097][ T9752] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1343'.
[  614.197913][ T9752] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  614.206144][ T9752] CPU: 1 PID: 9752 Comm: syz.0.1343 Not tainted syzkaller #0
[  614.213800][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  614.224099][ T9752] Call Trace:
[  614.227427][ T9752]  <TASK>
[  614.230399][ T9752]  dump_stack_lvl+0x188/0x250
[  614.235119][ T9752]  ? show_regs_print_info+0x20/0x20
[  614.240364][ T9752]  ? load_image+0x400/0x400
[  614.245189][ T9752]  sysfs_warn_dup+0x8a/0xa0
[  614.250261][ T9752]  sysfs_do_create_link_sd+0xc0/0x110
[  614.256573][ T9752]  device_add+0x7ed/0xfb0
[  614.261152][ T9752]  wiphy_register+0x1e81/0x2c30
[  614.266099][ T9752]  ? cfg80211_event_work+0x40/0x40
[  614.271241][ T9752]  ? minstrel_ht_alloc+0x808/0x980
[  614.276420][ T9752]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  614.282567][ T9752]  ieee80211_register_hw+0x2aa1/0x3af0
[  614.288094][ T9752]  ? lockdep_hardirqs_on+0x94/0x140
[  614.293513][ T9752]  ? ieee80211_tasklet_handler+0x20/0x20
[  614.299462][ T9752]  ? rcu_is_watching+0x11/0xa0
[  614.304265][ T9752]  ? memset+0x1e/0x40
[  614.308299][ T9752]  ? hrtimer_init+0x10c/0x220
[  614.313281][ T9752]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  614.319265][ T9752]  hwsim_new_radio_nl+0xa6f/0xc40
[  614.324341][ T9752]  genl_rcv_msg+0xcea/0xf90
[  614.328922][ T9752]  ? lock_chain_count+0x20/0x20
[  614.333998][ T9752]  ? genl_bind+0x380/0x380
[  614.338475][ T9752]  ? verify_lock_unused+0x140/0x140
[  614.343795][ T9752]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  614.350591][ T9752]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  614.357187][ T9752]  netlink_rcv_skb+0x1f5/0x440
[  614.362095][ T9752]  ? genl_bind+0x380/0x380
[  614.366589][ T9752]  ? netlink_ack+0xb50/0xb50
[  614.371460][ T9752]  ? __lock_acquire+0x7d10/0x7d10
[  614.376699][ T9752]  ? down_read+0x1aa/0x2e0
[  614.381628][ T9752]  genl_rcv+0x24/0x40
[  614.385663][ T9752]  netlink_unicast+0x774/0x920
[  614.390468][ T9752]  netlink_sendmsg+0x8ba/0xbe0
[  614.395646][ T9752]  ? netlink_getsockopt+0x570/0x570
[  614.400897][ T9752]  ? aa_sock_msg_perm+0x94/0x150
[  614.405898][ T9752]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  614.411463][ T9752]  ? security_socket_sendmsg+0x7c/0xa0
[  614.417072][ T9752]  ? netlink_getsockopt+0x570/0x570
[  614.422301][ T9752]  ____sys_sendmsg+0x5b7/0x8f0
[  614.427112][ T9752]  ? __sys_sendmsg_sock+0x30/0x30
[  614.432496][ T9752]  ? import_iovec+0x6f/0xa0
[  614.437126][ T9752]  ___sys_sendmsg+0x236/0x2e0
[  614.441855][ T9752]  ? __sys_sendmsg+0x2a0/0x2a0
[  614.446679][ T9752]  __se_sys_sendmsg+0x1af/0x290
[  614.451576][ T9752]  ? __x64_sys_sendmsg+0x80/0x80
[  614.456560][ T9752]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  614.462631][ T9752]  ? lockdep_hardirqs_on+0x94/0x140
[  614.468048][ T9752]  do_syscall_64+0x4c/0xa0
[  614.472644][ T9752]  ? clear_bhb_loop+0x30/0x80
[  614.477390][ T9752]  ? clear_bhb_loop+0x30/0x80
[  614.482207][ T9752]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  614.488134][ T9752] RIP: 0033:0x7fd29bccadd9
[  614.492575][ T9752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.512888][ T9752] RSP: 002b:00007fd299ee2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  614.521703][ T9752] RAX: ffffffffffffffda RBX: 00007fd29bf44180 RCX: 00007fd29bccadd9
[  614.529970][ T9752] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  614.538116][ T9752] RBP: 00007fd29bd60d69 R08: 0000000000000000 R09: 0000000000000000
[  614.546158][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  614.554152][ T9752] R13: 00007fd29bf44218 R14: 00007fd29bf44180 R15: 00007ffc44f29ea8
[  614.562163][ T9752]  </TASK>
[  614.565341][    C1] vkms_vblank_simulate: vblank timer overrun
[  614.682145][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  614.726097][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  614.811750][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.818949][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.942594][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  615.413140][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  615.493682][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  615.613015][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.620740][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.803426][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  615.887630][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  617.321924][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  617.570109][   T26] audit: type=1326 audit(1777009454.996:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.3.1351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  617.597313][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  617.607766][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  617.618822][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  617.660769][ T9538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  617.702061][ T9538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  617.719199][   T26] audit: type=1326 audit(1777009455.136:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.0.1352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  618.622361][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  618.662085][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  618.717166][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  618.763029][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  618.802802][   T26] audit: type=1326 audit(1777009456.156:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.3.1353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  618.845994][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  619.023867][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  619.131739][ T9806] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1355'.
[  620.254348][ T9806] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  620.263286][ T9806] CPU: 0 PID: 9806 Comm: syz.0.1355 Not tainted syzkaller #0
[  620.270689][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  620.280762][ T9806] Call Trace:
[  620.284102][ T9806]  <TASK>
[  620.287065][ T9806]  dump_stack_lvl+0x188/0x250
[  620.291944][ T9806]  ? show_regs_print_info+0x20/0x20
[  620.297201][ T9806]  ? load_image+0x400/0x400
[  620.301760][ T9806]  sysfs_warn_dup+0x8a/0xa0
[  620.306411][ T9806]  sysfs_do_create_link_sd+0xc0/0x110
[  620.311934][ T9806]  device_add+0x7ed/0xfb0
[  620.316352][ T9806]  wiphy_register+0x1e81/0x2c30
[  620.321292][ T9806]  ? cfg80211_event_work+0x40/0x40
[  620.326577][ T9806]  ? minstrel_ht_alloc+0x808/0x980
[  620.331716][ T9806]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  620.337807][ T9806]  ieee80211_register_hw+0x2aa1/0x3af0
[  620.343422][ T9806]  ? lockdep_hardirqs_on+0x94/0x140
[  620.348663][ T9806]  ? ieee80211_tasklet_handler+0x20/0x20
[  620.354319][ T9806]  ? rcu_is_watching+0x11/0xa0
[  620.359233][ T9806]  ? memset+0x1e/0x40
[  620.363496][ T9806]  ? hrtimer_init+0x10c/0x220
[  620.368210][ T9806]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  620.374002][ T9806]  hwsim_new_radio_nl+0xa6f/0xc40
[  620.379077][ T9806]  genl_rcv_msg+0xcea/0xf90
[  620.383611][ T9806]  ? lock_chain_count+0x20/0x20
[  620.388932][ T9806]  ? genl_bind+0x380/0x380
[  620.393658][ T9806]  ? verify_lock_unused+0x140/0x140
[  620.399151][ T9806]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  620.405978][ T9806]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  620.412907][ T9806]  netlink_rcv_skb+0x1f5/0x440
[  620.417888][ T9806]  ? genl_bind+0x380/0x380
[  620.422505][ T9806]  ? netlink_ack+0xb50/0xb50
[  620.427132][ T9806]  ? __lock_acquire+0x7d10/0x7d10
[  620.432210][ T9806]  ? down_read+0x1aa/0x2e0
[  620.436877][ T9806]  genl_rcv+0x24/0x40
[  620.440885][ T9806]  netlink_unicast+0x774/0x920
[  620.445845][ T9806]  netlink_sendmsg+0x8ba/0xbe0
[  620.450792][ T9806]  ? netlink_getsockopt+0x570/0x570
[  620.456342][ T9806]  ? aa_sock_msg_perm+0x94/0x150
[  620.461440][ T9806]  ? aa_sk_perm+0x1/0x910
[  620.465836][ T9806]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  620.471233][ T9806]  ? security_socket_sendmsg+0x7c/0xa0
[  620.476727][ T9806]  ? netlink_getsockopt+0x570/0x570
[  620.481956][ T9806]  ____sys_sendmsg+0x5b7/0x8f0
[  620.486768][ T9806]  ? __sys_sendmsg_sock+0x30/0x30
[  620.491852][ T9806]  ? import_iovec+0x6f/0xa0
[  620.496399][ T9806]  ___sys_sendmsg+0x236/0x2e0
[  620.501262][ T9806]  ? __sys_sendmsg+0x2a0/0x2a0
[  620.506086][ T9806]  __se_sys_sendmsg+0x1af/0x290
[  620.511138][ T9806]  ? __x64_sys_sendmsg+0x80/0x80
[  620.516526][ T9806]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  620.522775][ T9806]  ? lockdep_hardirqs_on+0x94/0x140
[  620.528023][ T9806]  do_syscall_64+0x4c/0xa0
[  620.532599][ T9806]  ? clear_bhb_loop+0x30/0x80
[  620.537436][ T9806]  ? clear_bhb_loop+0x30/0x80
[  620.542184][ T9806]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  620.548375][ T9806] RIP: 0033:0x7fd29bccadd9
[  620.552945][ T9806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.572616][ T9806] RSP: 002b:00007fd299ee2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  620.581297][ T9806] RAX: ffffffffffffffda RBX: 00007fd29bf44180 RCX: 00007fd29bccadd9
[  620.589317][ T9806] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000003
[  620.597440][ T9806] RBP: 00007fd29bd60d69 R08: 0000000000000000 R09: 0000000000000000
[  620.605432][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.613427][ T9806] R13: 00007fd29bf44218 R14: 00007fd29bf44180 R15: 00007ffc44f29ea8
[  620.621610][ T9806]  </TASK>
[  620.624703][    C0] vkms_vblank_simulate: vblank timer overrun
[  622.113260][   T26] audit: type=1326 audit(1777009459.245:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9834 comm="syz.3.1362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  622.173907][ T4378] device hsr_slave_0 left promiscuous mode
[  622.185803][ T4378] device hsr_slave_1 left promiscuous mode
[  622.202476][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  622.223159][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  623.242659][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  623.340892][   T26] audit: type=1326 audit(1777009460.396:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9847 comm="syz.1.1364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e88e2dd9 code=0x0
[  623.446750][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  623.572868][ T4378] device bridge_slave_1 left promiscuous mode
[  623.670219][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.830025][ T4378] device bridge_slave_0 left promiscuous mode
