last executing test programs:

9m55.337541385s ago: executing program 0 (id=1):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xf)
accept4$unix(r1, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

9m54.676240557s ago: executing program 1 (id=8):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4044000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m53.706162856s ago: executing program 0 (id=9):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x608141)
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0xd)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)

9m53.093142548s ago: executing program 1 (id=12):
ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl(r2, 0x7fff, &(0x7f0000000080)="2df149470fc87aa924fb67c5f74c1bd6fdee6c57191304af01")
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x15, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d63703836342c636865636b3d6e6f726d616c2c756e695f786c6174653d312c756e695f786c6174653db12c757466383d302c757466383d312c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c636f6465706167653d3933322c757466383d302c73686f72746e616d653d6c6f7765722c757466383d312c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c00"], 0x1, 0x36b, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x68)

9m49.495554975s ago: executing program 1 (id=14):
socketpair(0x1, 0x80000, 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x2c, 0x3, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))

9m46.313708724s ago: executing program 1 (id=16):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getpeername$l2tp(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4810)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

9m45.220565259s ago: executing program 1 (id=19):
r0 = gettid()
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

9m40.153555869s ago: executing program 1 (id=24):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

9m37.607130302s ago: executing program 32 (id=9):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x608141)
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0xd)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)

9m24.069297867s ago: executing program 33 (id=24):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

9m8.602066496s ago: executing program 2 (id=56):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x2c}}, 0x0)

9m6.845265711s ago: executing program 2 (id=59):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9m3.497891134s ago: executing program 2 (id=62):
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
umount2(0x0, 0x9)

9m1.732016443s ago: executing program 2 (id=64):
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000cf03000085000000b400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

8m59.705134811s ago: executing program 2 (id=66):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c)
r2 = dup2(r1, r1)
write$tun(r2, 0x0, 0x46)

8m58.575092278s ago: executing program 2 (id=69):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
sendfile(r2, r3, 0x0, 0x7ffff004)

8m42.301834907s ago: executing program 34 (id=69):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
sendfile(r2, r3, 0x0, 0x7ffff004)

8m20.801343124s ago: executing program 3 (id=95):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c)

8m19.501185656s ago: executing program 3 (id=96):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x4, 0x10100}, &(0x7f00000000c0), &(0x7f0000000100))
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4)
io_uring_enter(r1, 0x46f6, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000855}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3208402, &(0x7f0000000c00)=ANY=[], 0x1, 0xa6a, &(0x7f0000002700)="$eJzs3U2MW0cBAOB53vUmm6TEKQldktAm/LTlp7vNZgk/EbRVcyFqKm6VKi5RmpaINCBSCVpVIsmJG62qcOVHnMqhAoTUXlDUE5dKNBKXngoHDkRBqsQBComr2DNee9bWs/fP9vr7pNnxvHn2zHv7/Pz+ZiYAE6vS+Lu0NFeEcPWt10788/5/zN6Z8khrjlrj73RbqhpCKGJ6Ovu896ea8a0PXj7TLS7CYuNvSocnb7beuzOEcCkcCtdCLey/ev3VdxafOHX55JXD775+/MbGLD0AAEyWb187vrTvb385sOfDN+59NGxrTU/H57WY3hW2d7wvHf9XsnTRFtrNZPNNx1DJ5pvqMl97OdVsvuke5c9kn1tt5R/omG9bSflTbdO6LTeMs7Qd10JRme9IVyrz881z8tA4r58p5i+cO//sxSFVFFh3/74vhHBIGDTU6/WfNFbgCNRFEFYb6ruHvQcCaMrvF65wKb+ysDatT5vur/ybj1W6vx/WwWZv/+Ncfv7swWaXvxHKyv/NZXsc1s9W3ZrScqXv0a6Yzu8j5PuQQb//6fPy+xHVPuvZ6z7CuNxf6FXPqU2ux2r1qv9G/LaMom/EOK2Hb2b57d+f/H86Lv9joLv/rOn6/9TQr18OGg6NQB22dKiOQB2EvkN92DsgYGQtPzfXVI9Sfv5cX56/rSR/e0n+bEn+jpL8nSX5MMn+8MLPwivF8nl+fk6fps+E/q6Hpetsd8X4YwPWJ78eOej1uPy530Gttfz8eWIYZW+efursV595+nrz+f+itf3fjtv7oZiuxe/WtThDul6YX1dvPftf6yyn0mO+u7P63LVi/nqzxL2d8xV7lz8ntO1nVtRjrvN9u3vNd7Bzvlo232wM27P65scnO7L3peOPtF9N62s6W95qthwzWT3SfmVPjPN6wGqk7bHX8/9p+5wL1eLZc+fPPhzTaTv981R1253pR9o/9LebU3dgbfpt/zMXOtv/7GpNr1ba9wu7l6cX7fuFWjZ9sZls3SZP04/GdPqd++7UbGP6/Jnvn39mvRceJtzFF1/63unz58/+0Iv0YtZq8cKLYe+ZgI228MLzP1i4+OJLD517/vRzZ587e+HosWNHFxePfe3o0kLjuH6h/ege2EqWf/SHXRMAAAAAAAAAAACgXz86eeL6X9/+ynvN9v/L7f9S+//05G9q///TrP1/3k4+tYNP7QD3dMlvjLv3Zmc9ZrL5qjF8PKvv3qycfdn7PhHj1jh+sf1/am+f9+ua6nNPNj3vvzfNl3UnsKK/lJmsD5J8vMBPx/hKjH8dYIiK2e6TY1zWv3Xa1lP/FPqlGE/p/5a2htSPSWr/3atfp7T/37MJdWT9bUZzwmEvI9Ddv0Z+/M+2I/Gh12UCgvU8UaFeX+0oHv2OcAPQn2GP/5mue6b4wp++tf1OSLPdfKxzf5n3XwprMerjTyp/a43/2Rr/rq/9X5fe1Tv6ee5/dIX//uLGe23Fhv397n/z5U/9QO8tL7Pdh7H8tPwPhP7Kr/8qKz+/IdSn/2Xl7+iz/BXLf3B15f8/lp9W24Of6bf8Zo2LSmc98uvG6f5fft04uZUtf+rbc+DlX+VAjbdj+TDJeo8zO97n92My/m/Pqy/5cxhfjum0I0zPOeS/yIPWPz1fkX4H9mWfX5T8vo3LOMW9TPr4v1+Pcdn3IY3/m7bHWpd0pS1d7bJux31bga3m/ZG//zdm4dII1EEY0TA7AnXoDPV6fWMvaJUYauEMff2v9u7zVil/2Ou/TD7+b34Mn4//W8lOIPLxf/P35+P/5vn5+Hp5fj7+b74+8/F/8/x7ss/Nr2DPleR/siR/f0n+geX82W75B0ve/6mS/MMl+feW5N9Xkn93Sf5USf5nS/I/V5J/f0n+gyX5ny/J3+pSe5RJXX6YZHn7PN9/mBzp/k+v7//eknxgfP38jSOPP/3779Sa7f9nWudr6T7eozFdjefOP47p/L53aEvfyXs7pv+e5Y/69Q6YJHn/Gfnv+wMl+cD4Ss95+X7DBCq699jTb79VvY7zGS9fiPEXY/ylGD8U4/kYL8T4SIwXN6l+bIzHf/fH468Uy+f7u7P8fp8nz9sD5f1EHe2zPvn1gUGfZ8/78RvUWstfZXMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoak0/i4tzRUhXH3rtRNPnTq3cGfKI605ao2/022paut9ITwc46kY/zK+uPXBy2fa49sxLsJiKELRmh6evNkqaWcI4VI4FK6FWth/9fqr7yw+ceryySuH3339+I2NWwMAAACw9X0UAAD//xnWF18=")

8m13.536078908s ago: executing program 3 (id=99):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x40041)

8m10.665271617s ago: executing program 3 (id=101):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x10800, 0x0)
fstat(r3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params]}, 0x1c}}, 0x0)

8m4.754795166s ago: executing program 3 (id=103):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
bpf$ITER_CREATE(0x22, 0x0, 0x0)
r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x400000, 0x14b}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x1000})
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='memory'}]})
io_uring_enter(r3, 0x247f6, 0x80ffff, 0x0, 0x0, 0x0)

8m2.873802494s ago: executing program 3 (id=105):
syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

7m47.11343174s ago: executing program 35 (id=105):
syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

6m11.566590397s ago: executing program 4 (id=156):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @remote}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18)

6m10.357100317s ago: executing program 4 (id=158):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000006, 0x1000000006, 0x10007ffffe]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m8.14362581s ago: executing program 4 (id=161):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8)
writev(r0, &(0x7f0000000140), 0x0)

6m6.58515039s ago: executing program 4 (id=162):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0)

6m5.499431028s ago: executing program 4 (id=163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x2)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_cancel(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x1, 0x2011, 0x1000000})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10)

6m1.492739919s ago: executing program 4 (id=165):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x9, 0x8, 0x75a29b65, 0xef, 0x6, 0x7, 0xa04, 0x0, 0x7, 0x82, 0x4, 0x6, 0x0, 0xff15, 0x6, 0x2, 0xfff, 0x7, 0x4, 0x4, 0x1ff, 0xc000000, 0xa8e, 0xfffeffff, 0x7fffffff, 0x1, 0xfffffffd, 0x5, 0x9, 0x8, 0x1, 0x3, 0x1, 0x268, 0x100, 0xfffffffd, 0x514, 0x5, 0x5b, 0x6, 0x5, 0x1, 0x7, 0x2f50, 0xbaf1, 0x7ff, 0x1, 0x7fff, 0x12, 0xb, 0x9, 0xff, 0x1, 0x2, 0x5, 0xffffffff, 0xfffffffe, 0x400, 0x7, 0x4, 0x9, 0xffffffff, 0x80000000, 0x2, 0x6, 0xeedc, 0x1, 0x5, 0x182, 0x10, 0x100, 0x0, 0xff, 0xffffffff, 0x9, 0x5, 0x1, 0x1ff, 0x5, 0x7, 0x2, 0x7, 0xb071, 0xffb9, 0x3, 0x0, 0xf, 0x348, 0x8, 0x0, 0x6, 0x14, 0x8, 0x73b, 0x0, 0x400, 0x2, 0x9, 0x3, 0xfc24, 0x7, 0x7, 0xfffffff0, 0x4, 0x100, 0x3, 0x7fffffff, 0x0, 0x7ff, 0x3, 0xb59, 0xf, 0x9, 0x8, 0x0, 0x401, 0x80000000, 0x1, 0xc71, 0x6, 0x3e0, 0x0, 0x9, 0x1ff, 0x1, 0x9, 0x1]}})

5m45.297207544s ago: executing program 36 (id=165):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x9, 0x8, 0x75a29b65, 0xef, 0x6, 0x7, 0xa04, 0x0, 0x7, 0x82, 0x4, 0x6, 0x0, 0xff15, 0x6, 0x2, 0xfff, 0x7, 0x4, 0x4, 0x1ff, 0xc000000, 0xa8e, 0xfffeffff, 0x7fffffff, 0x1, 0xfffffffd, 0x5, 0x9, 0x8, 0x1, 0x3, 0x1, 0x268, 0x100, 0xfffffffd, 0x514, 0x5, 0x5b, 0x6, 0x5, 0x1, 0x7, 0x2f50, 0xbaf1, 0x7ff, 0x1, 0x7fff, 0x12, 0xb, 0x9, 0xff, 0x1, 0x2, 0x5, 0xffffffff, 0xfffffffe, 0x400, 0x7, 0x4, 0x9, 0xffffffff, 0x80000000, 0x2, 0x6, 0xeedc, 0x1, 0x5, 0x182, 0x10, 0x100, 0x0, 0xff, 0xffffffff, 0x9, 0x5, 0x1, 0x1ff, 0x5, 0x7, 0x2, 0x7, 0xb071, 0xffb9, 0x3, 0x0, 0xf, 0x348, 0x8, 0x0, 0x6, 0x14, 0x8, 0x73b, 0x0, 0x400, 0x2, 0x9, 0x3, 0xfc24, 0x7, 0x7, 0xfffffff0, 0x4, 0x100, 0x3, 0x7fffffff, 0x0, 0x7ff, 0x3, 0xb59, 0xf, 0x9, 0x8, 0x0, 0x401, 0x80000000, 0x1, 0xc71, 0x6, 0x3e0, 0x0, 0x9, 0x1ff, 0x1, 0x9, 0x1]}})

8.026637165s ago: executing program 9 (id=713):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119)
socket$l2tp6(0xa, 0x2, 0x73)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000180)={0x2, "08d9fca767e3ff09cc69bbd7d1a5b37daeaf79a756439e64c61a30f117a3fba5b31a96513eb0213b3df7942dab008e8acbcd63660826f0926109085ca90b2967"})

7.291215985s ago: executing program 6 (id=714):
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet(0x2b, 0x801, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet(0xa, 0x801, 0x84)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