[  623.913573][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.161180][ T4378] device veth1_macvtap left promiscuous mode
[  624.210751][   T26] audit: type=1326 audit(1777009461.219:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9856 comm="syz.0.1366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  624.550278][ T4378] device veth0_macvtap left promiscuous mode
[  625.150767][ T4378] device veth1_vlan left promiscuous mode
[  625.156780][ T4378] device veth0_vlan left promiscuous mode
[  627.221303][ T4378] team0 (unregistering): Port device team_slave_1 removed
[  627.244261][ T4378] team0 (unregistering): Port device team_slave_0 removed
[  627.266300][ T4378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  627.302007][ T4378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.493934][ T4378] bond0 (unregistering): Released all slaves
[  627.611774][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'.
[  627.628744][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'.
[  627.666534][ T9807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  627.677984][ T9807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  628.293512][ T9538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.553364][   T26] audit: type=1326 audit(1777009465.271:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.1.1378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e88e2dd9 code=0x0
[  632.392165][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  633.222424][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  633.346707][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  633.399546][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  633.460524][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  633.532450][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  633.557357][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'.
[  633.574890][ T9538] device veth0_vlan entered promiscuous mode
[  633.684366][ T9538] device veth1_vlan entered promiscuous mode
[  634.012754][   T26] audit: type=1326 audit(1777009470.381:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.0.1389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  634.780125][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  634.800040][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  634.907820][ T9538] device veth0_macvtap entered promiscuous mode
[  635.013906][ T9538] device veth1_macvtap entered promiscuous mode
[  635.128506][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.173313][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.215822][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.288833][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  635.320704][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  635.372480][   T26] audit: type=1326 audit(1777009471.653:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9984 comm="syz.0.1391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  636.249511][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.260644][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.272020][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.285843][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.297908][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.309314][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.320017][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.331366][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.341985][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.357212][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.367901][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.379217][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.394255][ T9538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.406515][ T9538] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.416495][ T9538] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.538788][ T9538] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.567883][ T9538] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.068142][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  637.107887][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  637.136651][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  637.157708][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  637.190746][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  637.632958][ T9609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.737474][ T9609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.747589][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  638.040712][ T9609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.105970][ T9609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.206429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  639.976476][   T26] audit: type=1326 audit(1777009475.967:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.0.1400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  642.190301][   T26] audit: type=1326 audit(1777009478.035:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.0.1403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  642.605201][ T9540] Bluetooth: hci5: link tx timeout
[  642.612512][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  642.627058][ T9540] Bluetooth: hci5: link tx timeout
[  642.634107][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  642.643876][ T9540] Bluetooth: hci5: link tx timeout
[  642.649085][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  642.659480][ T9540] Bluetooth: hci5: link tx timeout
[  642.677588][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  642.701074][ T9540] Bluetooth: hci5: link tx timeout
[  642.708866][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  642.720323][ T9540] Bluetooth: hci5: link tx timeout
[  642.747671][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  642.768845][ T9540] Bluetooth: hci5: link tx timeout
[  642.776040][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  645.007651][ T4860] Bluetooth: hci5: command 0x0406 tx timeout
[  645.016326][T10065] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1409'.
[  645.153960][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1409'.
[  645.830751][   T26] audit: type=1326 audit(1777009481.451:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.5.1413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  645.852721][    C1] vkms_vblank_simulate: vblank timer overrun
[  648.883531][ T9540] Bluetooth: hci5: link tx timeout
[  648.889958][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.170304][ T9540] Bluetooth: hci5: link tx timeout
[  649.176234][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.186174][ T9540] Bluetooth: hci5: link tx timeout
[  649.191562][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.200297][ T9540] Bluetooth: hci5: link tx timeout
[  649.206077][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.215516][ T9540] Bluetooth: hci5: link tx timeout
[  649.220836][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.230543][ T9540] Bluetooth: hci5: link tx timeout
[  649.236229][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.249394][ T9540] Bluetooth: hci5: link tx timeout
[  649.268658][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.299067][ T9540] Bluetooth: hci5: link tx timeout
[  649.304763][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  653.694555][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'.
[  653.704773][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  653.914940][   T26] audit: type=1326 audit(1777009489.003:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.1431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  657.838304][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  657.844660][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  663.968890][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'.
[  670.873322][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1471'.
[  673.818752][ T9540] Bluetooth: hci5: link tx timeout
[  673.824622][ T9540] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  673.833712][ T9540] Bluetooth: hci5: link tx timeout
[  673.839507][ T9540] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  676.197251][ T9207] Bluetooth: hci5: command 0x0406 tx timeout
[  676.736800][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'.
[  678.440762][ T9207] Bluetooth: hci5: command 0x0405 tx timeout
[  681.812405][   T26] audit: type=1326 audit(1777009515.121:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10464 comm="syz.3.1504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  686.344777][   T26] audit: type=1326 audit(1777009519.360:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.7.1513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  686.918202][   T26] audit: type=1326 audit(1777009519.894:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10519 comm="syz.7.1518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  687.429609][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'.
[  692.546622][   T26] audit: type=1326 audit(1777009525.153:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.5.1528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  695.921199][   T26] audit: type=1326 audit(1777009528.316:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10607 comm="syz.7.1534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  697.884762][   T26] audit: type=1326 audit(1777009530.159:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  704.196327][T10667] device syzkaller0 entered promiscuous mode
[  705.383495][   T26] audit: type=1326 audit(1777009537.178:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10686 comm="syz.3.1549" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  709.747363][T10743] device syzkaller0 entered promiscuous mode
[  710.149587][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'.
[  716.382549][T10836] device syzkaller0 entered promiscuous mode
[  725.585896][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  725.593869][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'.
[  725.608364][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  731.401911][   T26] audit: type=1326 audit(1777009561.527:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10945 comm="syz.7.1599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  731.423783][    C1] vkms_vblank_simulate: vblank timer overrun
[  732.455844][T10960] device syzkaller0 entered promiscuous mode
[  736.360716][   T26] audit: type=1326 audit(1777009566.169:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.0.1613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  737.500291][T11040] device syzkaller0 entered promiscuous mode
[  742.062383][T11088] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1628'.