6.058956955s ago: executing program 9 (id=719):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xd, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x46c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x397, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x401, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x5, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xceff, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7ffffffe, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x1, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x7fff, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x5e8, 0x8, 0x7e, 0xa1b4, 0x0, 0x3, 0x10000, 0x5, 0x8, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x5, 0x5, 0xff, 0x1, 0x0, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x7b, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0xe, 0xe00, 0x80000001, 0x80000000, 0x12, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x4, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x5, 0x2, 0x7f, 0xfa, 0x2, 0x7, 0x9, 0x2f, 0x7, 0x0, 0x1, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x6, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0xff, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x2, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x3, 0x81, 0x8, 0x7ff, 0x21a, 0x401, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)

6.054870556s ago: executing program 8 (id=720):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
shutdown(r1, 0x0)

5.864085341s ago: executing program 6 (id=721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

5.553178161s ago: executing program 5 (id=723):
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

5.051665493s ago: executing program 9 (id=724):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa61, &(0x7f0000001c00)="$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")
open(&(0x7f0000000600)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100230086dd66089f4f001406fffc000000000000000000000000000000000000000000000000002e00000000014e224e", @ANYRES32=0x41424344], 0x0)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f})

4.957565803s ago: executing program 7 (id=725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080"], 0x6f4}}, 0x0)

4.949144567s ago: executing program 8 (id=726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

4.927980476s ago: executing program 6 (id=727):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x24040890)

4.210328235s ago: executing program 5 (id=728):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000500000000000000009500000000000000360a020000000000180100002020782500000000002020207f1af8ff00000000bfa100000000000007010000f8ffffffb702d0ff08000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0xf3, &(0x7f0000000500)=""/243, 0x0, 0x8}, 0x94)

3.959825156s ago: executing program 6 (id=729):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119)
socket$l2tp6(0xa, 0x2, 0x73)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000180)={0x2, "08d9fca767e3ff09cc69bbd7d1a5b37daeaf79a756439e64c61a30f117a3fba5b31a96513eb0213b3df7942dab008e8acbcd63660826f0926109085ca90b2967"})

3.821438036s ago: executing program 7 (id=730):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004054)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'veth0_to_hsr\x00'}}, 0x1e)
close(r0)

3.431786018s ago: executing program 8 (id=731):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
listen(r2, 0x80)
r3 = accept$netrom(r2, 0x0, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xffdd)
close(0x4)
accept4(r3, 0x0, 0x0, 0x80000)

3.231196804s ago: executing program 5 (id=732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x5c, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @random="4d9820f81d13", {0xc, 0x5}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x2, 0x0, 0x3}}, 0x2000, 0x3c, @default, @void, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080)

3.041379927s ago: executing program 7 (id=733):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r1}}], 0x20, 0xc005}], 0x1, 0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0x5}, &(0x7f0000000200)=0x8)

2.994994909s ago: executing program 9 (id=734):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xd, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x46c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x397, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x401, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x5, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xceff, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7ffffffe, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x1, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x7fff, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x5e8, 0x8, 0x7e, 0xa1b4, 0x0, 0x3, 0x10000, 0x5, 0x8, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x5, 0x5, 0xff, 0x1, 0x0, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x7b, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0xe, 0xe00, 0x80000001, 0x80000000, 0x12, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x4, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x5, 0x2, 0x7f, 0xfa, 0x2, 0x7, 0x9, 0x2f, 0x7, 0x0, 0x1, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x6, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0xff, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x2, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x3, 0x81, 0x8, 0x7ff, 0x21a, 0x401, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)

2.311270822s ago: executing program 8 (id=735):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000240)=0x42, 0x4)
sendmmsg$inet(r0, &(0x7f0000000f80)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x4999fa8a21807244)

2.177402616s ago: executing program 7 (id=736):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
shutdown(r1, 0x0)

2.169189513s ago: executing program 5 (id=737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4)

2.118340102s ago: executing program 6 (id=738):
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000037000000", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

1.730845082s ago: executing program 9 (id=739):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x24040890)

1.377712062s ago: executing program 8 (id=740):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
socket$netlink(0x10, 0x3, 0x0)
write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)

1.267593903s ago: executing program 5 (id=741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

1.164404386s ago: executing program 7 (id=742):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000500000000000000009500000000000000360a020000000000180100002020782500000000002020207f1af8ff00000000bfa100000000000007010000f8ffffffb702d0ff08000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xf3, &(0x7f0000000500)=""/243, 0x0, 0x8}, 0x94)

962.010559ms ago: executing program 6 (id=743):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

698.294427ms ago: executing program 9 (id=744):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa61, &(0x7f0000001c00)="$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")
open(&(0x7f0000000600)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100230086dd66089f4f001406fffc000000000000000000000000000000000000000000000000002e00000000014e224e", @ANYRES32=0x41424344], 0x0)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f})

353.329267ms ago: executing program 8 (id=745):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4)
r2 = socket$pppoe(0x18, 0x1, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x5)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYBLOB="010027bd70000000000067db0000080003", @ANYBLOB='\f'], 0x34}}, 0x8080)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000003580)={@ipv4}, 0x0)
sendmmsg$sock(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000000180)}}, {{&(0x7f0000000340)=@x25, 0x80, 0x0}}, {{&(0x7f0000003400)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f0000000640)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003800)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003880)="3de3c32fa325a399e20f19971879b4d6d2178ddb6c62725b613e467d5b46e08f284c7030a71ce22394781ad835064261d90afe0b0c848442b12ac1d4b520d1e076d1f7ffcc807016f54d2c5c4714579496a4e819009f6b1d076b11c4881ea141f41e661ac66dde2890eca37944870449ed7e98d20445562aeb3d8ca4e5d2e072a36a543442df3cabdeb4191fb5c1f96700fdc0be68b08e2411d1b298442756142e3501a4f39e66a6072afb8dad992a1038aabb64925ab80b3c1023cc16e99cba36642a0659215bf30ca3337dc204f3f49fa007f46b0139", 0xd7}, {&(0x7f0000003980)}, {&(0x7f0000003ac0)="d4f9e6c6113ae7748fc2175052a80952a47d24a261c8837ec687b937b05192ff32c633e09b0212f64eea24ef83735bdbb7054001b33d409f2d5b46c0e920d42befaee2b15bf10e02ed80e0ef7b2c569e97b49cfe62ff036f4735", 0x5a}, {&(0x7f0000003bc0)}, {&(0x7f0000004bc0)}, {&(0x7f0000004c40)="eef6a3e9f0265dc90b64375431915dbdc1b7ac08a0a848c510032ff6ea402c41060705aabba6b80520eaf2c8f6052cea4c585158", 0x34}, {&(0x7f0000004c80)="1e708587f13ce738a54d665525d979a34152aa7012e1884e278fdff69389b3c6b342aee8d717b4fe21a83873a3", 0x2d}], 0x7, &(0x7f0000004d40)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f00000069c0), 0x0, &(0x7f0000006a80)}}], 0x6, 0x20004000)
setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r7, 0x29a5f000)

230.636618ms ago: executing program 7 (id=746):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=747):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x80, 0x0, 0x7, 0x0, 0xc2, 0x4, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}})

kernel console output (not intermixed with test programs):

beyond end of device
[  332.844082][ T6380] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  333.182013][ T5802] Bluetooth: hci5: command tx timeout
[  333.782729][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.716973][ T6310] team0: Port device team_slave_0 added
[  335.040493][ T6310] team0: Port device team_slave_1 added
[  335.479058][ T6387] bridge_slave_0: left allmulticast mode
[  335.485413][ T6387] bridge_slave_0: left promiscuous mode
[  335.492904][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.729862][ T6388] netlink: 'syz.4.102': attribute type 10 has an invalid length.
[  335.794012][ T6387] bridge_slave_1: left allmulticast mode
[  335.800067][ T6387] bridge_slave_1: left promiscuous mode
[  335.807147][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.965948][ T6387] bond0: (slave bond_slave_0): Releasing backup interface
[  336.110180][ T6387] bond0: (slave bond_slave_1): Releasing backup interface
[  336.279875][ T6387] team0: Port device team_slave_0 removed
[  336.477173][ T6387] team0: Port device team_slave_1 removed
[  336.489225][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.497377][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.755721][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.763790][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.394277][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.401629][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.428361][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.978187][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.985578][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.019886][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.242154][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.256630][ T6388] team0: Port device bond0 added
[  338.544505][ T6398] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  338.554505][ T6398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  338.564655][ T6398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  338.629050][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  338.629138][   T30] audit: type=1800 audit(1754224321.083:32): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.101" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  338.728605][ T3790] bridge_slave_1: left allmulticast mode
[  338.734959][ T3790] bridge_slave_1: left promiscuous mode
[  338.741986][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.940885][ T3790] bridge_slave_0: left allmulticast mode
[  338.946793][ T3790] bridge_slave_0: left promiscuous mode
[  338.954095][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.357082][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.378062][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.583078][ T3790] bond0 (unregistering): Released all slaves
[  341.403696][ T6417] loop3: detected capacity change from 0 to 512
[  341.474018][ T6417] EXT4-fs: Ignoring removed mblk_io_submit option
[  341.485270][ T3790] hsr_slave_0: left promiscuous mode
[  341.503043][ T3790] hsr_slave_1: left promiscuous mode
[  341.513466][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.534225][ T6417] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  341.595366][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.641681][ T6417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  341.650567][ T6417] System zones: 1-12
[  341.935975][ T6417] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.105: corrupted in-inode xattr: e_value size too large
[  342.001966][ T6417] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.105: couldn't read orphan inode 15 (err -117)
[  342.069147][ T6417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.851842][ T3790] team0 (unregistering): Port device team_slave_1 removed
[  343.001807][ T3790] team0 (unregistering): Port device team_slave_0 removed
[  343.417125][ T6428] loop4: detected capacity change from 0 to 512
[  343.586393][ T6428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.604357][ T6428] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.055115][ T6361] chnl_net:caif_netlink_parms(): no params data found
[  344.410509][ T6310] hsr_slave_0: entered promiscuous mode
[  344.432078][ T6310] hsr_slave_1: entered promiscuous mode
[  344.441473][ T6310] debugfs: 'hsr0' already exists in 'hsr'
[  344.447406][ T6310] Cannot create hsr debugfs directory
[  344.488009][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.584997][ T6289] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  347.376744][ T6289] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  347.524759][ T6289] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  347.629487][ T6289] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  349.328543][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.344683][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.352786][ T6361] bridge_slave_0: entered allmulticast mode
[  349.363201][ T6361] bridge_slave_0: entered promiscuous mode
[  349.405180][ T6452] loop4: detected capacity change from 0 to 4096
[  349.537892][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.552203][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.560269][ T6361] bridge_slave_1: entered allmulticast mode
[  349.571118][ T6361] bridge_slave_1: entered promiscuous mode
[  349.739314][ T6452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.899927][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.124669][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.382186][ T6310] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  352.449874][ T6361] team0: Port device team_slave_0 added
[  352.501522][ T6310] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  352.616529][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  352.623123][ T6361] team0: Port device team_slave_1 added
[  352.625376][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  352.660522][ T6310] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  352.695284][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.698122][ T6310] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  353.091786][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.132459][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.139634][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.166137][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.428533][ T6289] 8021q: adding VLAN 0 to HW filter on device team0
[  353.474938][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.482685][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.509301][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.639763][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.647476][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.833806][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.841723][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.001177][ T6465] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  354.191297][ T6361] hsr_slave_0: entered promiscuous mode
[  354.200290][ T6361] hsr_slave_1: entered promiscuous mode
[  354.208291][ T6361] debugfs: 'hsr0' already exists in 'hsr'
[  354.214254][ T6361] Cannot create hsr debugfs directory
[  354.873819][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.374701][ T6310] 8021q: adding VLAN 0 to HW filter on device team0
[  355.611448][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.618910][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.803232][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.811062][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.769640][ T6310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  357.416808][ T6361] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  357.571091][ T6361] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  357.651618][ T1563] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  357.738556][ T6361] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  357.869249][ T6361] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  357.903228][ T1563] usb 5-1: Using ep0 maxpacket: 16
[  357.955470][ T1563] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  357.969858][ T1563] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  357.980831][ T1563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.052897][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.087899][ T1563] usb 5-1: config 0 descriptor??
[  358.138041][ T1563] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5
[  358.361140][ T5147] bcm5974 5-1:0.0: could not read from device
[  358.412166][ T5147] bcm5974 5-1:0.0: could not read from device
[  358.501715][ T5147] bcm5974 5-1:0.0: could not read from device
[  358.545740][ T1563] usb 5-1: USB disconnect, device number 2
[  358.563745][ T5147] bcm5974 5-1:0.0: could not read from device
[  358.759998][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.461163][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  359.494279][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  359.520557][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  359.547366][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  359.559620][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.155306][ T6495] loop4: detected capacity change from 0 to 256
[  360.233075][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.357033][ T6361] 8021q: adding VLAN 0 to HW filter on device team0
[  360.527794][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.544026][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.551772][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.723971][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.731874][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.294831][ T6495] FAT-fs (loop4): Directory bread(block 64) failed
[  361.303138][ T6495] FAT-fs (loop4): Directory bread(block 65) failed
[  361.310069][ T6495] FAT-fs (loop4): Directory bread(block 66) failed
[  361.322083][ T6495] FAT-fs (loop4): Directory bread(block 67) failed
[  361.329022][ T6495] FAT-fs (loop4): Directory bread(block 68) failed
[  361.338630][ T6495] FAT-fs (loop4): Directory bread(block 69) failed
[  361.346215][ T6495] FAT-fs (loop4): Directory bread(block 70) failed
[  361.353171][ T6495] FAT-fs (loop4): Directory bread(block 71) failed
[  361.360099][ T6495] FAT-fs (loop4): Directory bread(block 72) failed
[  361.367000][ T6495] FAT-fs (loop4): Directory bread(block 73) failed
[  361.683892][   T49] Bluetooth: hci4: command tx timeout
[  361.723120][ T6489] chnl_net:caif_netlink_parms(): no params data found
[  363.916438][   T49] Bluetooth: hci4: command tx timeout
[  364.790427][ T1873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.089979][ T1873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.290462][ T1873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.022607][ T1873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.047038][   T49] Bluetooth: hci4: command tx timeout
[  366.212799][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  366.248155][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  366.282487][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  366.377384][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  366.392914][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  366.687169][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.695399][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.703466][ T6489] bridge_slave_0: entered allmulticast mode
[  366.713756][ T6489] bridge_slave_0: entered promiscuous mode
[  366.967815][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.975786][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.984038][ T6489] bridge_slave_1: entered allmulticast mode
[  366.994391][ T6489] bridge_slave_1: entered promiscuous mode
[  367.728872][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.757357][ T1873] bridge_slave_1: left allmulticast mode
[  367.763600][ T1873] bridge_slave_1: left promiscuous mode
[  367.775188][ T1873] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.835072][ T1873] bridge_slave_0: left allmulticast mode
[  367.841356][ T1873] bridge_slave_0: left promiscuous mode
[  367.848093][ T1873] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.148851][ T5802] Bluetooth: hci4: command tx timeout
[  368.617406][ T5802] Bluetooth: hci2: command tx timeout
[  369.027792][ T1873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.086297][ T1873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.106548][ T1873] bond0 (unregistering): Released all slaves
[  369.132956][ T1873] bond1 (unregistering): Released all slaves
[  369.174301][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.306729][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.482137][ T6489] team0: Port device team_slave_0 added
[  370.630935][   T49] Bluetooth: hci2: command tx timeout
[  370.711107][ T6489] team0: Port device team_slave_1 added
[  370.981090][ T1873] hsr_slave_0: left promiscuous mode
[  371.022058][ T1873] hsr_slave_1: left promiscuous mode
[  371.029616][ T1873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.037501][ T1873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  371.103264][ T1873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.116898][ T1873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.193023][ T1873] veth1_macvtap: left promiscuous mode
[  371.198798][ T1873] veth0_macvtap: left promiscuous mode
[  371.205034][ T1873] veth1_vlan: left promiscuous mode
[  371.213002][ T1873] veth0_vlan: left promiscuous mode
[  371.852866][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.893972][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.949527][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  372.010189][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  372.031977][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  372.711774][   T49] Bluetooth: hci2: command tx timeout
[  373.084622][ T1873] team0 (unregistering): Port device team_slave_1 removed
[  373.126975][ T1873] team0 (unregistering): Port device team_slave_0 removed
[  374.162346][   T49] Bluetooth: hci0: command tx timeout
[  374.791239][   T49] Bluetooth: hci2: command tx timeout
[  375.240292][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.250200][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.277659][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.867614][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.874895][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.901879][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.311278][   T49] Bluetooth: hci0: command tx timeout
[  376.903525][ T6489] hsr_slave_0: entered promiscuous mode
[  376.914840][ T6489] hsr_slave_1: entered promiscuous mode
[  376.924541][ T6489] debugfs: 'hsr0' already exists in 'hsr'
[  376.930553][ T6489] Cannot create hsr debugfs directory
[  377.215007][ T6530] chnl_net:caif_netlink_parms(): no params data found
[  378.040874][ T1563] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  378.223273][ T1563] usb 5-1: Using ep0 maxpacket: 8
[  378.256247][ T1563] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  378.265835][ T1563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.276180][ T1563] usb 5-1: Product: syz
[  378.280796][ T1563] usb 5-1: Manufacturer: syz
[  378.285594][ T1563] usb 5-1: SerialNumber: syz
[  378.413707][   T49] Bluetooth: hci0: command tx timeout
[  378.444716][ T1563] usb 5-1: config 0 descriptor??
[  378.671121][ T1563] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  378.739005][ T1873] bridge_slave_1: left allmulticast mode
[  378.745466][ T1873] bridge_slave_1: left promiscuous mode
[  378.753745][ T1873] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.786581][ T1873] bridge_slave_0: left allmulticast mode
[  378.794460][ T1873] bridge_slave_0: left promiscuous mode
[  378.802349][ T1873] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.056401][ T6577] loop4: detected capacity change from 0 to 256
[  379.400520][ T1873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.436542][ T1873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.492033][ T1873] bond0 (unregistering): Released all slaves
[  379.597743][ T6361] veth0_vlan: entered promiscuous mode
[  379.826243][ T6577] syz.4.125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  379.875550][ T1563] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  379.924672][ T1563] usb 5-1: USB disconnect, device number 3
[  380.042666][ T1873] hsr_slave_0: left promiscuous mode
[  380.112547][ T1873] hsr_slave_1: left promiscuous mode
[  380.121459][ T1873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.189034][ T1873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.495439][   T49] Bluetooth: hci0: command tx timeout
[  380.816547][ T1873] team0 (unregistering): Port device team_slave_1 removed
[  380.925018][ T1873] team0 (unregistering): Port device team_slave_0 removed
[  381.973547][ T6593] loop4: detected capacity change from 0 to 32768
[  382.082840][ T6593] find_entry called with index >= next_index
[  382.123287][ T6361] veth1_vlan: entered promiscuous mode
[  382.695137][ T6553] chnl_net:caif_netlink_parms(): no params data found
[  383.507488][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.515538][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.523654][ T6530] bridge_slave_0: entered allmulticast mode
[  383.533908][ T6530] bridge_slave_0: entered promiscuous mode
[  383.923286][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.931430][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.939245][ T6530] bridge_slave_1: entered allmulticast mode
[  383.952987][ T6530] bridge_slave_1: entered promiscuous mode
[  384.823753][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  384.833165][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  384.847884][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  384.997314][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  385.042120][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  385.262615][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.281650][ T6489] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  385.414190][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.500908][ T6489] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  386.092724][ T6530] team0: Port device team_slave_0 added
[  386.109260][ T6489] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  386.156715][ T6530] team0: Port device team_slave_1 added
[  386.445395][ T6489] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  386.912165][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.923288][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.931464][ T6553] bridge_slave_0: entered allmulticast mode