[  742.114817][T11088] nbd: must specify a device to reconfigure
[  742.345957][   T26] audit: type=1326 audit(1777009571.765:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.0.1629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  744.549889][T11117] device syzkaller0 entered promiscuous mode
[  750.701909][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1644'.
[  751.864176][   T26] audit: type=1326 audit(1777009580.664:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.7.1645" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  755.207758][   T26] audit: type=1326 audit(1777009583.799:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  757.124562][T11224] loop0: detected capacity change from 0 to 4096
[  758.331776][   T26] audit: type=1326 audit(1777009586.728:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11238 comm="syz.3.1661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  758.421324][T11224] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  760.400075][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1668'.
[  760.414402][T11267] nbd: must specify a device to reconfigure
[  760.702221][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'.
[  761.126199][T11268] trusted_key: encrypted_key: insufficient parameters specified
[  762.256325][   T26] audit: type=1326 audit(1777009590.397:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11274 comm="syz.7.1669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  763.078874][T11298] trusted_key: encrypted_key: insufficient parameters specified
[  763.359748][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'.
[  764.023073][T11308] loop0: detected capacity change from 0 to 4096
[  764.061737][T11308] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  765.378582][ T4368] ntfs3: loop0: MFT: r=5, expect seq=0 instead of 5!
[  765.454930][ T4368] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  766.239489][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1681'.
[  771.504897][   T26] audit: type=1326 audit(1777009599.044:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11347 comm="syz.5.1682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  773.349921][T11366] loop1: detected capacity change from 0 to 4096
[  773.917048][T11366] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  774.775529][   T26] audit: type=1326 audit(1777009601.814:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.0.1687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  775.455116][T11378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1686'.
[  776.079501][ T4368] ntfs3: loop1: MFT: r=5, expect seq=0 instead of 5!
[  776.611593][ T4368] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update
[  778.655248][T11405] trusted_key: encrypted_key: master key parameter 'us' is invalid
[  778.740561][   T26] audit: type=1326 audit(1777009605.828:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.3.1695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  778.818887][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'.
[  781.642051][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1698'.
[  782.567603][   T26] audit: type=1326 audit(1777009609.403:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.1701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  785.073648][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1705'.
[  787.599665][T11489] loop5: detected capacity change from 0 to 4096
[  787.620245][T11489] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  787.956179][ T4385] ntfs3: loop5: MFT: r=5, expect seq=0 instead of 5!
[  787.979933][ T4385] ntfs3: loop5: ino=1f, failed to open parent directory r=5 to update
[  788.248372][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1713'.
[  789.318144][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1718'.
[  789.336882][T11508] nbd: must specify a device to reconfigure
[  789.611055][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1717'.
[  791.008622][T11529] loop7: detected capacity change from 0 to 4096
[  791.159900][T11529] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  791.383533][T11532] loop1: detected capacity change from 0 to 4096
[  791.428070][T11532] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  792.330326][ T4368] ntfs3: loop7: MFT: r=5, expect seq=0 instead of 5!
[  792.401263][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'.
[  793.070691][ T4368] ntfs3: loop7: ino=1f, failed to open parent directory r=5 to update
[  793.108541][T11544] loop5: detected capacity change from 0 to 4096
[  793.210017][ T9807] ntfs3: loop1: MFT: r=5, expect seq=0 instead of 5!
[  793.216839][ T9807] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update
[  793.335774][T11544] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  793.676782][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'.
[  794.611843][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  794.620238][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  797.455730][T11584] trusted_key: encrypted_key: insufficient parameters specified
[  798.510847][T11595] loop7: detected capacity change from 0 to 4096
[  799.307177][T11595] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  800.669132][ T4395] ntfs3: loop7: MFT: r=5, expect seq=0 instead of 5!
[  800.676139][ T4395] ntfs3: loop7: ino=1f, failed to open parent directory r=5 to update
[  801.054630][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'.
[  806.632673][   T26] audit: type=1326 audit(1777009631.928:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11635 comm="syz.7.1749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  807.211544][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1754'.
[  812.835419][T11688] loop7: detected capacity change from 0 to 4096
[  813.079368][T11688] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  813.573024][T11699] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1763'.
[  814.027390][   T26] audit: type=1326 audit(1777009638.843:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11697 comm="syz.0.1765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  815.362806][    T9] ntfs3: loop7: MFT: r=5, expect seq=0 instead of 5!
[  815.369629][    T9] ntfs3: loop7: ino=1f, failed to open parent directory r=5 to update
[  815.793829][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1770'.
[  817.903725][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1774'.
[  822.291702][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'.
[  824.848208][T11790] device syzkaller0 entered promiscuous mode
[  828.924032][T11813] loop7: detected capacity change from 0 to 4096
[  830.337215][T11813] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  830.749875][T11832] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1793'.
[  831.202657][ T9609] ntfs3: loop7: MFT: r=5, expect seq=0 instead of 5!
[  831.268888][ T9609] ntfs3: loop7: ino=1f, failed to open parent directory r=5 to update
[  833.803882][T11860] nbd: must specify a device to reconfigure
[  834.124447][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'.
[  835.476513][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'.
[  838.178901][   T26] audit: type=1326 audit(1777009661.443:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.3.1816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  843.826501][   T26] audit: type=1326 audit(1777009666.730:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11922 comm="syz.1.1824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e88e2dd9 code=0x0
[  847.843288][   T26] audit: type=1326 audit(1777009670.482:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.5.1831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  848.354063][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'.
[  849.668381][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'.
[  850.089189][T11978] nbd: must specify a device to reconfigure
[  852.435489][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'.
[  855.576128][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1847'.
[  856.805034][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1850'.
[  860.307986][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  860.356004][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  860.687766][T12076] loop0: detected capacity change from 0 to 4096
[  860.760851][T12076] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  861.690705][T11739] ntfs3: loop0: MFT: r=5, expect seq=0 instead of 5!
[  861.712671][T11739] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  864.053332][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1861'.
[  866.333519][T12122] trusted_key: encrypted_key: key user:syz not found
[  871.528445][T12154] loop1: detected capacity change from 0 to 4096
[  873.057990][T12154] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  874.649650][ T4378] ntfs3: loop1: MFT: r=5, expect seq=0 instead of 5!
[  874.656465][ T4378] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update
[  875.988333][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'.
[  878.653796][T12209] loop0: detected capacity change from 0 to 4096
[  878.690501][T12209] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  879.574021][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'.
[  880.044207][ T4395] ntfs3: loop0: MFT: r=5, expect seq=0 instead of 5!
[  880.051203][ T4395] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  889.640902][T12278] trusted_key: encrypted_key: key user:syz not found
[  890.306450][T12272] loop5: detected capacity change from 0 to 4096
[  890.434154][T12272] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  890.635414][T12287] trusted_key: encrypted_key: key user:syz not found
[  891.718523][T12288] loop1: detected capacity change from 0 to 4096
[  891.846458][T12288] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  892.825649][   T26] audit: type=1326 audit(1777009712.584:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  892.908496][ T4386] ntfs3: loop1: MFT: r=5, expect seq=0 instead of 5!
[  892.928854][ T4386] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update
[  895.747192][   T26] audit: type=1326 audit(1777009715.317:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.1.1920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e88e2dd9 code=0x0
[  896.171006][T12333] loop0: detected capacity change from 0 to 4096
[  896.251792][T12333] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  897.282621][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'.
[  899.023180][T12358] loop5: detected capacity change from 0 to 4096
[  899.034067][T12362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1933'.
[  899.069849][T12362] nbd: must specify a device to reconfigure
[  899.883042][T12358] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  901.217750][   T26] audit: type=1326 audit(1777009719.565:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12366 comm="syz.1.1935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e88e2dd9 code=0x0
[  901.842259][   T26] audit: type=1326 audit(1777009721.016:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.1.1938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e88e2dd9 code=0x0
[  901.872565][ T4373] ntfs3: loop5: MFT: r=5, expect seq=0 instead of 5!
[  901.887088][ T4373] ntfs3: loop5: ino=1f, failed to open parent directory r=5 to update
[  902.840363][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'.
[  902.871818][T12387] loop5: detected capacity change from 0 to 4096
[  903.298371][T12387] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  905.787563][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'.