[  386.942536][ T6553] bridge_slave_0: entered promiscuous mode
[  386.985959][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.993287][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.022676][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.143536][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.151349][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.159177][ T6553] bridge_slave_1: entered allmulticast mode
[  387.169610][ T6553] bridge_slave_1: entered promiscuous mode
[  387.191286][ T5802] Bluetooth: hci3: command tx timeout
[  387.489982][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.497420][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.524253][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.675162][ T6606] loop4: detected capacity change from 0 to 4096
[  387.860950][ T6609] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  388.069860][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.436478][ T1873] bridge_slave_1: left allmulticast mode
[  388.442640][ T1873] bridge_slave_1: left promiscuous mode
[  388.449351][ T1873] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.511792][ T1873] bridge_slave_0: left allmulticast mode
[  388.518067][ T1873] bridge_slave_0: left promiscuous mode
[  388.525871][ T1873] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.610877][ T6614] loop4: detected capacity change from 0 to 256
[  388.904966][ T6614] FAT-fs (loop4): Directory bread(block 64) failed
[  388.912220][ T6614] FAT-fs (loop4): Directory bread(block 65) failed
[  388.919168][ T6614] FAT-fs (loop4): Directory bread(block 66) failed
[  388.926162][ T6614] FAT-fs (loop4): Directory bread(block 67) failed
[  388.933299][ T6614] FAT-fs (loop4): Directory bread(block 68) failed
[  388.940075][ T6614] FAT-fs (loop4): Directory bread(block 69) failed
[  388.947252][ T6614] FAT-fs (loop4): Directory bread(block 70) failed
[  388.954284][ T6614] FAT-fs (loop4): Directory bread(block 71) failed
[  388.961427][ T6614] FAT-fs (loop4): Directory bread(block 72) failed
[  388.970393][ T6614] FAT-fs (loop4): Directory bread(block 73) failed
[  389.158477][ T1873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.180525][ T1873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.209916][ T1873] bond0 (unregistering): Released all slaves
[  389.279274][ T5802] Bluetooth: hci3: command tx timeout
[  389.331686][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.375067][ T6530] hsr_slave_0: entered promiscuous mode
[  389.389984][ T6530] hsr_slave_1: entered promiscuous mode
[  389.399487][ T6530] debugfs: 'hsr0' already exists in 'hsr'
[  389.405709][ T6530] Cannot create hsr debugfs directory
[  389.806559][ T1873] hsr_slave_0: left promiscuous mode
[  389.851124][ T1873] hsr_slave_1: left promiscuous mode
[  389.859616][ T1873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.904609][ T1873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.723098][ T1873] team0 (unregistering): Port device team_slave_1 removed
[  390.815449][ T1873] team0 (unregistering): Port device team_slave_0 removed
[  391.361871][ T5802] Bluetooth: hci3: command tx timeout
[  391.402988][ T6553] team0: Port device team_slave_0 added
[  391.411745][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.129'.
[  391.480470][ T6553] team0: Port device team_slave_1 added
[  391.900173][ T6598] chnl_net:caif_netlink_parms(): no params data found
[  391.946052][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.954395][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.981381][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.181714][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.188875][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.217266][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.113512][ T6553] hsr_slave_0: entered promiscuous mode
[  393.124728][ T6553] hsr_slave_1: entered promiscuous mode
[  393.133984][ T6553] debugfs: 'hsr0' already exists in 'hsr'
[  393.139906][ T6553] Cannot create hsr debugfs directory
[  393.333455][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.433626][ T5802] Bluetooth: hci3: command tx timeout
[  394.068139][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.078075][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.089235][ T6598] bridge_slave_0: entered allmulticast mode
[  394.099605][ T6598] bridge_slave_0: entered promiscuous mode
[  394.322600][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.330290][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.341346][ T6598] bridge_slave_1: entered allmulticast mode
[  394.354428][ T6598] bridge_slave_1: entered promiscuous mode
[  394.404324][ T3961] bridge_slave_1: left allmulticast mode
[  394.410241][ T3961] bridge_slave_1: left promiscuous mode
[  394.417274][ T3961] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.452884][ T3961] bridge_slave_0: left allmulticast mode
[  394.458910][ T3961] bridge_slave_0: left promiscuous mode
[  394.466056][ T3961] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.979483][ T3961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.032608][ T3961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  395.058193][ T3961] bond0 (unregistering): Released all slaves
[  395.548608][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.617175][ T3961] hsr_slave_0: left promiscuous mode
[  395.652757][ T3961] hsr_slave_1: left promiscuous mode
[  395.662463][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.694136][ T3961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.754587][ T3961] veth1_vlan: left promiscuous mode
[  395.760240][ T3961] veth0_vlan: left promiscuous mode
[  396.514982][ T3961] team0 (unregistering): Port device team_slave_1 removed
[  396.560902][ T3961] team0 (unregistering): Port device team_slave_0 removed
[  397.007886][ T6489] 8021q: adding VLAN 0 to HW filter on device team0
[  397.145344][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.229356][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.237088][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.255757][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.263482][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.207588][ T6530] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  399.053765][ T6530] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  399.105596][ T6530] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  399.176317][ T6598] team0: Port device team_slave_0 added
[  399.274366][ T6530] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  399.353064][ T6653] syz_tun: entered allmulticast mode
[  399.359570][ T6653] syz_tun: left allmulticast mode
[  399.669389][ T6598] team0: Port device team_slave_1 added
[  400.753317][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.760491][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.789469][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.970274][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.977762][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.005273][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.593119][ T6553] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  401.787574][ T6598] hsr_slave_0: entered promiscuous mode
[  401.798576][ T6598] hsr_slave_1: entered promiscuous mode
[  401.808000][ T6598] debugfs: 'hsr0' already exists in 'hsr'
[  401.814169][ T6598] Cannot create hsr debugfs directory
[  401.852198][ T6553] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  402.023062][ T6553] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  402.067641][ T6665] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  402.074448][ T6665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  402.085167][ T6665] vhci_hcd vhci_hcd.0: Device attached
[  402.343835][ T6553] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  402.392947][ T5865] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  402.558552][ T6666] vhci_hcd: connection reset by peer
[  402.603960][ T3790] vhci_hcd: stop threads
[  402.608424][ T3790] vhci_hcd: release socket
[  402.613592][ T3790] vhci_hcd: disconnect device
[  403.384015][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.028514][ T6530] 8021q: adding VLAN 0 to HW filter on device team0
[  404.307944][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.389134][ T1873] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.396850][ T1873] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.531418][ T1873] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.538998][ T1873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.853434][ T6675] MPI: mpi too large (185152 bits)
[  405.128473][ T6675] loop4: detected capacity change from 0 to 1024
[  405.184830][ T6675] hfsplus: Unknown parameter 'ÿÿÿÿ¤~'
[  406.028715][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.343448][ T6598] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  407.392848][ T6553] 8021q: adding VLAN 0 to HW filter on device team0
[  407.521279][ T5865] vhci_hcd: vhci_device speed not set
[  408.362261][ T6598] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  408.408038][ T6598] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  409.106462][ T6598] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  409.168599][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.176338][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.335883][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.343611][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.712374][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.903343][ T1563] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  409.940985][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  409.966782][ T6489] veth0_vlan: entered promiscuous mode
[  410.125311][ T6489] veth1_vlan: entered promiscuous mode
[  410.166034][ T1563] usb 5-1: Using ep0 maxpacket: 8
[  410.229667][ T1563] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  410.238672][ T1563] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  410.249153][ T1563] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  410.259436][ T1563] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  410.272005][ T1563] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  410.286300][ T1563] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  410.296542][ T1563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.644844][ T6489] veth0_macvtap: entered promiscuous mode
[  410.750121][ T6489] veth1_macvtap: entered promiscuous mode
[  410.822241][ T1563] usb 5-1: usb_control_msg returned -32
[  410.828211][ T1563] usbtmc 5-1:16.0: can't read capabilities
[  411.068592][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.158541][ T6708] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90
[  411.252221][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.335412][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.374033][ T3899] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.422031][ T3899] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.458879][ T3899] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.536771][ T3899] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.651529][ T6598] 8021q: adding VLAN 0 to HW filter on device team0
[  411.793445][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.801131][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.954090][ T3899] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.961741][ T3899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.804997][ T5865] usb 5-1: USB disconnect, device number 4
[  413.074974][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.046572][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  414.055190][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  414.168108][ T6530] veth0_vlan: entered promiscuous mode
[  414.328060][ T6530] veth1_vlan: entered promiscuous mode
[  414.830125][ T6530] veth0_macvtap: entered promiscuous mode
[  414.939017][ T6530] veth1_macvtap: entered promiscuous mode
[  415.222992][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.393990][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.496637][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.551957][ T4260] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.619309][ T4260] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.670365][ T4260] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.770226][ T4260] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.473269][ T6553] veth0_vlan: entered promiscuous mode
[  417.684960][ T6553] veth1_vlan: entered promiscuous mode
[  418.375256][ T6553] veth0_macvtap: entered promiscuous mode
[  418.514127][ T6553] veth1_macvtap: entered promiscuous mode
[  418.812205][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.935320][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.105185][   T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.197543][   T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.322228][ T3790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.401269][ T3790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.701946][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  419.719155][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  419.734346][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  419.812905][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  419.847532][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  419.913234][ T6768] loop4: detected capacity change from 0 to 2048
[  420.215432][ T6768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  420.789393][ T6598] veth0_vlan: entered promiscuous mode
[  421.316295][ T6598] veth1_vlan: entered promiscuous mode
[  421.696174][ T6598] veth0_macvtap: entered promiscuous mode
[  421.794539][ T6598] veth1_macvtap: entered promiscuous mode
[  421.996123][ T5802] Bluetooth: hci5: command tx timeout
[  422.460204][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.624534][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.842550][ T3874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.904577][ T3874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.982310][ T3874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.068231][ T3874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.445434][ T6772] chnl_net:caif_netlink_parms(): no params data found
[  424.091405][ T5802] Bluetooth: hci5: command tx timeout
[  424.739734][   T14] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.988101][   T14] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.247323][   T14] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.476771][   T14] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.554175][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  425.573188][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  425.584835][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  425.629359][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  425.653642][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  426.231628][ T5802] Bluetooth: hci5: command tx timeout
[  426.336876][   T14] bridge_slave_1: left allmulticast mode
[  426.347485][   T14] bridge_slave_1: left promiscuous mode
[  426.354594][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.416829][   T14] bridge_slave_0: left allmulticast mode
[  426.423678][   T14] bridge_slave_0: left promiscuous mode
[  426.430829][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.188226][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.242321][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.267950][   T14] bond0 (unregistering): Released all slaves
[  427.588149][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.596386][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.604904][ T6772] bridge_slave_0: entered allmulticast mode
[  427.615222][ T6772] bridge_slave_0: entered promiscuous mode
[  427.679306][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.687198][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.695497][ T6772] bridge_slave_1: entered allmulticast mode
[  427.705750][ T6772] bridge_slave_1: entered promiscuous mode
[  427.786087][ T5802] Bluetooth: hci4: command tx timeout
[  427.911498][   T14] hsr_slave_0: left promiscuous mode
[  427.946283][   T14] hsr_slave_1: left promiscuous mode
[  427.955267][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.963030][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.053652][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.061468][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.211963][   T14] veth1_macvtap: left promiscuous mode
[  428.217750][   T14] veth0_macvtap: left promiscuous mode
[  428.224010][   T14] veth1_vlan: left promiscuous mode
[  428.229585][   T14] veth0_vlan: left promiscuous mode
[  428.312398][ T5802] Bluetooth: hci5: command tx timeout
[  428.330911][ T6828] loop4: detected capacity change from 0 to 128
[  428.628959][ T6828] syz.4.142: attempt to access beyond end of device
[  428.628959][ T6828] loop4: rw=2051, sector=128, nr_sectors = 913 limit=128
[  429.469487][   T14] team0 (unregistering): Port device team_slave_1 removed
[  429.575873][   T14] team0 (unregistering): Port device team_slave_0 removed
[  429.831322][ T5802] Bluetooth: hci4: command tx timeout
[  430.244126][ T6833] syz.4.144 uses obsolete (PF_INET,SOCK_PACKET)
[  430.684877][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.864069][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.258211][ T6772] team0: Port device team_slave_0 added
[  431.363689][ T4293] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.560098][ T6772] team0: Port device team_slave_1 added
[  431.696691][ T4293] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.915958][ T5802] Bluetooth: hci4: command tx timeout
[  432.047523][ T4293] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.221311][ T6812] chnl_net:caif_netlink_parms(): no params data found
[  432.307364][ T4293] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.374547][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.384893][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.412116][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.950486][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.958190][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.984790][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.598941][ T4293] bridge_slave_1: left allmulticast mode
[  433.606748][ T4293] bridge_slave_1: left promiscuous mode