[  907.119208][   T26] audit: type=1326 audit(1777009725.957:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.3.1950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  907.959746][   T26] audit: type=1326 audit(1777009726.078:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.7.1948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  909.677217][T12426] loop1: detected capacity change from 0 to 4096
[  913.763717][T12454] loop0: detected capacity change from 0 to 4096
[  914.335856][T12454] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  914.941565][   T26] audit: type=1326 audit(1777009733.275:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12463 comm="syz.5.1961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea53f5dd9 code=0x0
[  915.984703][ T4368] ntfs3: loop0: MFT: r=5, expect seq=0 instead of 5!
[  916.027185][ T4368] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  916.038018][   T26] audit: type=1326 audit(1777009734.313:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.3.1963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  917.771199][   T26] audit: type=1326 audit(1777009735.923:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.0.1965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd29bccadd9 code=0x0
[  919.273805][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'.
[  922.073289][   T26] audit: type=1326 audit(1777009739.956:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.3.1972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  922.276539][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1973'.
[  923.242270][T12532] loop0: detected capacity change from 0 to 4096
[  923.277439][T12532] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  924.148870][   T26] audit: type=1326 audit(1777009741.893:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.7.1978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  925.441093][  T472] ntfs3: loop0: MFT: r=5, expect seq=0 instead of 5!
[  925.454554][  T472] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  925.607437][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1983'.
[  925.940661][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  925.947070][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  926.971786][   T26] audit: type=1326 audit(1777009744.542:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.7.1986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  929.403305][   T26] audit: type=1326 audit(1777009746.816:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.7.1993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  934.683901][   T26] audit: type=1326 audit(1777009751.757:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12619 comm="syz.7.2000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[  934.788070][T12622] loop5: detected capacity change from 0 to 4096
[  934.810862][T12629] loop1: detected capacity change from 0 to 4096
[  934.856852][T12629] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  935.781534][T12622] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  936.148644][T12640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2003'.
[  938.488562][   T26] audit: type=1326 audit(1777009755.313:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.2007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  939.290568][ T4380] ntfs3: loop1: MFT: r=5, expect seq=0 instead of 5!
[  939.490836][ T4380] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update
[  939.819251][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'.
[  962.318932][T12782] loop1: detected capacity change from 0 to 4096
[  962.555219][T12782] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  965.739994][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2050'.
[  965.811119][T12820] nbd: must specify a device to reconfigure
[  966.860103][   T26] audit: type=1326 audit(1777009781.871:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.3.2055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  968.518658][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2059'.
[  969.102719][T12843] loop0: detected capacity change from 0 to 4096
[  969.187926][T12843] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  970.277663][  T472] ntfs3: loop0: MFT: r=5, expect seq=0 instead of 5!
[  970.330440][  T472] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  972.159919][   T26] audit: type=1326 audit(1777009786.830:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12884 comm="syz.3.2070" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[  972.350381][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'.
[  981.473091][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2082'.
[  983.270028][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2088'.
[  983.747808][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2090'.
[  986.763564][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'.
[  989.964405][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'.
[  991.596258][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  991.603987][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  992.763683][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'.
[  996.024778][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'.
[  996.037996][T13097] nbd: must specify a device to reconfigure
[ 1000.822270][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2127'.
[ 1004.626069][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'.
[ 1005.805640][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2140'.
[ 1007.229535][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'.
[ 1007.974466][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2147'.
[ 1008.012831][T13207] nbd: must specify a device to reconfigure
[ 1009.857869][T13230] nbd: must specify a device to reconfigure
[ 1009.994695][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2153'.
[ 1010.080593][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'.
[ 1011.266101][T13246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2159'.
[ 1011.373885][   T26] audit: type=1326 audit(1777009823.514:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.7.2158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[ 1012.789290][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2162'.
[ 1019.531676][   T26] audit: type=1326 audit(1777009831.159:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.3.2173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11a10cadd9 code=0x0
[ 1021.583647][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'.
[ 1021.893755][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2180'.
[ 1024.757743][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'.
[ 1027.215653][   T26] audit: type=1326 audit(1777009838.346:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.7.2188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef17169dd9 code=0x0
[ 1029.275099][T13402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2195'.
[ 1030.081615][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2200'.
[ 1030.144616][T13423] nbd: must specify a device to reconfigure
[ 1033.017121][T13447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2204'.
[ 1049.842281][T13577] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4)
[ 1049.851098][T13577] comedi comedi3: 8255: I/O port conflict (0x10003,4)
[ 1049.858242][T13577] comedi comedi3: 8255: I/O port conflict (0x8,4)
[ 1057.235467][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1057.285177][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.189863][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2257'.
[ 1077.147341][   T26] audit: type=1326 audit(1777009885.071:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13766 comm="syz.1.2291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e88e2dd9 code=0x0
[ 1087.501350][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'.
[ 1100.890222][T13982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2344'.
[ 1113.885409][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'.
[ 1115.547215][T14090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1115.584871][T14094] loop5: detected capacity change from 0 to 128
[ 1115.594936][T14090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1115.604960][T14090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1115.907746][T14109] loop0: detected capacity change from 0 to 16
[ 1116.019599][T14109] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1116.100282][T14121] loop1: detected capacity change from 0 to 164
[ 1116.128957][T14119] 9pnet: Insufficient options for proto=fd
[ 1116.241507][T14131] overlayfs: failed to clone upperpath
[ 1116.387229][T14136] loop7: detected capacity change from 0 to 256
[ 1116.474718][T14138] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1116.502015][T14138] overlayfs: failed to set xattr on upper
[ 1116.514679][T14138] overlayfs: ...falling back to index=off,metacopy=off.
[ 1117.044582][T14154] Invalid ELF header magic: != ELF
[ 1117.977372][T14160] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1118.020766][T14161] loop5: detected capacity change from 0 to 512
[ 1118.056291][T14161] FAT-fs (loop5): Unrecognized mount option "check=re�laxed" or missing value
[ 1118.082789][T14160] option changes via remount are deprecated (pid=14159 comm=syz.1.2403)
[ 1119.161049][T14184] loop1: detected capacity change from 0 to 16
[ 1119.211027][T14184] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1119.383643][T14193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1119.431856][T14184] attempt to access beyond end of device
[ 1119.431856][T14184] loop1: rw=524288, want=34359738368, limit=16
[ 1119.472645][T14193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1119.507685][ T9540] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[9000]
[ 1119.733740][T14184] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89
[ 1119.835456][T14184] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89
[ 1119.913306][T14184] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89
[ 1119.938402][T14184] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1119.963281][T14184] attempt to access beyond end of device
[ 1119.963281][T14184] loop1: rw=524288, want=56, limit=16
[ 1119.980695][T14184] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[8192]
[ 1120.022628][   T26] audit: type=1800 audit(1777009925.198:177): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2411" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 1120.444886][T14224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1120.527233][T14224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1120.819575][T14239] loop0: detected capacity change from 0 to 128
[ 1121.022109][T14252] loop7: detected capacity change from 0 to 128
[ 1122.714429][T14282] loop0: detected capacity change from 0 to 16
[ 1122.802674][T14282] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1122.847125][T14282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1122.888558][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1122.895853][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1123.400676][T14293] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1123.419439][T14293] overlayfs: failed to set xattr on upper
[ 1123.437743][T14293] overlayfs: ...falling back to index=off,metacopy=off.
[ 1123.616220][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'.
[ 1123.817824][T14286] chnl_net:caif_netlink_parms(): no params data found
[ 1123.847121][T14305] raw_sendmsg: syz.0.2448 forgot to set AF_INET. Fix it!
[ 1123.905611][T14306] loop5: detected capacity change from 0 to 512
[ 1123.949376][T14301] ipt_CLUSTERIP: Please specify destination IP
[ 1124.183008][T14286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1124.273641][T14286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1124.324195][T14286] device bridge_slave_0 entered promiscuous mode
[ 1124.369583][T14286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1124.376897][T14286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1124.412836][T14286] device bridge_slave_1 entered promiscuous mode
[ 1124.574541][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1124.647850][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1124.875025][T14286] team0: Port device team_slave_0 added
[ 1124.884662][T14286] team0: Port device team_slave_1 added
[ 1124.909624][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1124.920778][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1124.961611][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1124.984138][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1124.994092][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1125.113398][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1125.289807][T14286] device hsr_slave_0 entered promiscuous mode
[ 1125.339130][T14321] loop7: detected capacity change from 0 to 128
[ 1125.355547][T14286] device hsr_slave_1 entered promiscuous mode
[ 1125.367626][T14286] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1125.374042][ T4599] Bluetooth: hci2: command 0x0409 tx timeout
[ 1125.382579][T14286] Cannot create hsr debugfs directory
[ 1125.455345][ T4395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.578681][ T4395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.679023][T11597] attempt to access beyond end of device
[ 1125.679023][T11597] loop7: rw=1, want=1041, limit=128
[ 1125.700995][ T4395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.030000][T14330] loop5: detected capacity change from 0 to 164
[ 1126.107491][ T4395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.581244][ T4231] Bluetooth: hci2: command 0x041b tx timeout
[ 1129.425913][T14341] loop5: detected capacity change from 0 to 128
[ 1130.578981][T14356] loop5: detected capacity change from 0 to 256
[ 1130.750094][ T9207] Bluetooth: hci2: command 0x040f tx timeout
[ 1131.744817][T14286] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1131.807544][T14286] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1131.833322][T14286] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1131.953995][T14286] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1131.975143][T14398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2475'.