[  433.616640][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.778249][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  433.788763][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  433.822415][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  433.852485][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  433.866100][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  433.990972][ T5808] Bluetooth: hci4: command tx timeout
[  434.114463][ T4293] bridge_slave_0: left allmulticast mode
[  434.120359][ T4293] bridge_slave_0: left promiscuous mode
[  434.130307][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.814465][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.875026][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.909017][ T4293] bond0 (unregistering): Released all slaves
[  435.543510][ T6772] hsr_slave_0: entered promiscuous mode
[  435.558409][ T6772] hsr_slave_1: entered promiscuous mode
[  435.567999][ T6772] debugfs: 'hsr0' already exists in 'hsr'
[  435.574240][ T6772] Cannot create hsr debugfs directory
[  435.660032][ T4293] hsr_slave_0: left promiscuous mode
[  435.701105][ T4293] hsr_slave_1: left promiscuous mode
[  435.709413][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.720978][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.785421][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.794081][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.891762][ T4293] veth1_macvtap: left promiscuous mode
[  435.897546][ T4293] veth0_macvtap: left promiscuous mode
[  435.905434][ T4293] veth1_vlan: left promiscuous mode
[  435.911294][ T4293] veth0_vlan: left promiscuous mode
[  436.036806][ T5808] Bluetooth: hci2: command tx timeout
[  436.899252][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  436.947481][ T4293] team0 (unregistering): Port device team_slave_0 removed
[  438.081455][ T5808] Bluetooth: hci2: command tx timeout
[  438.133620][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.141883][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.149708][ T6812] bridge_slave_0: entered allmulticast mode
[  438.162172][ T6812] bridge_slave_0: entered promiscuous mode
[  438.394286][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.402112][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.409930][ T6812] bridge_slave_1: entered allmulticast mode
[  438.420017][ T6812] bridge_slave_1: entered promiscuous mode
[  439.041000][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.220837][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.276216][ T4293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.569125][ T4293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.649267][ T3874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.659326][ T3874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.789387][ T6812] team0: Port device team_slave_0 added
[  439.865784][ T4293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.023738][ T4293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.063870][ T6812] team0: Port device team_slave_1 added
[  440.171012][ T5808] Bluetooth: hci2: command tx timeout
[  440.211509][ T1873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.219580][ T1873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.371922][ T6852] chnl_net:caif_netlink_parms(): no params data found
[  440.799021][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.806731][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.833342][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.976736][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.988107][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.015778][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.374579][ T4293] bridge_slave_1: left allmulticast mode
[  441.380885][ T4293] bridge_slave_1: left promiscuous mode
[  441.387625][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.623308][ T4293] bridge_slave_0: left allmulticast mode
[  441.629229][ T4293] bridge_slave_0: left promiscuous mode
[  441.638248][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.359275][ T5808] Bluetooth: hci2: command tx timeout
[  442.508153][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.633180][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.689136][ T4293] bond0 (unregistering): Released all slaves
[  443.192288][ T4293] hsr_slave_0: left promiscuous mode
[  443.211099][ T4293] hsr_slave_1: left promiscuous mode
[  443.219459][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.227313][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.283766][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.291696][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.366978][ T4293] veth1_macvtap: left promiscuous mode
[  443.372920][ T4293] veth0_macvtap: left promiscuous mode
[  443.378871][ T4293] veth1_vlan: left promiscuous mode
[  443.387018][ T4293] veth0_vlan: left promiscuous mode
[  444.296855][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  444.384235][ T4293] team0 (unregistering): Port device team_slave_0 removed
[  444.995636][ T6772] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  445.093814][ T6812] hsr_slave_0: entered promiscuous mode
[  445.104857][ T6812] hsr_slave_1: entered promiscuous mode
[  445.114373][ T6812] debugfs: 'hsr0' already exists in 'hsr'
[  445.120301][ T6812] Cannot create hsr debugfs directory
[  445.147909][ T6772] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  445.212523][ T6772] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  445.464696][ T6772] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  446.134346][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.142226][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.150051][ T6852] bridge_slave_0: entered allmulticast mode
[  446.160383][ T6852] bridge_slave_0: entered promiscuous mode
[  446.315300][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.323183][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.331339][ T6852] bridge_slave_1: entered allmulticast mode
[  446.341580][ T6852] bridge_slave_1: entered promiscuous mode
[  446.832771][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.938238][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.406974][ T6852] team0: Port device team_slave_0 added
[  447.548404][ T6852] team0: Port device team_slave_1 added
[  447.908775][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.916825][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.943435][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.131926][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.139081][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.168989][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.633182][ T6812] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  448.696629][ T6852] hsr_slave_0: entered promiscuous mode
[  448.707708][ T6852] hsr_slave_1: entered promiscuous mode
[  448.717129][ T6852] debugfs: 'hsr0' already exists in 'hsr'
[  448.723149][ T6852] Cannot create hsr debugfs directory
[  449.021749][ T6812] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  449.049100][ T6812] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  449.224604][ T6812] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  449.360922][ T6890] loop6: detected capacity change from 0 to 256
[  449.527325][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.638982][ T6890] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  449.896385][   T30] audit: type=1800 audit(1754224432.383:33): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.153" name="file1" dev="loop6" ino=1048625 res=0 errno=0
[  449.955174][ T6772] 8021q: adding VLAN 0 to HW filter on device team0
[  450.048039][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.055753][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.213673][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.221339][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.757381][ T6896] loop6: detected capacity change from 0 to 512
[  451.820276][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.014078][ T6896] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.155: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1025, max 0(0), depth 0(0)
[  452.104586][ T6812] 8021q: adding VLAN 0 to HW filter on device team0
[  452.117185][ T6852] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  452.151319][ T6896] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.155: Bad quota inode: 3, type: 0
[  452.204101][ T6896] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  452.229897][ T6852] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  452.296758][ T6896] EXT4-fs (loop6): mount failed
[  452.335037][ T6852] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  452.424670][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.432568][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.482446][ T6852] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  452.600830][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.608424][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.664821][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.782304][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.146560][ T6852] 8021q: adding VLAN 0 to HW filter on device team0
[  455.348400][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.356169][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.514820][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.522561][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.247867][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.298597][ T6928] loop4: detected capacity change from 0 to 256
[  456.563177][ T6928] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  456.762720][   T30] audit: type=1800 audit(1754224439.283:34): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.161" name="file1" dev="loop4" ino=1048627 res=0 errno=0
[  457.965143][ T6772] veth0_vlan: entered promiscuous mode
[  458.140846][ T6772] veth1_vlan: entered promiscuous mode
[  458.688175][ T6772] veth0_macvtap: entered promiscuous mode
[  458.860129][ T6772] veth1_macvtap: entered promiscuous mode
[  458.909106][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.302093][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.556445][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.848838][ T3874] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.885481][   T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.083996][ T4293] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.146011][ T3840] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.277599][ T6812] veth0_vlan: entered promiscuous mode
[  462.556983][ T6812] veth1_vlan: entered promiscuous mode
[  463.332445][ T6812] veth0_macvtap: entered promiscuous mode
[  463.496007][ T6812] veth1_macvtap: entered promiscuous mode
[  463.775803][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.926132][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.075460][ T4676] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.144280][ T4676] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.277719][ T3899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.446468][ T4676] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.507962][ T6852] veth0_vlan: entered promiscuous mode
[  466.735679][ T6852] veth1_vlan: entered promiscuous mode
[  467.522335][ T6852] veth0_macvtap: entered promiscuous mode
[  467.721595][ T6852] veth1_macvtap: entered promiscuous mode
[  468.049784][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.186069][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.713715][ T1873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.770171][ T1873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.805215][ T4260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.858413][ T3961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.266112][ T7025] loop6: detected capacity change from 0 to 256
[  472.493564][ T7025] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  472.694337][   T30] audit: type=1800 audit(1754224455.223:35): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.169" name="file1" dev="loop6" ino=1048629 res=0 errno=0
[  474.273394][ T7037] loop6: detected capacity change from 0 to 4096
[  474.356783][ T7037] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  475.096460][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.105924][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.351352][   T30] audit: type=1800 audit(1754224457.873:36): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.170" name="bus" dev="loop6" ino=64 res=0 errno=0
[  475.474139][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  475.481929][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  475.617070][ T3790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.626399][ T3790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.589464][ T7071] syz_tun: entered allmulticast mode
[  477.766313][ T7071] lo: entered allmulticast mode
[  478.132594][ T7070] syz_tun: left allmulticast mode
[  478.378008][ T4676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.386347][ T4676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.572449][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.580775][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.754842][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.768152][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.154913][ T7094] loop8: detected capacity change from 0 to 256
[  483.181978][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.190148][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.451305][ T7094] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  484.017317][   T30] audit: type=1800 audit(1754224466.493:37): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.177" name="file1" dev="loop8" ino=1048643 res=0 errno=0
[  484.342780][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  484.417297][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  484.428700][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  487.926975][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  488.013576][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  490.756891][ T5808] Bluetooth: hci0: command tx timeout
[  490.967162][ T7116] loop8: detected capacity change from 0 to 64
[  492.815879][ T5808] Bluetooth: hci0: command tx timeout
[  492.972258][ T7123] loop6: detected capacity change from 0 to 2048
[  493.283085][ T7123] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  493.730960][ T7131] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  494.683202][ T7131] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  494.695893][ T7131] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  494.869690][ T7131] Remounting filesystem read-only
[  494.890411][ T5808] Bluetooth: hci0: command tx timeout
[  495.296710][ T7123] syz.6.184 (7123) used greatest stack depth: 4200 bytes left
[  495.367711][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.185'.
[  496.084009][ T7100] chnl_net:caif_netlink_parms(): no params data found
[  496.955688][ T5808] Bluetooth: hci0: command tx timeout
[  500.210982][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.189'.
[  501.634959][ T6598] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  501.954850][ T7170] loop8: detected capacity change from 0 to 256
[  502.232120][ T7173] loop7: detected capacity change from 0 to 256
[  502.261060][ T7170] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  502.355413][ T7173] msdos: Bad value for 'time_offset'
[  502.517822][   T30] audit: type=1800 audit(1754224485.023:38): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.190" name="file1" dev="loop8" ino=1048645 res=0 errno=0
[  502.975711][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.983857][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.992103][ T7100] bridge_slave_0: entered allmulticast mode
[  503.002508][ T7100] bridge_slave_0: entered promiscuous mode
[  503.323583][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.331499][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.339326][ T7100] bridge_slave_1: entered allmulticast mode
[  503.358321][ T7100] bridge_slave_1: entered promiscuous mode
[  504.391553][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.416122][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.826034][ T7100] team0: Port device team_slave_0 added
[  505.528265][ T7100] team0: Port device team_slave_1 added
[  507.942908][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.950170][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.983397][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.009028][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.017165][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.043914][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.795806][ T5802] Bluetooth: hci3: command 0x0406 tx timeout
[  510.900990][ T7100] hsr_slave_0: entered promiscuous mode
[  510.912147][ T7100] hsr_slave_1: entered promiscuous mode
[  510.934143][ T7100] debugfs: 'hsr0' already exists in 'hsr'
[  510.940097][ T7100] Cannot create hsr debugfs directory
[  512.388857][ T7218] vivid-001: =================  START STATUS  =================
[  512.398718][ T7218] vivid-001: Radio HW Seek Mode: Bounded
[  512.405035][ T7218] vivid-001: Radio Programmable HW Seek: false
[  512.411927][ T7218] vivid-001: RDS Rx I/O Mode: Block I/O
[  512.417819][ T7218] vivid-001: Generate RBDS Instead of RDS: false
[  512.424651][ T7218] vivid-001: RDS Reception: true
[  512.430005][ T7218] vivid-001: RDS Program Type: 0 inactive
[  512.436427][ T7218] vivid-001: RDS PS Name:  inactive
[  512.442203][ T7218] vivid-001: RDS Radio Text:  inactive
[  512.448039][ T7218] vivid-001: RDS Traffic Announcement: false inactive
[  512.455396][ T7218] vivid-001: RDS Traffic Program: false inactive
[  512.471745][ T7218] vivid-001: RDS Music: false inactive
[  512.477640][ T7218] vivid-001: ==================  END STATUS  ==================
[  516.183214][ T7100] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  516.362379][ T7243] loop6: detected capacity change from 0 to 128
[  516.373735][ T7243] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  516.438319][ T7243] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  516.942942][ T7100] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  517.354723][ T7100] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  520.483156][ T7100] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  523.017320][ T7266] tipc: Started in network mode