[ 1132.305430][T14286] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1132.372019][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1132.389348][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1132.418419][T14286] 8021q: adding VLAN 0 to HW filter on device team0
[ 1132.483302][ T4395] device hsr_slave_0 left promiscuous mode
[ 1132.507578][ T4395] device hsr_slave_1 left promiscuous mode
[ 1132.530862][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1132.565307][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1132.592509][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1132.622474][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1132.651422][ T4395] device bridge_slave_1 left promiscuous mode
[ 1132.678450][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.706190][ T4395] device bridge_slave_0 left promiscuous mode
[ 1132.743174][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.769836][ T4395] device veth1_macvtap left promiscuous mode
[ 1132.776015][ T4395] device veth0_macvtap left promiscuous mode
[ 1132.811089][ T4395] device veth1_vlan left promiscuous mode
[ 1132.849538][ T4395] device veth0_vlan left promiscuous mode
[ 1132.982792][ T9207] Bluetooth: hci2: command 0x0419 tx timeout
[ 1133.365647][T14432] loop5: detected capacity change from 0 to 256
[ 1133.420733][T14432] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1133.556945][ T4395] team0 (unregistering): Port device team_slave_1 removed
[ 1133.594193][ T4395] team0 (unregistering): Port device team_slave_0 removed
[ 1133.624346][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1133.653467][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1133.814147][ T4395] bond0 (unregistering): Released all slaves
[ 1133.965675][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1133.975149][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1133.988063][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.995266][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1134.018368][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1134.027565][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1134.058627][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1134.065890][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1134.088119][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1134.100429][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1134.111517][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1134.121160][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1134.131717][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1134.140476][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1134.151304][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'.
[ 1134.170975][T14428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1134.218621][T14428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1134.252131][T14436] loop1: detected capacity change from 0 to 512
[ 1134.278945][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1134.347351][T14436] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1134.366971][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1134.417400][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1134.462423][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1134.526550][T14286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1135.772110][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1135.825906][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1135.834648][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1136.216949][T14463] loop0: detected capacity change from 0 to 1764
[ 1136.420345][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1136.491282][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1136.518585][T14286] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1136.623630][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1136.640163][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1136.727368][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1136.742069][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1136.776532][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1136.838515][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1136.877645][T14286] device veth0_vlan entered promiscuous mode
[ 1136.926359][T14286] device veth1_vlan entered promiscuous mode
[ 1136.933335][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1137.080772][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1137.096930][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1137.121942][T14286] device veth0_macvtap entered promiscuous mode
[ 1137.206520][T14286] device veth1_macvtap entered promiscuous mode
[ 1137.254259][T14485] loop7: detected capacity change from 0 to 128
[ 1137.334906][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.383832][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.403320][T14489] loop0: detected capacity change from 0 to 16
[ 1137.427345][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.447512][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.458585][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.482054][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.503517][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.527784][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.562142][T14286] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1137.600084][T14489] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1137.667630][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1137.708622][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1137.750223][T14485] FAT-fs (loop7): Filesystem has been set read-only
[ 1137.756976][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1137.802545][T14489] attempt to access beyond end of device
[ 1137.802545][T14489] loop0: rw=524288, want=32, limit=16
[ 1137.833803][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.843831][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1137.867503][T14489] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096]
[ 1137.927574][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.938539][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1137.946807][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1137.958061][   T26] audit: type=1800 audit(1777009941.986:178): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2501" name="file2" dev="loop0" ino=89 res=0 errno=0
[ 1137.978288][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.990143][T14286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1138.002350][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.010722][T14286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.023256][T14286] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1138.031593][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1138.069587][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1138.092731][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.110274][T14489] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89
[ 1138.121087][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1138.124061][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1138.138206][T14489] attempt to access beyond end of device
[ 1138.138206][T14489] loop0: rw=524288, want=32, limit=16
[ 1138.151829][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.175841][T14495] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096]
[ 1138.186497][T14485] attempt to access beyond end of device
[ 1138.186497][T14485] loop7: rw=0, want=149, limit=128
[ 1138.236557][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1138.261587][T14489] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[ 1138.265742][T14485] Buffer I/O error on dev loop7, logical block 148, async page read
[ 1138.281431][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1138.330248][T14286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.340068][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.358147][T14286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.380678][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.395483][T14286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.408842][T14286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.408849][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.408876][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.445644][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.457483][T14493] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2500'.
[ 1138.517648][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.525544][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.565429][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.604400][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.622271][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.643106][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.662365][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.685322][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.743122][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.751104][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.783804][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1138.803844][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1138.846984][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.865181][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1138.887228][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1138.899552][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.912227][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1138.927495][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1138.938707][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.965151][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1138.983400][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.024426][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.052717][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.127007][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.138186][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.256435][T14524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1139.332853][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.353140][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.361259][T14485] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000008f)
[ 1139.370630][   T26] audit: type=1800 audit(1777009943.305:179): pid=14485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2500" name="file1" dev="loop7" ino=1048609 res=0 errno=0
[ 1140.171923][T14524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1140.264513][T14530] loop0: detected capacity change from 0 to 128
[ 1140.324842][T14532] loop3: detected capacity change from 0 to 16
[ 1140.412830][T14532] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1140.477599][T14532] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89
[ 1140.489293][T14541] loop5: detected capacity change from 0 to 256
[ 1140.525336][T14532] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89
[ 1140.540928][T14532] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89
[ 1140.587023][T14532] attempt to access beyond end of device
[ 1140.587023][T14532] loop3: rw=524288, want=24, limit=16
[ 1140.669099][T14532] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[ 1140.717479][   T26] audit: type=1800 audit(1777009944.559:180): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2516" name="file2" dev="loop3" ino=89 res=0 errno=0
[ 1141.022325][T14554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1141.635008][T14575] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2531'.
[ 1142.209757][T14578] loop1: detected capacity change from 0 to 128
[ 1142.327073][T14581] overlayfs: unrecognized mount option "verity=on" or missing value
[ 1142.627417][T14585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1142.700959][T14585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1144.412467][T14626] loop1: detected capacity change from 0 to 8192
[ 1144.468261][T14626]  loop1: p1 < > p2 < > p3 p4 < >
[ 1144.483626][T14626] loop1: partition table partially beyond EOD, truncated
[ 1144.517783][T14626] loop1: p1 start 67108864 is beyond EOD, truncated
[ 1144.545198][T14626] loop1: p3 start 100859904 is beyond EOD, truncated
[ 1144.674179][T14600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.681359][T14600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.741008][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[ 1144.777104][T13614] udevd[13614]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[ 1145.425149][T14645] loop3: detected capacity change from 0 to 16
[ 1145.512175][T14600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1145.530836][T14600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1145.552921][T14645] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1145.575922][T14645] attempt to access beyond end of device
[ 1145.575922][T14645] loop3: rw=524288, want=34359738368, limit=16
[ 1145.624530][T14645] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89
[ 1145.649013][T14645] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89
[ 1145.687109][T14645] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89
[ 1145.703384][T14645] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1145.713285][T14645] attempt to access beyond end of device
[ 1145.713285][T14645] loop3: rw=524288, want=56, limit=16
[ 1145.731045][T14645] attempt to access beyond end of device
[ 1145.731045][T14645] loop3: rw=0, want=34359738368, limit=16
[ 1145.754302][   T26] audit: type=1800 audit(1777009949.276:181): pid=14645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2554" name="file2" dev="loop3" ino=89 res=0 errno=0
[ 1145.984549][T14652] block device autoloading is deprecated and will be removed.
[ 1145.997327][T14651] md2: error: bitmap file must be a regular file
[ 1146.278910][T14600] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.287986][T14600] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.297932][T14600] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.309199][T14600] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.463511][T14600] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1146.472679][T14600] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1146.481613][T14600] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1146.490590][T14600] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1146.522663][T14614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1146.549711][T14619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1146.616508][T14657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2556'.
[ 1146.653827][T14657] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1146.698889][T14657] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1146.752159][T14665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1147.203875][T14681] loop1: detected capacity change from 0 to 128
[ 1147.322048][T14682] loop5: detected capacity change from 0 to 128
[ 1148.415249][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2573'.
[ 1148.526073][T14703] loop0: detected capacity change from 0 to 16
[ 1148.666275][T14703] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1148.717651][T14703] attempt to access beyond end of device
[ 1148.717651][T14703] loop0: rw=524288, want=34359738368, limit=16
[ 1148.774565][T14703] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89
[ 1148.802655][T14715] loop7: detected capacity change from 0 to 256
[ 1148.820981][T14703] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89
[ 1148.855127][T14703] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89
[ 1148.904212][T14703] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1148.943074][T14703] attempt to access beyond end of device
[ 1148.943074][T14703] loop0: rw=524288, want=56, limit=16
[ 1148.981158][T14703] attempt to access beyond end of device
[ 1148.981158][T14703] loop0: rw=0, want=34359738368, limit=16
[ 1149.017430][   T26] audit: type=1800 audit(1777009952.326:182): pid=14703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2575" name="file2" dev="loop0" ino=89 res=0 errno=0
[ 1149.065379][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1149.105817][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1149.130223][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1149.165734][T14722] device bridge_slave_0 left promiscuous mode
[ 1149.237519][T14722] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1149.305515][T14722] device bridge_slave_1 left promiscuous mode
[ 1149.348809][T14722] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1149.423569][T14722] bond0: (slave bond_slave_0): Releasing backup interface
[ 1149.471612][T14722] bond0: (slave bond_slave_1): Releasing backup interface
[ 1149.547639][T14722] team0: Port device team_slave_0 removed
[ 1149.601784][T14722] team0: Port device team_slave_1 removed
[ 1149.608978][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1149.657810][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1149.679251][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1149.712803][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1150.881788][T14749] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2593'.
[ 1152.083251][T14795] block device autoloading is deprecated and will be removed.
[ 1152.106953][T14797] loop5: detected capacity change from 0 to 16
[ 1152.180582][T14797] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1152.374265][T14800] netlink: 'syz.1.2609': attribute type 1 has an invalid length.
[ 1152.532967][T14800] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1152.730798][T14802] bond1: (slave dummy0): making interface the new active one
[ 1152.741691][T14797] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36
[ 1152.775469][T14802] bond1: (slave dummy0): Enslaving as an active interface with an up link
[ 1152.790569][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[ 1152.920421][ T4916] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 36
[ 1153.917959][ T4395] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1153.956865][ T4395] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.070994][ T4395] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1154.101215][T14831] loop0: detected capacity change from 0 to 256
[ 1154.115916][ T4395] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.234910][ T4395] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1154.281138][ T4395] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.446548][ T4395] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1154.472486][ T4395] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.794095][T14832] chnl_net:caif_netlink_parms(): no params data found
[ 1154.843026][T14851] loop0: detected capacity change from 0 to 16
[ 1154.909584][ T4395] tipc: Left network mode
[ 1154.983245][T14851] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700)
[ 1155.362984][T14832] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1155.370433][T14832] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1155.378619][T14832] device bridge_slave_0 entered promiscuous mode
[ 1155.397363][T14832] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1155.476978][T14832] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1155.511917][T14832] device bridge_slave_1 entered promiscuous mode
[ 1155.675795][T14832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1155.721333][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'.
[ 1155.731643][T14832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1155.940896][T14832] team0: Port device team_slave_0 added
[ 1155.995405][T14832] team0: Port device team_slave_1 added
[ 1156.496077][T14832] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1156.541448][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1156.590719][ T4602] Bluetooth: hci3: command 0x0409 tx timeout
[ 1156.629923][T14832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1156.694507][T14832] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1156.746700][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1156.844487][T14832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1157.055301][T14832] device hsr_slave_0 entered promiscuous mode
[ 1157.086169][T14832] device hsr_slave_1 entered promiscuous mode
[ 1157.093650][T14832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1157.132664][T14832] Cannot create hsr debugfs directory
[ 1157.716854][T14832] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1157.764916][T14832] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1157.816683][T14832] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1157.894855][T14832] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1157.960835][T14933] md: could not open device unknown-block(0,0).
[ 1157.978895][T14933] md: md_import_device returned -6
[ 1158.053555][T14944] loop1: detected capacity change from 0 to 16
[ 1158.137799][ T4395] device hsr_slave_0 left promiscuous mode
[ 1158.150411][T14944] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1158.172394][ T4395] device hsr_slave_1 left promiscuous mode
[ 1158.192587][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1158.200147][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1158.220684][T14944] attempt to access beyond end of device
[ 1158.220684][T14944] loop1: rw=524288, want=34359738368, limit=16
[ 1158.266920][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1158.285554][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1158.309171][T14944] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89
[ 1158.330936][ T4395] device bridge_slave_1 left promiscuous mode
[ 1158.337324][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1158.369002][ T4395] device bridge_slave_0 left promiscuous mode
[ 1158.378547][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1158.386466][T14944] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89
[ 1158.429510][ T4395] device veth1_macvtap left promiscuous mode
[ 1158.441887][ T4395] device veth0_macvtap left promiscuous mode
[ 1158.454343][ T4395] device veth1_vlan left promiscuous mode
[ 1158.469091][ T4395] device veth0_vlan left promiscuous mode
[ 1158.477792][T14944] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89
[ 1158.522911][T14944] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[ 1158.571915][T14944] attempt to access beyond end of device
[ 1158.571915][T14944] loop1: rw=524288, want=56, limit=16
[ 1158.614002][T14944] attempt to access beyond end of device
[ 1158.614002][T14944] loop1: rw=0, want=34359738368, limit=16
[ 1158.679959][   T26] audit: type=1800 audit(1777009961.366:183): pid=14944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2649" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 1158.708624][T14952] attempt to access beyond end of device
[ 1158.708624][T14952] loop1: rw=0, want=34359738368, limit=16
[ 1158.755568][   T26] audit: type=1800 audit(1777009961.441:184): pid=14952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2649" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 1158.789440][ T4231] Bluetooth: hci3: command 0x041b tx timeout
[ 1159.220329][ T4395] team0 (unregistering): Port device team_slave_1 removed
[ 1159.261146][ T4395] team0 (unregistering): Port device team_slave_0 removed
[ 1159.298348][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1159.376542][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1159.636262][ T4395] bond0 (unregistering): Released all slaves
[ 1159.804253][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'.
[ 1159.911646][T14965] device veth3 entered promiscuous mode
[ 1160.051398][T14832] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1160.126497][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1160.145189][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1160.260263][T14832] 8021q: adding VLAN 0 to HW filter on device team0
[ 1160.342357][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1160.360964][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1160.413745][T11739] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1160.420999][T11739] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1160.510443][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1160.862351][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1160.984310][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1161.012479][ T4602] Bluetooth: hci3: command 0x040f tx timeout
[ 1161.301334][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1161.308638][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1161.452083][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1161.508855][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1161.532312][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1161.561190][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1161.594746][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1161.619954][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1161.660596][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1161.701862][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1161.744265][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1161.790703][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1161.830855][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1161.872777][T14832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1161.926934][T15029] loop7: detected capacity change from 0 to 512
[ 1162.322248][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1162.331158][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1162.397242][T14832] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1162.539271][   T26] audit: type=1326 audit(1777009964.978:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15044 comm="syz.3.2676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc2d413dd9 code=0x0
[ 1162.939866][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'.