[  523.022991][ T7266] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  523.041996][ T7266] tipc: Enabled bearer <udp:s>, priority 10
[  524.152445][ T1563] tipc: Node number set to 4269801488
[  524.703607][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.186704][ T7100] 8021q: adding VLAN 0 to HW filter on device team0
[  525.402078][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.409924][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.613092][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.620954][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.868439][ T7287] loop6: detected capacity change from 0 to 1024
[  526.306148][ T7287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.319301][ T7287] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  526.407431][ T7292] loop5: detected capacity change from 0 to 512
[  526.515194][ T7292] EXT4-fs: Ignoring removed i_version option
[  526.602507][ T7287] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.221: corrupted xattr block 128: e_value size too large
[  526.672322][ T7292] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  526.686068][ T7292] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  526.937347][ T7292] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  527.084778][ T7292] EXT4-fs (loop5): 1 truncate cleaned up
[  527.093635][ T7292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.862249][ T6598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.143988][ T6852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.685986][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.978951][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  536.986121][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  545.162680][ T7353] loop5: detected capacity change from 0 to 32768
[  545.198338][ T5802] Bluetooth: hci5: command 0x0406 tx timeout
[  545.620282][ T7353] find_entry called with index >= next_index
[  546.055394][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  546.097454][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  546.116163][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  546.135966][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  546.160140][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  546.977872][ T7356] loop6: detected capacity change from 0 to 4096
[  547.830186][ T7371] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  548.337655][ T5808] Bluetooth: hci1: command tx timeout
[  549.295964][ T5802] Bluetooth: hci4: command 0x0406 tx timeout
[  550.411556][ T5802] Bluetooth: hci1: command tx timeout
[  550.869983][ T7359] chnl_net:caif_netlink_parms(): no params data found
[  552.493200][ T5802] Bluetooth: hci1: command tx timeout
[  552.975675][ T7402] netlink: 'syz.6.246': attribute type 21 has an invalid length.
[  554.556423][ T5802] Bluetooth: hci1: command tx timeout
[  556.016511][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.024491][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.032857][ T7359] bridge_slave_0: entered allmulticast mode
[  556.043160][ T7359] bridge_slave_0: entered promiscuous mode
[  556.059876][ T7413] futex_wake_op: syz.7.249 tries to shift op by -1; fix this program
[  556.163820][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.172961][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.188674][ T7359] bridge_slave_1: entered allmulticast mode
[  556.202004][ T7359] bridge_slave_1: entered promiscuous mode
[  556.597283][ T7417] loop8: detected capacity change from 0 to 1024
[  556.664502][ T7417] EXT4-fs: Ignoring removed orlov option
[  556.772659][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.789378][ T7417] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  556.937349][ T7418] loop5: detected capacity change from 0 to 2048
[  556.979535][ T7417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.041065][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.244998][ T7418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  557.564677][ T7422] loop7: detected capacity change from 0 to 4096
[  557.579128][   T30] audit: type=1800 audit(1754224540.103:39): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.251" name="bus" dev="loop5" ino=18 res=0 errno=0
[  557.891583][ T7433] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  557.945836][ T3899] bridge_slave_1: left allmulticast mode
[  557.952035][ T3899] bridge_slave_1: left promiscuous mode
[  557.959022][ T3899] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.058778][ T3899] bridge_slave_0: left allmulticast mode
[  558.064914][ T3899] bridge_slave_0: left promiscuous mode
[  558.071960][ T3899] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.397955][ T6772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.504168][ T6852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.534363][ T5808] Bluetooth: hci2: command 0x0406 tx timeout
[  560.884055][ T3899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.236807][ T3899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.376873][ T3899] bond0 (unregistering): Released all slaves
[  561.695461][ T7359] team0: Port device team_slave_0 added
[  561.878905][ T7359] team0: Port device team_slave_1 added
[  562.521725][ T3899] hsr_slave_0: left promiscuous mode
[  562.693196][ T3899] hsr_slave_1: left promiscuous mode
[  562.702091][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  562.754212][ T3899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.461671][ T7468] netlink: 88 bytes leftover after parsing attributes in process `syz.7.261'.
[  563.937667][ T7473] loop6: detected capacity change from 0 to 7
[  563.949857][ T7473] Dev loop6: unable to read RDB block 7
[  563.956107][ T7473]  loop6: AHDI p3 p4
[  563.960231][ T7473] loop6: partition table partially beyond EOD, truncated
[  563.976058][ T7473] loop6: p3 start 1886353253 is beyond EOD, truncated
[  565.114289][ T3899] team0 (unregistering): Port device team_slave_1 removed
[  565.456686][ T3899] team0 (unregistering): Port device team_slave_0 removed
[  568.789907][ T5162] Dev loop6: unable to read RDB block 7
[  568.801293][ T5162]  loop6: AHDI p3 p4
[  568.805767][ T5162] loop6: partition table partially beyond EOD, truncated
[  568.814694][ T5162] loop6: p3 start 1886353253 is beyond EOD, truncated
[  569.034351][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.042828][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.071198][ T7359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.310413][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.318275][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.345454][ T7359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.386434][ T7359] hsr_slave_0: entered promiscuous mode
[  570.398623][ T7359] hsr_slave_1: entered promiscuous mode
[  570.410264][ T7359] debugfs: 'hsr0' already exists in 'hsr'
[  570.424629][ T7359] Cannot create hsr debugfs directory
[  570.516841][ T7484] loop6: detected capacity change from 0 to 8192
[  572.022868][ T7505] loop8: detected capacity change from 0 to 2048
[  572.461594][ T7505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  576.327432][ T7525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  576.866085][ T7528] loop6: detected capacity change from 0 to 7
[  577.356242][ T7528] Dev loop6: unable to read RDB block 7
[  577.362721][ T7528]  loop6: AHDI p3 p4
[  577.367067][ T7528] loop6: partition table partially beyond EOD, truncated
[  577.376367][ T7528] loop6: p3 start 1886353253 is beyond EOD, truncated
[  577.576030][ T7359] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  577.778170][ T5162] Dev loop6: unable to read RDB block 7
[  577.784284][ T5162]  loop6: AHDI p3 p4
[  577.794691][ T5162] loop6: partition table partially beyond EOD, truncated
[  577.803927][ T5162] loop6: p3 start 1886353253 is beyond EOD, truncated
[  577.926274][ T7359] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  578.132633][ T7359] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  578.262718][ T7359] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  578.296161][ T7533] loop7: detected capacity change from 0 to 2048
[  578.471411][ T5802] Bluetooth: hci1: command tx timeout
[  578.554109][ T7533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  578.864738][ T5866] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  578.879073][   T30] audit: type=1800 audit(1754224561.373:40): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.277" name="bus" dev="loop7" ino=18 res=0 errno=0
[  579.132221][ T5866] usb 9-1: Using ep0 maxpacket: 16
[  579.196785][ T5866] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  579.207778][ T5866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  579.219797][ T5866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  579.234806][ T5866] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  579.246727][ T5866] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  579.478997][ T5866] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  579.488573][ T5866] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  579.498863][ T5866] usb 9-1: Manufacturer: syz
[  579.714494][ T5866] usb 9-1: config 0 descriptor??
[  579.871876][ T6812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.711894][ T5866] rc_core: IR keymap rc-hauppauge not found
[  580.718171][ T5866] Registered IR keymap rc-empty
[  580.724718][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  580.867400][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  580.894728][ T5866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  580.911707][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input7
[  580.961258][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.184954][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  581.288383][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  581.352078][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  581.414106][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  581.462777][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  581.549427][ T7557] netlink: 88 bytes leftover after parsing attributes in process `syz.7.281'.
[  581.582913][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  581.695296][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  581.845793][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  582.746955][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  584.779524][ T5866] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  585.079144][ T7359] 8021q: adding VLAN 0 to HW filter on device team0
[  585.788323][ T5866] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  585.798145][ T5866] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  585.828248][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.836057][ T4260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  585.855015][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.862697][ T4260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.341861][ T5866] usb 9-1: USB disconnect, device number 2
[  588.742521][ T7574] loop6: detected capacity change from 0 to 32768
[  588.757872][ T7574] XFS: ikeep mount option is deprecated.
[  589.628895][ T7574] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  590.726797][ T7574] XFS (loop6): Ending clean mount
[  590.779807][ T7574] XFS (loop6): Quotacheck needed: Please wait.
[  590.889384][ T7574] XFS (loop6): Quotacheck: Done.
[  591.152060][ T6598] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  591.167363][ T7600] loop7: detected capacity change from 0 to 2048
[  591.392014][ T7600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.549770][   T30] audit: type=1800 audit(1754224574.083:41): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.290" name="bus" dev="loop7" ino=18 res=0 errno=0
[  592.198089][ T7359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.316172][ T6812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.078392][ T7626] loop7: detected capacity change from 0 to 128
[  595.192006][ T7626] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  596.047907][ T7626] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  596.162746][ T7635] loop5: detected capacity change from 0 to 32768
[  596.489408][ T7635] JBD2: Ignoring recovery information on journal
[  596.881960][ T7635] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  597.662213][ T7646] loop6: detected capacity change from 0 to 4096
[  597.819590][ T6812] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  598.364386][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  598.376964][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  599.128354][ T7646] ntfs3(loop6): Failed to read $UpCase (-4).
[  599.284771][ T7647] overlayfs: upper fs does not support tmpfile.
[  599.441608][ T7647] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  599.583875][ T7647] overlayfs: upper fs missing required features.
[  601.638453][ T6852] ocfs2: Unmounting device (7,5) on (node local)
[  602.563942][ T7660] loop7: detected capacity change from 0 to 2048
[  603.036934][ T7660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.662257][   T30] audit: type=1800 audit(1754224586.143:42): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.304" name="bus" dev="loop7" ino=15 res=0 errno=0
[  605.308166][ T6812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.816508][ T7677] loop6: detected capacity change from 0 to 128
[  606.627029][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  606.687544][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  606.697463][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  606.714293][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  606.725022][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  607.513204][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.513204][   T60] loop6: rw=1, sector=145, nr_sectors = 88 limit=128
[  607.527727][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.527727][   T60] loop6: rw=1, sector=241, nr_sectors = 8 limit=128
[  607.542260][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.542260][   T60] loop6: rw=1, sector=257, nr_sectors = 8 limit=128
[  607.557706][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.557706][   T60] loop6: rw=1, sector=273, nr_sectors = 8 limit=128
[  607.572057][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.572057][   T60] loop6: rw=1, sector=289, nr_sectors = 8 limit=128
[  607.586092][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.586092][   T60] loop6: rw=1, sector=305, nr_sectors = 8 limit=128
[  607.607439][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.607439][   T60] loop6: rw=1, sector=321, nr_sectors = 8 limit=128
[  607.621557][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.621557][   T60] loop6: rw=1, sector=337, nr_sectors = 8 limit=128
[  607.635522][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.635522][   T60] loop6: rw=1, sector=353, nr_sectors = 8 limit=128
[  607.649643][   T60] kworker/u8:5: attempt to access beyond end of device
[  607.649643][   T60] loop6: rw=1, sector=369, nr_sectors = 8 limit=128
[  608.109986][ T7691] loop5: detected capacity change from 0 to 1764
[  608.293510][ T7687] loop8: detected capacity change from 0 to 128
[  608.888231][ T5808] Bluetooth: hci0: command tx timeout
[  609.295036][ T7687] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  609.355781][ T7687] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  610.972899][ T5808] Bluetooth: hci0: command tx timeout
[  611.566154][ T7678] chnl_net:caif_netlink_parms(): no params data found
[  612.275163][ T6772] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  612.827744][ T7713] loop7: detected capacity change from 0 to 1024
[  613.038681][ T5808] Bluetooth: hci0: command tx timeout
[  615.152620][ T5808] Bluetooth: hci0: command tx timeout
[  616.999991][   T58] hfsplus: b-tree write err: -5, ino 4
[  617.458432][ T7725] loop5: detected capacity change from 0 to 256
[  617.514274][ T7725] exfat: Deprecated parameter 'utf8'
[  617.851844][ T7725] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  618.329090][ T7727] loop8: detected capacity change from 0 to 2048
[  618.771538][ T7727] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.100998][   T30] audit: type=1800 audit(1754224601.573:43): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.317" name="bus" dev="loop8" ino=15 res=0 errno=0
[  622.122301][   T57] bridge_slave_1: left allmulticast mode
[  622.138176][   T57] bridge_slave_1: left promiscuous mode
[  622.145023][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.477983][ T6772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.771877][   T57] bridge_slave_0: left allmulticast mode
[  622.777781][   T57] bridge_slave_0: left promiscuous mode
[  622.785516][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.548553][ T7761] loop8: detected capacity change from 0 to 32768
[  624.573575][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  624.599884][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.676055][   T57] bond0 (unregistering): Released all slaves
[  624.833462][ T7761] find_entry called with index >= next_index
[  624.857720][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.865644][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.873732][ T7678] bridge_slave_0: entered allmulticast mode
[  624.883787][ T7678] bridge_slave_0: entered promiscuous mode
[  625.017707][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.025647][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.033846][ T7678] bridge_slave_1: entered allmulticast mode
[  625.044738][ T7678] bridge_slave_1: entered promiscuous mode
[  626.570973][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.892089][   T57] hsr_slave_0: left promiscuous mode
[  626.961291][   T57] hsr_slave_1: left promiscuous mode
[  626.969862][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  627.073330][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  627.409772][ T7771] loop7: detected capacity change from 0 to 4096
[  627.723076][ T7777] loop5: detected capacity change from 0 to 128
[  628.180955][ T7785] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  628.336229][ T7777] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  628.675155][ T7777] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  630.071717][   T57] team0 (unregistering): Port device team_slave_1 removed
[  630.333582][   T57] team0 (unregistering): Port device team_slave_0 removed
[  631.215096][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.413477][ T6852] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  631.944598][ T7678] team0: Port device team_slave_0 added