[ 1163.019070][T15058] loop7: detected capacity change from 0 to 128
[ 1163.246257][ T4599] Bluetooth: hci3: command 0x0419 tx timeout
[ 1163.501348][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1163.511486][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1163.657861][T14832] device veth0_vlan entered promiscuous mode
[ 1163.759483][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1163.785202][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1163.823881][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1163.861521][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1164.010301][T14832] device veth1_vlan entered promiscuous mode
[ 1164.138462][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1164.168399][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1164.213089][T15099] loop7: detected capacity change from 0 to 164
[ 1164.234327][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1164.273412][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1164.305436][T14832] device veth0_macvtap entered promiscuous mode
[ 1164.348419][T14832] device veth1_macvtap entered promiscuous mode
[ 1164.469028][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1164.509353][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.566204][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1164.655918][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.689549][T14832] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1164.697678][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1164.721084][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1164.752219][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1164.806244][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1164.863082][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1164.922495][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.975949][T14832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1165.032802][T14832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1165.093792][T14832] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1165.123812][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1165.135803][T15127] loop3: detected capacity change from 0 to 16
[ 1165.144665][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1165.181777][T14832] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.201354][T15127] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1165.233495][T14832] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.268685][T15127] attempt to access beyond end of device
[ 1165.268685][T15127] loop3: rw=524288, want=1342177304, limit=16
[ 1165.291577][T14832] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.346076][T15127] attempt to access beyond end of device
[ 1165.346076][T15127] loop3: rw=0, want=1342177280, limit=16
[ 1165.372341][T14832] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.424477][   T26] audit: type=1800 audit(1777009967.674:186): pid=15127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2700" name="file1" dev="loop3" ino=86 res=0 errno=0
[ 1165.940092][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1165.948011][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1166.117936][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1166.144687][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1166.153417][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1166.212229][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1166.230438][T15144] xt_CT: No such helper "netbios-ns"
[ 1168.217474][T15202] loop5: detected capacity change from 0 to 7
[ 1168.280074][T15202] Dev loop5: unable to read RDB block 7
[ 1168.286177][ T4378] loop: Write error at byte offset 4, length 3584.
[ 1168.332866][    C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[ 1168.344310][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[ 1168.353023][T15202]  loop5: unable to read partition table
[ 1168.358951][T15202] loop5: partition table beyond EOD, truncated
[ 1168.430257][T15202] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[ 1168.510748][T15217] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2724'.
[ 1168.546383][T13801] 
[ 1168.548778][T13801] ======================================================
[ 1168.555820][T13801] WARNING: possible circular locking dependency detected
[ 1168.562910][T13801] syzkaller #0 Not tainted
[ 1168.567352][T13801] ------------------------------------------------------
[ 1168.574387][T13801] udevd/13801 is trying to acquire lock:
[ 1168.580039][T13801] ffff88807af0e938 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0
[ 1168.589990][T13801] 
[ 1168.589990][T13801] but task is already holding lock:
[ 1168.597376][T13801] ffff888146fe7468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[ 1168.606210][T13801] 
[ 1168.606210][T13801] which lock already depends on the new lock.
[ 1168.606210][T13801] 
[ 1168.616660][T13801] 
[ 1168.616660][T13801] the existing dependency chain (in reverse order) is:
[ 1168.625704][T13801] 
[ 1168.625704][T13801] -> #8 (&lo->lo_mutex){+.+.}-{3:3}:
[ 1168.633222][T13801]        __mutex_lock_common+0x1e3/0x2400
[ 1168.639000][T13801]        mutex_lock_killable_nested+0x17/0x20
[ 1168.645114][T13801]        lo_open+0x6a/0x100
[ 1168.649660][T13801]        blkdev_get_whole+0x90/0x390
[ 1168.655254][T13801]        blkdev_get_by_dev+0x2d0/0xa60
[ 1168.660755][T13801]        blkdev_open+0x12d/0x2c0
[ 1168.665723][T13801]        do_dentry_open+0x7ff/0xf80
[ 1168.670961][T13801]        path_openat+0x26f5/0x2fa0
[ 1168.676105][T13801]        do_filp_open+0x1e2/0x410
[ 1168.681254][T13801]        do_sys_openat2+0x150/0x4b0
[ 1168.686480][T13801]        __x64_sys_openat+0x135/0x160
[ 1168.691887][T13801]        do_syscall_64+0x4c/0xa0
[ 1168.696899][T13801]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1168.703381][T13801] 
[ 1168.703381][T13801] -> #7 (&disk->open_mutex){+.+.}-{3:3}:
[ 1168.711314][T13801]        __mutex_lock_common+0x1e3/0x2400
[ 1168.717079][T13801]        mutex_lock_nested+0x17/0x20
[ 1168.722419][T13801]        bd_register_pending_holders+0x33/0x310
[ 1168.728797][T13801]        device_add_disk+0x5a7/0xd40
[ 1168.734136][T13801]        md_alloc+0x809/0xc00
[ 1168.738847][T13801]        blk_request_module+0x26e/0x290
[ 1168.744431][T13801]        blkdev_get_no_open+0x38/0x1d0
[ 1168.749956][T13801]        blkdev_get_by_dev+0x77/0xa60
[ 1168.755362][T13801]        blkdev_open+0x12d/0x2c0
[ 1168.760328][T13801]        do_dentry_open+0x7ff/0xf80
[ 1168.765574][T13801]        path_openat+0x26f5/0x2fa0
[ 1168.770717][T13801]        do_filp_open+0x1e2/0x410
[ 1168.775765][T13801]        do_sys_openat2+0x150/0x4b0
[ 1168.780989][T13801]        __x64_sys_openat+0x135/0x160
[ 1168.786384][T13801]        do_syscall_64+0x4c/0xa0
[ 1168.791441][T13801]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1168.797888][T13801] 
[ 1168.797888][T13801] -> #6 (disks_mutex){+.+.}-{3:3}:
[ 1168.805220][T13801]        __mutex_lock_common+0x1e3/0x2400
[ 1168.811003][T13801]        mutex_lock_nested+0x17/0x20
[ 1168.816320][T13801]        md_alloc+0x48/0xc00
[ 1168.820977][T13801]        blk_request_module+0x26e/0x290
[ 1168.826556][T13801]        blkdev_get_no_open+0x38/0x1d0
[ 1168.832045][T13801]        blkdev_get_by_dev+0x77/0xa60
[ 1168.837450][T13801]        blkdev_open+0x12d/0x2c0
[ 1168.842403][T13801]        do_dentry_open+0x7ff/0xf80
[ 1168.847641][T13801]        path_openat+0x26f5/0x2fa0
[ 1168.852781][T13801]        do_filp_open+0x1e2/0x410
[ 1168.857847][T13801]        do_sys_openat2+0x150/0x4b0
[ 1168.863066][T13801]        __x64_sys_openat+0x135/0x160
[ 1168.868466][T13801]        do_syscall_64+0x4c/0xa0
[ 1168.873428][T13801]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1168.879871][T13801] 
[ 1168.879871][T13801] -> #5 (major_names_lock){+.+.}-{3:3}:
[ 1168.887631][T13801]        __mutex_lock_common+0x1e3/0x2400
[ 1168.893478][T13801]        mutex_lock_nested+0x17/0x20
[ 1168.898790][T13801]        blk_request_module+0x31/0x290
[ 1168.904276][T13801]        blkdev_get_no_open+0x38/0x1d0