[  632.081593][ T7678] team0: Port device team_slave_1 added
[  632.749122][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.756517][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.791233][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  633.212748][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  633.219915][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  633.246684][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.264836][ T7804] loop5: detected capacity change from 0 to 2048
[  633.644451][ T7804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  633.872541][   T30] audit: type=1800 audit(1754224616.373:44): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.333" name="bus" dev="loop5" ino=15 res=0 errno=0
[  634.155212][ T7678] hsr_slave_0: entered promiscuous mode
[  634.166567][ T7678] hsr_slave_1: entered promiscuous mode
[  634.218819][ T7678] debugfs: 'hsr0' already exists in 'hsr'
[  634.225269][ T7678] Cannot create hsr debugfs directory
[  634.466864][ T7812] loop6: detected capacity change from 0 to 2048
[  634.864457][ T6852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.921454][ T7812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  636.747503][ T7678] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  636.793448][ T7678] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  636.821073][ T7678] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  636.896731][ T7678] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  639.117765][ T7842] loop8: detected capacity change from 0 to 128
[  639.606697][ T7842] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  639.695618][ T7842] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  640.349046][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0
[  640.542864][ T7856] netlink: 60 bytes leftover after parsing attributes in process `syz.6.347'.
[  640.553915][ T7856] unsupported nlmsg_type 40
[  641.084709][ T7678] 8021q: adding VLAN 0 to HW filter on device team0
[  641.169305][ T6772] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  641.213687][ T1873] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.221533][ T1873] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.238961][ T1873] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.246445][ T1873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  641.866851][ T7678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  642.824626][ T7874] loop8: detected capacity change from 0 to 2048
[  643.173343][ T7874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  643.492367][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.353'.
[  643.515602][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.355'.
[  643.648512][ T5808] block nbd0: Receive control failed (result -107)
[  643.690142][ T7878] nbd0: detected capacity change from 0 to 32
[  643.847478][ T7443] block nbd0: Dead connection, failed to find a fallback
[  643.855146][ T7443] block nbd0: shutting down sockets
[  643.861062][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  643.870412][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  643.878915][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  643.888326][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  643.896487][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  643.905824][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  643.913937][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  643.923403][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  643.931498][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  643.947252][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  643.957603][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  643.968769][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  643.977133][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  643.986568][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  643.994735][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  644.004115][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  644.012116][ T7443] ldm_validate_partition_table(): Disk read failed.
[  644.018934][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  644.028245][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  644.036353][ T7443] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  644.051074][ T7443] Buffer I/O error on dev nbd0, logical block 0, async page read
[  644.059329][ T7443] Dev nbd0: unable to read RDB block 0
[  644.066677][ T7443]  nbd0: unable to read partition table
[  644.133597][ T7443] ldm_validate_partition_table(): Disk read failed.
[  644.141938][ T7443] Dev nbd0: unable to read RDB block 0
[  644.154180][ T7443]  nbd0: unable to read partition table
[  646.073202][ T7900] 9pnet_virtio: no channels available for device syz
[  646.340323][ T7913] loop7: detected capacity change from 0 to 128
[  646.534949][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.748949][ T7913] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  646.991267][ T7913] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  647.683793][ T7922] warning: `syz.8.361' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  648.323421][ T6812] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  649.318678][ T7932] loop5: detected capacity change from 0 to 2048
[  649.510229][ T7932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  650.725167][ T7944] Illegal XDP return value 32768 on prog  (id 44) dev N/A, expect packet loss!
[  651.957319][ T7678] veth0_vlan: entered promiscuous mode
[  652.160636][ T7678] veth1_vlan: entered promiscuous mode
[  652.584094][ T7678] veth0_macvtap: entered promiscuous mode
[  652.725847][ T7678] veth1_macvtap: entered promiscuous mode
[  652.872951][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.902880][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.933853][ T7959] loop6: detected capacity change from 0 to 128
[  653.142468][ T3874] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.148630][ T7959] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  653.219596][ T3874] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.231232][ T3874] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.240280][ T3874] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.521435][ T7959] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  653.888534][ T7965] bridge_slave_0: left allmulticast mode
[  653.894541][ T7965] bridge_slave_0: left promiscuous mode
[  653.901839][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.312037][ T7965] bridge_slave_1: left allmulticast mode
[  654.318184][ T7965] bridge_slave_1: left promiscuous mode
[  654.325328][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.107518][ T6598] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  655.236597][ T7965] bond0: (slave bond_slave_0): Releasing backup interface
[  655.937517][ T7965] bond0: (slave bond_slave_1): Releasing backup interface
[  656.186930][ T7976] loop8: detected capacity change from 0 to 2048
[  656.195061][ T7965] team0: Port device team_slave_0 removed
[  656.308070][ T7976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  656.319295][ T7965] team0: Port device team_slave_1 removed
[  656.341598][ T7965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  656.349234][ T7965] batman_adv: batadv0: Removing interface: batadv_slave_0
[  656.429141][ T7965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  656.446226][ T7965] batman_adv: batadv0: Removing interface: batadv_slave_1
[  656.826941][ T7978] netlink: 'syz.6.378': attribute type 6 has an invalid length.
[  658.118098][ T7984] vcan0: tx drop: invalid da for name 0x0000000000000004
[  658.534148][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.382'.
[  658.547065][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.5.382'.
[  659.818198][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  659.825811][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  659.941531][   T38] IPVS: starting estimator thread 0...
[  659.941977][ T8000] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  660.051485][ T8003] IPVS: using max 192 ests per chain, 9600 per kthread
[  661.676099][ T8009] loop8: detected capacity change from 0 to 128
[  661.695238][ T8022] loop6: detected capacity change from 0 to 7
[  661.714142][ T8022] Dev loop6: unable to read RDB block 7
[  661.720100][ T8022]  loop6: unable to read partition table
[  661.736649][ T8022] loop6: partition table beyond EOD, truncated
[  661.743764][ T8022] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  662.325835][ T8009] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  662.778776][ T8009] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  662.906547][ T8014] loop7: detected capacity change from 0 to 2048
[  663.544342][ T8014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  663.846086][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.391'.
[  664.407609][ T6772] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  664.686868][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  664.709849][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  664.720080][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  664.751168][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  664.766222][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  666.844611][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.8.393'.
[  666.885731][ T5802] Bluetooth: hci1: command tx timeout
[  668.265044][ T8030] chnl_net:caif_netlink_parms(): no params data found
[  668.951443][ T5802] Bluetooth: hci1: command tx timeout
[  669.833124][   T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.207978][ T8082] loop6: detected capacity change from 0 to 7
[  670.228175][ T8082] Dev loop6: unable to read RDB block 7
[  670.235153][ T8082]  loop6: unable to read partition table
[  670.249995][ T8082] loop6: partition table beyond EOD, truncated
[  670.263210][ T8082] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  670.728848][   T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.032282][ T5802] Bluetooth: hci1: command tx timeout
[  671.368654][   T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.557386][ T8086] loop5: detected capacity change from 0 to 128
[  671.825330][   T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.291193][ T8086] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  672.367538][ T8087] loop7: detected capacity change from 0 to 2048
[  672.528617][ T8086] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  672.708728][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.726103][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.735934][ T8030] bridge_slave_0: entered allmulticast mode
[  672.746306][ T8030] bridge_slave_0: entered promiscuous mode
[  673.059295][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.068317][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.076557][ T8030] bridge_slave_1: entered allmulticast mode
[  673.086936][ T8030] bridge_slave_1: entered promiscuous mode
[  673.161261][ T5802] Bluetooth: hci1: command tx timeout
[  673.299709][   T58] bridge_slave_1: left allmulticast mode
[  673.306809][   T58] bridge_slave_1: left promiscuous mode
[  673.313912][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.414414][ T8087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  673.499349][   T58] bridge_slave_0: left allmulticast mode
[  673.506029][   T58] bridge_slave_0: left promiscuous mode
[  673.513346][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.524477][ T6852] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  674.612758][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  674.712109][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  674.788723][   T58] bond0 (unregistering): Released all slaves
[  675.147949][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.225097][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.846589][ T8030] team0: Port device team_slave_0 added
[  676.025930][   T58] hsr_slave_0: left promiscuous mode
[  676.056789][   T58] hsr_slave_1: left promiscuous mode
[  676.066007][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  676.075795][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  676.218764][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  676.227084][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  676.341367][   T58] veth1_macvtap: left promiscuous mode
[  676.347281][   T58] veth0_macvtap: left promiscuous mode
[  676.355253][   T58] veth1_vlan: left promiscuous mode
[  676.361036][   T58] veth0_vlan: left promiscuous mode
[  678.108227][   T58] team0 (unregistering): Port device team_slave_1 removed
[  678.238065][   T58] team0 (unregistering): Port device team_slave_0 removed
[  678.640415][ T8030] team0: Port device team_slave_1 added
[  678.916258][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.408'.
[  680.686146][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.693457][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  680.725663][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.748642][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.757800][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  680.784656][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  681.345934][ T8030] hsr_slave_0: entered promiscuous mode
[  681.358992][ T8030] hsr_slave_1: entered promiscuous mode
[  681.369403][ T8030] debugfs: 'hsr0' already exists in 'hsr'
[  681.375533][ T8030] Cannot create hsr debugfs directory
[  681.861921][ T8130] loop8: detected capacity change from 0 to 128
[  682.779894][ T8130] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  683.044605][ T8134] loop5: detected capacity change from 0 to 2048
[  683.081130][ T8130] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  683.398216][ T8134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  684.885016][ T6772] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  685.132636][ T8030] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  685.242466][ T8030] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  685.434214][ T8030] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  685.550760][ T8030] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  687.794595][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0
[  687.966474][ T8030] 8021q: adding VLAN 0 to HW filter on device team0
[  688.030823][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.038448][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  688.056883][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.064664][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.604514][ T8184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  690.755267][ T8184] syzkaller0: entered promiscuous mode
[  690.761460][ T8184] syzkaller0: entered allmulticast mode
[  690.997428][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.7.432'.
[  691.155898][ T8184] tipc: Resetting bearer <eth:syzkaller0>
[  691.510404][ T8182] tipc: Resetting bearer <eth:syzkaller0>
[  691.604602][ T8182] tipc: Disabling bearer <eth:syzkaller0>
[  691.906787][ T8202] syzkaller0: entered promiscuous mode
[  691.912765][ T8202] syzkaller0: entered allmulticast mode
[  692.115767][ T8196] loop5: detected capacity change from 0 to 2048
[  692.621951][ T8196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  692.706282][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.823119][   T30] audit: type=1326 audit(1754224678.353:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8229 comm="syz.6.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc75bb8eb69 code=0x0
[  697.156026][ T8231] loop5: detected capacity change from 0 to 2048
[  698.060088][ T8231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  698.388762][ T8030] veth0_vlan: entered promiscuous mode
[  698.465998][ T8030] veth1_vlan: entered promiscuous mode
[  698.976411][ T8030] veth0_macvtap: entered promiscuous mode
[  699.088534][ T8030] veth1_macvtap: entered promiscuous mode
[  699.424511][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  699.628783][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.414446][ T6852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.658496][ T3790] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.721783][ T8257] loop8: detected capacity change from 0 to 32768
[  700.861556][ T8257] find_entry called with index >= next_index
[  700.869570][   T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  701.004017][   T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  701.176753][ T1873] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  703.666914][ T8275] loop5: detected capacity change from 0 to 2048
[  704.061330][ T8275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  705.083469][ T8290] netlink: 3 bytes leftover after parsing attributes in process `syz.6.455'.
[  705.115378][ T8290] batadv1: entered promiscuous mode
[  705.121630][ T8290] batadv1: entered allmulticast mode
[  708.243345][ T8306] loop6: detected capacity change from 0 to 2048
[  708.615024][ T8306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  709.434405][ T6598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.252314][ T8330] loop6: detected capacity change from 0 to 32768
[  711.512450][ T8330] find_entry called with index >= next_index
[  713.523596][ T8353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  715.655122][ T3961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.664599][ T3961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.248775][ T7262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.256943][ T7262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.133436][ T8383] loop6: detected capacity change from 0 to 32768
[  719.576836][ T8383] find_entry called with index >= next_index
[  721.365736][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  721.372776][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  725.821754][ T8424] sctp: [Deprecated]: syz.5.482 (pid 8424) Use of int in max_burst socket option deprecated.
[  725.821754][ T8424] Use struct sctp_assoc_value instead
[  725.952676][ T8420] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.480'.
[  729.461964][ T8446] loop5: detected capacity change from 0 to 32768
[  729.810096][ T8446] find_entry called with index >= next_index
[  732.438441][ T8483] pim6reg: entered allmulticast mode
[  732.771403][ T8483] pim6reg: left allmulticast mode
[  732.891648][ T8489] loop6: detected capacity change from 0 to 7