[ 1168.909795][T13801]        blkdev_get_by_dev+0x77/0xa60
[ 1168.915198][T13801]        swsusp_check+0xa1/0x2b0
[ 1168.920172][T13801]        software_resume+0xc6/0x3b0
[ 1168.925400][T13801]        resume_store+0xe4/0x130
[ 1168.930364][T13801]        kernfs_fop_write_iter+0x379/0x4c0
[ 1168.936203][T13801]        vfs_write+0x745/0xd60
[ 1168.941000][T13801]        ksys_write+0x152/0x260
[ 1168.945878][T13801]        do_syscall_64+0x4c/0xa0
[ 1168.950859][T13801]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1168.957334][T13801] 
[ 1168.957334][T13801] -> #4 (system_transition_mutex/1){+.+.}-{3:3}:
[ 1168.965885][T13801]        __mutex_lock_common+0x1e3/0x2400
[ 1168.971642][T13801]        mutex_lock_nested+0x17/0x20
[ 1168.976967][T13801]        software_resume+0x7c/0x3b0
[ 1168.982194][T13801]        resume_store+0xe4/0x130
[ 1168.987164][T13801]        kernfs_fop_write_iter+0x379/0x4c0
[ 1168.993011][T13801]        vfs_write+0x745/0xd60
[ 1168.997798][T13801]        ksys_write+0x152/0x260
[ 1169.002673][T13801]        do_syscall_64+0x4c/0xa0
[ 1169.007676][T13801]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1169.014115][T13801] 
[ 1169.014115][T13801] -> #3 (&of->mutex){+.+.}-{3:3}:
[ 1169.021358][T13801]        __mutex_lock_common+0x1e3/0x2400
[ 1169.027101][T13801]        mutex_lock_nested+0x17/0x20
[ 1169.032501][T13801]        kernfs_seq_start+0x51/0x3c0
[ 1169.037819][T13801]        seq_read_iter+0x3c4/0xd50
[ 1169.042967][T13801]        vfs_read+0x759/0xd60
[ 1169.047668][T13801]        ksys_read+0x152/0x260
[ 1169.052463][T13801]        do_syscall_64+0x4c/0xa0
[ 1169.057435][T13801]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1169.063883][T13801] 
[ 1169.063883][T13801] -> #2 (&p->lock){+.+.}-{3:3}:
[ 1169.070970][T13801]        __mutex_lock_common+0x1e3/0x2400
[ 1169.076731][T13801]        mutex_lock_nested+0x17/0x20
[ 1169.082049][T13801]        seq_read_iter+0xad/0xd50
[ 1169.087120][T13801]        do_iter_readv_writev+0x47e/0x5f0
[ 1169.092894][T13801]        do_iter_read+0x20b/0x7c0
[ 1169.098074][T13801]        loop_process_work+0x16dd/0x24a0
[ 1169.103738][T13801]        process_one_work+0x85f/0x1010
[ 1169.109283][T13801]        worker_thread+0xaa6/0x1290
[ 1169.114512][T13801]        kthread+0x436/0x520
[ 1169.119123][T13801]        ret_from_fork+0x1f/0x30
[ 1169.124142][T13801] 
[ 1169.124142][T13801] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}:
[ 1169.133309][T13801]        process_one_work+0x7bb/0x1010
[ 1169.138798][T13801]        worker_thread+0xaa6/0x1290
[ 1169.144023][T13801]        kthread+0x436/0x520
[ 1169.148644][T13801]        ret_from_fork+0x1f/0x30
[ 1169.153610][T13801] 
[ 1169.153610][T13801] -> #0 ((wq_completion)loop5){+.+.}-{0:0}:
[ 1169.161804][T13801]        __lock_acquire+0x2c42/0x7d10
[ 1169.167239][T13801]        lock_acquire+0x19e/0x400
[ 1169.172287][T13801]        flush_workqueue+0x16c/0x13d0
[ 1169.177689][T13801]        drain_workqueue+0xcf/0x380
[ 1169.182913][T13801]        destroy_workqueue+0x7b/0xb20
[ 1169.188349][T13801]        __loop_clr_fd+0x234/0xb90
[ 1169.193500][T13801]        blkdev_put+0x53f/0x7d0
[ 1169.198573][T13801]        blkdev_close+0x76/0xa0
[ 1169.203440][T13801]        __fput+0x234/0x930
[ 1169.207970][T13801]        task_work_run+0x125/0x1a0
[ 1169.213113][T13801]        exit_to_user_mode_loop+0x10f/0x130
[ 1169.219042][T13801]        exit_to_user_mode_prepare+0xee/0x180
[ 1169.225221][T13801]        syscall_exit_to_user_mode+0x16/0x40
[ 1169.231238][T13801]        do_syscall_64+0x58/0xa0
[ 1169.236213][T13801]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1169.242656][T13801] 
[ 1169.242656][T13801] other info that might help us debug this:
[ 1169.242656][T13801] 
[ 1169.252895][T13801] Chain exists of:
[ 1169.252895][T13801]   (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex
[ 1169.252895][T13801] 
[ 1169.266383][T13801]  Possible unsafe locking scenario:
[ 1169.266383][T13801] 
[ 1169.273942][T13801]        CPU0                    CPU1
[ 1169.279337][T13801]        ----                    ----
[ 1169.284726][T13801]   lock(&lo->lo_mutex);
[ 1169.288992][T13801]                                lock(&disk->open_mutex);
[ 1169.296124][T13801]                                lock(&lo->lo_mutex);
[ 1169.302926][T13801]   lock((wq_completion)loop5);
[ 1169.307801][T13801] 
[ 1169.307801][T13801]  *** DEADLOCK ***
[ 1169.307801][T13801] 
[ 1169.315962][T13801] 2 locks held by udevd/13801:
[ 1169.320746][T13801]  #0: ffff888020dae118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[ 1169.330094][T13801]  #1: ffff888146fe7468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[ 1169.339363][T13801] 
[ 1169.339363][T13801] stack backtrace:
[ 1169.345269][T13801] CPU: 0 PID: 13801 Comm: udevd Not tainted syzkaller #0
[ 1169.352323][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1169.362537][T13801] Call Trace:
[ 1169.365848][T13801]  <TASK>
[ 1169.368812][T13801]  dump_stack_lvl+0x188/0x250
[ 1169.373537][T13801]  ? load_image+0x400/0x400
[ 1169.378099][T13801]  ? show_regs_print_info+0x20/0x20
[ 1169.383372][T13801]  ? print_circular_bug+0x12b/0x1a0
[ 1169.388633][T13801]  check_noncircular+0x296/0x330
[ 1169.393598][T13801]  ? add_chain_block+0x940/0x940
[ 1169.398566][T13801]  ? lockdep_lock+0xf1/0x1f0
[ 1169.403217][T13801]  ? mark_lock+0x94/0x320
[ 1169.407580][T13801]  __lock_acquire+0x2c42/0x7d10
[ 1169.412476][T13801]  ? __lock_acquire+0x13bc/0x7d10
[ 1169.417534][T13801]  ? verify_lock_unused+0x140/0x140
[ 1169.423164][T13801]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1169.429225][T13801]  ? verify_lock_unused+0x140/0x140
[ 1169.434453][T13801]  ? memset+0x1e/0x40
[ 1169.438468][T13801]  lock_acquire+0x19e/0x400
[ 1169.443010][T13801]  ? flush_workqueue+0x150/0x13d0
[ 1169.448069][T13801]  ? __mutex_trylock_common+0x155/0x260
[ 1169.453648][T13801]  ? read_lock_is_recursive+0x10/0x10
[ 1169.459053][T13801]  ? __init_swait_queue_head+0xa5/0x150
[ 1169.464632][T13801]  flush_workqueue+0x16c/0x13d0
[ 1169.469511][T13801]  ? flush_workqueue+0x150/0x13d0
[ 1169.474583][T13801]  ? __lock_acquire+0x7d10/0x7d10
[ 1169.479647][T13801]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1169.485664][T13801]  ? _raw_spin_lock_irqsave+0x8b/0x100
[ 1169.491171][T13801]  ? rcu_work_rcufn+0x120/0x120
[ 1169.496053][T13801]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1169.501723][T13801]  ? finish_wait+0xc0/0x1d0
[ 1169.506271][T13801]  drain_workqueue+0xcf/0x380
[ 1169.510987][T13801]  destroy_workqueue+0x7b/0xb20
[ 1169.515870][T13801]  __loop_clr_fd+0x234/0xb90
[ 1169.520492][T13801]  ? lo_release+0x172/0x1f0
[ 1169.525024][T13801]  ? lo_open+0x100/0x100
[ 1169.529305][T13801]  blkdev_put+0x53f/0x7d0
[ 1169.533710][T13801]  blkdev_close+0x76/0xa0
[ 1169.538071][T13801]  ? blkdev_open+0x2c0/0x2c0
[ 1169.542687][T13801]  __fput+0x234/0x930
[ 1169.546714][T13801]  task_work_run+0x125/0x1a0
[ 1169.551372][T13801]  exit_to_user_mode_loop+0x10f/0x130
[ 1169.556798][T13801]  exit_to_user_mode_prepare+0xee/0x180
[ 1169.562420][T13801]  syscall_exit_to_user_mode+0x16/0x40
[ 1169.567919][T13801]  do_syscall_64+0x58/0xa0
[ 1169.572389][T13801]  ? clear_bhb_loop+0x30/0x80
[ 1169.577103][T13801]  ? clear_bhb_loop+0x30/0x80
[ 1169.581828][T13801]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1169.588451][T13801] RIP: 0033:0x7f1aa526b407
[ 1169.592909][T13801] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1169.612544][T13801] RSP: 002b:00007fff8b8d5af0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[ 1169.620999][T13801] RAX: 0000000000000000 RBX: 00007f1aa517d880 RCX: 00007f1aa526b407
[ 1169.629005][T13801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[ 1169.637112][T13801] RBP: 00007f1aa517d6e8 R08: 0000000000000000 R09: 0000000000000000
[ 1169.645148][T13801] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[ 1169.653154][T13801] R13: 00005606737b1410 R14: 0000000000000008 R15: 00005606737a3840
[ 1169.661187][T13801]  </TASK>