[  732.996882][ T8489] Dev loop6: unable to read RDB block 7
[  733.003758][ T8489]  loop6: unable to read partition table
[  733.073938][ T8489] loop6: partition table beyond EOD, truncated
[  733.081246][ T8489] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  736.546742][ T8512] syzkaller0: entered promiscuous mode
[  736.558341][ T8512] syzkaller0: entered allmulticast mode
[  736.569803][ T8502] loop6: detected capacity change from 0 to 32768
[  736.748724][ T8502] find_entry called with index >= next_index
[  739.328722][ T8526] loop7: detected capacity change from 0 to 2048
[  740.026753][ T8526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  740.070012][ T8533] tipc: Started in network mode
[  740.075684][ T8533] tipc: Node identity 5e4df4e74881, cluster identity 4711
[  740.084094][ T8533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  740.232157][ T8543] netlink: 100 bytes leftover after parsing attributes in process `syz.9.511'.
[  740.576473][ T8533] tipc: Resetting bearer <eth:syzkaller0>
[  740.795225][ T8532] tipc: Disabling bearer <eth:syzkaller0>
[  742.020886][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.6.512'.
[  742.030295][ T8552] netlink: 'syz.6.512': attribute type 7 has an invalid length.
[  742.046763][ T8552] netlink: 'syz.6.512': attribute type 8 has an invalid length.
[  742.057246][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.512'.
[  742.084855][ T8552] bridge0: entered promiscuous mode
[  742.097411][ T8552] batadv_slave_1: entered promiscuous mode
[  742.571861][ T8550] loop9: detected capacity change from 0 to 32768
[  742.811608][ T8550] find_entry called with index >= next_index
[  748.281251][ T8593] loop6: detected capacity change from 0 to 32768
[  748.519575][ T8593] find_entry called with index >= next_index
[  750.206574][ T8612] team_slave_0: entered promiscuous mode
[  750.212754][ T8612] team_slave_1: entered promiscuous mode
[  750.219150][ T8612] vlan2: entered promiscuous mode
[  750.225327][ T8612] team0: entered promiscuous mode
[  752.685202][ T8632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  753.072362][ T8624] syzkaller0: entered promiscuous mode
[  753.078096][ T8624] syzkaller0: entered allmulticast mode
[  753.505892][ T8624] tipc: Resetting bearer <eth:syzkaller0>
[  753.801746][ T5863] tipc: Node number set to 382530791
[  753.810059][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  754.032289][ T8620] tipc: Disabling bearer <eth:syzkaller0>
[  756.044987][ T8655] loop6: detected capacity change from 0 to 7
[  756.125190][ T8655] Dev loop6: unable to read RDB block 7
[  756.131410][ T8655]  loop6: AHDI p3 p4
[  756.135540][ T8655] loop6: partition table partially beyond EOD, truncated
[  756.144235][ T8655] loop6: p3 start 1886353253 is beyond EOD, truncated
[  759.571254][ T5863] IPVS: starting estimator thread 0...
[  759.701268][ T8682] IPVS: using max 192 ests per chain, 9600 per kthread
[  764.003631][ T8717] tipc: Started in network mode
[  764.008894][ T8717] tipc: Node identity aa96729ee8f, cluster identity 4711
[  764.019420][ T8717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  764.154224][ T8720] syzkaller0: entered promiscuous mode
[  764.170605][ T8720] syzkaller0: entered allmulticast mode
[  764.611823][ T8717] tipc: Resetting bearer <eth:syzkaller0>
[  764.813981][ T8713] tipc: Resetting bearer <eth:syzkaller0>
[  764.914425][ T8713] tipc: Disabling bearer <eth:syzkaller0>
[  765.169956][ T8735] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  765.339598][ T8734] syzkaller0: entered promiscuous mode
[  765.345592][ T8734] syzkaller0: entered allmulticast mode
[  769.234039][ T8765] netlink: 164 bytes leftover after parsing attributes in process `syz.6.582'.
[  771.015710][ T8779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  774.441941][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.597'.
[  774.727831][ T8811] netlink: 164 bytes leftover after parsing attributes in process `syz.5.596'.
[  776.611561][ T8828] binder: BINDER_SET_CONTEXT_MGR already set
[  776.618156][ T8828] binder: 8825:8828 ioctl 4018620d 200000000040 returned -16
[  778.013881][ T8835] loop6: detected capacity change from 0 to 2048
[  778.067382][ T8835] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  778.244888][ T8842] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  778.572218][ T8835] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  778.729644][ T8835] Remounting filesystem read-only
[  778.736017][ T8835] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  778.746636][ T8835] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  778.793618][   T30] audit: type=1800 audit(1754224761.293:46): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.603" name="file1" dev="loop6" ino=15 res=0 errno=0
[  779.495540][ T8835] syz.6.603 (8835) used greatest stack depth: 4112 bytes left
[  780.521196][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.7.609'.
[  780.577692][ T8858] netlink: 164 bytes leftover after parsing attributes in process `syz.6.611'.
[  782.042172][ T8872] binder: BINDER_SET_CONTEXT_MGR already set
[  782.048375][ T8872] binder: 8870:8872 ioctl 4018620d 200000000040 returned -16
[  782.697649][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  782.705706][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  784.392602][ T8887] loop6: detected capacity change from 0 to 2048
[  784.620276][ T8887] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  784.871139][ T8899] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  785.112435][ T8887] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  785.195489][ T8887] Remounting filesystem read-only
[  785.202971][ T8887] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  785.215170][ T8887] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  785.244671][   T30] audit: type=1800 audit(1754224767.763:47): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.621" name="file1" dev="loop6" ino=15 res=0 errno=0
[  785.571864][ T8903] netlink: 164 bytes leftover after parsing attributes in process `syz.5.624'.
[  786.980045][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.6.627'.
[  787.004215][ T8914] binder: BINDER_SET_CONTEXT_MGR already set
[  787.010696][ T8914] binder: 8910:8914 ioctl 4018620d 200000000040 returned -16
[  787.536710][ T8917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  787.666653][ T8922] syzkaller0: entered promiscuous mode
[  787.672640][ T8922] syzkaller0: entered allmulticast mode
[  788.141122][ T8922] tipc: Resetting bearer <eth:syzkaller0>
[  789.236187][ T1541] tipc: Node number set to 1114010270
[  790.010828][ T8923] Bluetooth: hci1: command 0x0406 tx timeout
[  790.267199][ T8911] tipc: Resetting bearer <eth:syzkaller0>
[  790.421658][ T8911] tipc: Disabling bearer <eth:syzkaller0>
[  791.181607][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.633'.
[  792.558882][ T8950] loop7: detected capacity change from 0 to 2048
[  792.703830][ T8950] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  792.921117][ T8956] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  793.268976][ T8950] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  793.408951][ T8950] Remounting filesystem read-only
[  793.415382][ T8950] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  793.426073][ T8950] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  793.454317][   T30] audit: type=1800 audit(1754224775.973:48): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.637" name="file1" dev="loop7" ino=15 res=0 errno=0
[  798.315731][ T9009] loop6: detected capacity change from 0 to 2048
[  798.478108][ T9009] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  798.698631][ T9016] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  799.019684][ T9009] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  799.223440][ T9021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  799.235486][ T9009] Remounting filesystem read-only
[  799.241528][ T9009] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  799.252201][ T9009] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  799.361376][   T30] audit: type=1800 audit(1754224781.803:49): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.653" name="file1" dev="loop6" ino=15 res=0 errno=0
[  799.539002][ T9018] syzkaller0: entered promiscuous mode
[  799.545150][ T9018] syzkaller0: entered allmulticast mode
[  799.554626][ T9018] tipc: Resetting bearer <eth:syzkaller0>
[  799.889165][ T9015] tipc: Resetting bearer <eth:syzkaller0>
[  800.176873][ T9015] tipc: Disabling bearer <eth:syzkaller0>
[  800.764177][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.659'.
[  804.004183][ T9072] loop9: detected capacity change from 0 to 2048
[  804.065008][ T9072] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  804.324354][ T9080] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  804.582827][ T9072] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  804.732129][ T9072] Remounting filesystem read-only
[  804.737963][ T9072] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  804.748413][ T9072] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  804.794052][   T30] audit: type=1800 audit(1754224787.293:50): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.670" name="file1" dev="loop9" ino=15 res=0 errno=0
[  809.069631][ T9127] netlink: 164 bytes leftover after parsing attributes in process `syz.9.688'.
[  809.449453][ T9130] loop5: detected capacity change from 0 to 2048
[  809.583572][ T9130] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  809.787317][ T9137] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  809.993282][ T9130] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  810.131749][ T9130] Remounting filesystem read-only
[  810.145254][ T9130] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  810.158164][ T9130] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  810.187338][   T30] audit: type=1800 audit(1754224792.703:51): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.689" name="file1" dev="loop5" ino=15 res=0 errno=0
[  813.382789][ T9176] netlink: 164 bytes leftover after parsing attributes in process `syz.5.703'.
[  814.635944][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.707'.
[  814.684404][ T9188] loop6: detected capacity change from 0 to 2048
[  814.833261][ T9188] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  815.066342][ T9205] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  815.383399][ T9188] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  815.601748][ T9188] Remounting filesystem read-only
[  815.607745][ T9188] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  815.618224][ T9188] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  815.659156][   T30] audit: type=1800 audit(1754224798.163:52): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.706" name="file1" dev="loop6" ino=15 res=0 errno=0
[  818.205180][ T9239] netlink: 164 bytes leftover after parsing attributes in process `syz.9.719'.
[  819.515626][ T9252] loop9: detected capacity change from 0 to 2048
[  819.607424][ T9252] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  819.749818][ T9260] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  820.063141][ T9252] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  820.177555][ T9252] Remounting filesystem read-only
[  820.184224][ T9252] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  820.195096][ T9252] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  820.232647][   T30] audit: type=1800 audit(1754224802.743:53): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.724" name="file1" dev="loop9" ino=15 res=0 errno=0
[  821.609933][ T9282] netlink: 164 bytes leftover after parsing attributes in process `syz.9.734'.
[  822.284738][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.6.738'.
[  823.937870][ T9307] loop9: detected capacity change from 0 to 2048
[  824.087717][ T9310] =====================================================
[  824.095523][ T9310] BUG: KMSAN: uninit-value in pptp_xmit+0xc9a/0x2780
[  824.102739][ T9310]  pptp_xmit+0xc9a/0x2780
[  824.107332][ T9310]  ppp_input+0x1d9/0xe60
[  824.111986][ T9310]  pppoe_rcv_core+0x166/0x6d0
[  824.116885][ T9310]  sk_backlog_rcv+0x13f/0x420
[  824.121921][ T9310]  __release_sock+0x1d3/0x330
[  824.126841][ T9310]  release_sock+0x6b/0x270
[  824.131621][ T9310]  pppoe_sendmsg+0x15d/0xcb0
[  824.136438][ T9310]  __sock_sendmsg+0x333/0x3d0
[  824.141463][ T9310]  ____sys_sendmsg+0x893/0xd80
[  824.146530][ T9310]  ___sys_sendmsg+0x271/0x3b0
[  824.151574][ T9310]  __sys_sendmmsg+0x2d9/0x7c0
[  824.156661][ T9310]  __x64_sys_sendmmsg+0xc6/0x150
[  824.162057][ T9310]  x64_sys_call+0x21de/0x3e20
[  824.167100][ T9310]  do_syscall_64+0xd9/0x210
[  824.172063][ T9310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.178310][ T9310] 
[  824.180854][ T9310] Uninit was created at:
[  824.185404][ T9310]  __kmalloc_node_track_caller_noprof+0x96d/0x12f0
[  824.192377][ T9310]  kmalloc_reserve+0x22f/0x4b0
[  824.194474][ T9307] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  824.197403][ T9310]  pskb_expand_head+0x1fc/0x1610
[  824.212347][ T9310]  skb_realloc_headroom+0x152/0x2d0
[  824.217887][ T9310]  pptp_xmit+0xa0d/0x2780
[  824.222759][ T9310]  ppp_input+0x1d9/0xe60
[  824.227222][ T9310]  pppoe_rcv_core+0x166/0x6d0
[  824.232378][ T9310]  sk_backlog_rcv+0x13f/0x420
[  824.237260][ T9310]  __release_sock+0x1d3/0x330
[  824.242376][ T9310]  release_sock+0x6b/0x270
[  824.247052][ T9310]  pppoe_sendmsg+0x15d/0xcb0
[  824.252184][ T9310]  __sock_sendmsg+0x333/0x3d0
[  824.257047][ T9310]  ____sys_sendmsg+0x893/0xd80
[  824.262215][ T9310]  ___sys_sendmsg+0x271/0x3b0
[  824.267122][ T9310]  __sys_sendmmsg+0x2d9/0x7c0
[  824.272165][ T9310]  __x64_sys_sendmmsg+0xc6/0x150
[  824.277447][ T9310]  x64_sys_call+0x21de/0x3e20
[  824.282575][ T9310]  do_syscall_64+0xd9/0x210
[  824.287333][ T9310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.293642][ T9310] 
[  824.296316][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.8.745 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) 
[  824.308406][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  824.318924][ T9310] =====================================================
[  824.326351][ T9310] Disabling lock debugging due to kernel taint
[  824.332778][ T9310] Kernel panic - not syncing: kmsan.panic set ...
[  824.339361][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.8.745 Tainted: G    B               6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) 
[  824.352908][ T9310] Tainted: [B]=BAD_PAGE
[  824.357185][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  824.367483][ T9310] Call Trace:
[  824.370895][ T9310]  <TASK>
[  824.373956][ T9310]  __dump_stack+0x26/0x30
[  824.378528][ T9310]  dump_stack_lvl+0x53/0x270
[  824.383357][ T9310]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  824.389496][ T9310]  dump_stack+0x1e/0x25
[  824.393937][ T9310]  vpanic+0x361/0xbc0
[  824.398174][ T9310]  panic+0x15d/0x160
[  824.402360][ T9310]  kmsan_report+0x31c/0x320
[  824.407169][ T9310]  ? __msan_warning+0x1b/0x30
[  824.412121][ T9310]  ? pptp_xmit+0xc9a/0x2780
[  824.417027][ T9310]  ? ppp_input+0x1d9/0xe60
[  824.421655][ T9310]  ? pppoe_rcv_core+0x166/0x6d0
[  824.427632][ T9310]  ? sk_backlog_rcv+0x13f/0x420
[  824.432726][ T9310]  ? __release_sock+0x1d3/0x330
[  824.437950][ T9310]  ? release_sock+0x6b/0x270
[  824.442931][ T9310]  ? pppoe_sendmsg+0x15d/0xcb0
[  824.448005][ T9310]  ? __sock_sendmsg+0x333/0x3d0
[  824.453028][ T9310]  ? ____sys_sendmsg+0x893/0xd80
[  824.458185][ T9310]  ? ___sys_sendmsg+0x271/0x3b0
[  824.463270][ T9310]  ? __sys_sendmmsg+0x2d9/0x7c0
[  824.468327][ T9310]  ? __x64_sys_sendmmsg+0xc6/0x150
[  824.473864][ T9310]  ? x64_sys_call+0x21de/0x3e20
[  824.478936][ T9310]  ? do_syscall_64+0xd9/0x210
[  824.484220][ T9310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.490683][ T9310]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  824.497695][ T9310]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  824.504171][ T9310]  ? kmem_cache_free+0x3ef/0xec0
[  824.509702][ T9310]  ? __kfree_skb+0x20b/0x260
[  824.514544][ T9310]  ? kmsan_get_metadata+0xfb/0x160
[  824.520045][ T9310]  __msan_warning+0x1b/0x30
[  824.524725][ T9310]  pptp_xmit+0xc9a/0x2780
[  824.529424][ T9310]  ? __pfx_pptp_xmit+0x10/0x10
[  824.534484][ T9310]  ppp_input+0x1d9/0xe60
[  824.538924][ T9310]  ? kmsan_get_metadata+0xfb/0x160
[  824.544253][ T9310]  pppoe_rcv_core+0x166/0x6d0
[  824.549237][ T9310]  ? __pfx_pppoe_rcv_core+0x10/0x10
[  824.554653][ T9310]  sk_backlog_rcv+0x13f/0x420
[  824.559644][ T9310]  __release_sock+0x1d3/0x330
[  824.564583][ T9310]  release_sock+0x6b/0x270
[  824.569209][ T9310]  pppoe_sendmsg+0x15d/0xcb0
[  824.574074][ T9310]  ? __pfx_pppoe_sendmsg+0x10/0x10
[  824.579496][ T9310]  ? __pfx_pppoe_sendmsg+0x10/0x10
[  824.584949][ T9310]  __sock_sendmsg+0x333/0x3d0
[  824.589826][ T9310]  ____sys_sendmsg+0x893/0xd80
[  824.594850][ T9310]  ___sys_sendmsg+0x271/0x3b0
[  824.600038][ T9310]  ? __rcu_read_unlock+0x6d/0xd0
[  824.605160][ T9310]  ? __fget_files+0x3b4/0x4a0
[  824.610239][ T9310]  ? __fget_files+0x3b9/0x4a0
[  824.615139][ T9310]  ? kmsan_get_metadata+0xfb/0x160
[  824.620542][ T9310]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  824.626642][ T9310]  __sys_sendmmsg+0x2d9/0x7c0
[  824.631570][ T9310]  ? do_futex+0x3a1/0x480
[  824.636195][ T9310]  ? kmsan_get_metadata+0xfb/0x160
[  824.641525][ T9310]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  824.648145][ T9310]  __x64_sys_sendmmsg+0xc6/0x150
[  824.653322][ T9310]  x64_sys_call+0x21de/0x3e20
[  824.658229][ T9310]  do_syscall_64+0xd9/0x210
[  824.662966][ T9310]  ? clear_bhb_loop+0x40/0x90
[  824.667842][ T9310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.674016][ T9310] RIP: 0033:0x7f2d7058eb69
[  824.678604][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  824.698416][ T9310] RSP: 002b:00007f2d6e3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  824.707036][ T9310] RAX: ffffffffffffffda RBX: 00007f2d707b5fa0 RCX: 00007f2d7058eb69
[  824.715245][ T9310] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000004
[  824.723353][ T9310] RBP: 00007f2d70611df1 R08: 0000000000000000 R09: 0000000000000000
[  824.731482][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  824.739606][ T9310] R13: 0000000000000000 R14: 00007f2d707b5fa0 R15: 00007ffe61e19298
[  824.748028][ T9310]  </TASK>
[  824.751463][ T9310] Kernel Offset: disabled
[  824.755950][ T9310] Rebooting in 86400 seconds..