last executing test programs:

7m34.667863512s ago: executing program 32 (id=65):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffffff, &(0x7f0000000400)='./config/nullb/nullb1\x00', 0x7a4aeedce711e15b, 0x13)
write(r0, &(0x7f0000000500)='1\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
getpid()
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000100), 0x4)
sendmmsg$inet6(r3, &(0x7f0000003840)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0xb8}}, {{&(0x7f00000009c0)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000003800)}}], 0x3, 0x4004800)
writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2)
r5 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000140)={0xe, 0x1})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x8, 0x3, 0x100d, 0x4, 0x0, 0x1, 0x1}})
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
openat(r0, 0x0, 0x250000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb2/zoned\x00', 0x202, 0x88)

7m22.192233629s ago: executing program 33 (id=95):
fsopen(&(0x7f0000000180)='btrfs\x00', 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000400), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0xce0, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
listen(r0, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x800)

7m18.069277481s ago: executing program 34 (id=104):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
io_uring_setup(0x1b56, &(0x7f0000000080)={0x0, 0x1, 0x400, 0x0, 0x2c1})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22100, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket(0x2b, 0x80801, 0x1)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0x3aa, 0x0, 0x0, 0x1000, 0x98000000, 0x0, 0x0, 0xc0}}}, &(0x7f0000000340)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf420, 0x28, 0x5, 0x1a0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x405887, 0x8, 0x3, 0x193}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa6d7, 0x800, 0x8003, 0x272, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x1, 0xdfffffff, 0x0, r3}}], 0x1, 0x0, 0x0)

7m12.488734118s ago: executing program 35 (id=121):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000300)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="d92f5f86ce53aba1ab86830ee6924fa2c2b6f6518d75601bdffa5a9a32b6f3326e1ae6ce9883e1bc33c56d47b8a43bc8a436f902baf1beb0484f815d4b5013cf36a0ff3b81b8919aca6dd80731b3388b8ba76a19a6367a3ee6e12eaa8be51e2c29bda0625d3b64172dde7707a6c6e3387374016f9b6c204af84914baf3435fa5", 0x80}], 0x1}}], 0x2, 0x0)

7m1.971422136s ago: executing program 36 (id=136):
syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40010)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x56)
sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

7m1.267503194s ago: executing program 37 (id=140):
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008884}, 0x80)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x1d, &(0x7f0000000a40)=0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000140)="0102030405060708090a0b0c0d0e0f10", 0x10, 0x0, &(0x7f0000000880)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000008c0)="01154e0001000011221e445508000102030405060708090a0b0c", 0x1a, 0x0, &(0x7f0000000900)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000006c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10)
r9 = openat$nvram(0xffffff9c, &(0x7f0000000a80), 0x4c4900, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000b00)={0x0, 0x7c, 0x7, r9, 0x0, &(0x7f0000000ac0)={0x9909cb, 0x77, '\x00', @value64=0x6}})
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x830, 0x0, 0x0)
writev(r1, &(0x7f0000000700), 0x100000000000022d)

7m0.19647723s ago: executing program 38 (id=143):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
write$nbd(r0, 0x0, 0xffffffffffffff52)

6m34.715466286s ago: executing program 39 (id=165):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c040)
socket$netlink(0x10, 0x3, 0xc)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)

6m25.984534651s ago: executing program 40 (id=194):
pipe2(0x0, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x14c})
ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0)

6m20.531720905s ago: executing program 41 (id=210):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0)
read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prlimit64(r2, 0x5, &(0x7f00000028c0)={0x7fff, 0x8}, &(0x7f0000002900))
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

6m4.550459338s ago: executing program 42 (id=233):
inotify_init1(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000100)=""/210, 0xd2, 0x57)

4m44.036143008s ago: executing program 43 (id=456):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000480)={0x1e0, 0x50, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x1, 0x1, 0x4, 0x4, 0x3, 0x1ff, 0x803d, 0x1, 0x9, 0x5f, 0x202, 0x1, 0x3})

4m37.81823582s ago: executing program 44 (id=465):
r0 = openat(0xffffffffffffff9c, &(0x7f0000002a80)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r0, &(0x7f0000002ac0)=""/9, 0xfffffd87)
write$tun(r0, &(0x7f0000002b80)=ANY=[], 0xffe)

4m35.345600041s ago: executing program 45 (id=473):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002"], 0x0)
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x5)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000240)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r1, 0x40106151, &(0x7f0000000280))

3m43.777750899s ago: executing program 46 (id=642):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x60}}, 0x0)

3m27.45765974s ago: executing program 47 (id=711):
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000200090603000000000000000000050000400900020073797a3100000000050001000700000038000780069d0004404e21000005000700ff0000000c00018008000140e00040000c00db4929b870fc63028008000140e00000020c001480"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4)
read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xb819, 0xc, 0x401d031, r1, 0x0)
syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000140)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000380)=<r2=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
r3 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r3, 0x9)
syz_io_uring_complete(r2, r3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x102)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r6, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa)
mknodat(r6, &(0x7f0000000040)='./trace\x00', 0x40, 0x9)
getdents64(r5, &(0x7f00000000c0)=""/55, 0x37)
socket$inet6_udp(0xa, 0x2, 0x0)
getdents64(r5, &(0x7f0000001f80)=""/4108, 0x100c)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = getpid()
r8 = syz_open_procfs(r7, &(0x7f0000000040)='net/dev\x00')
lseek(r8, 0xffffffffffffffff, 0x1)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x20000084)

3m25.242878614s ago: executing program 48 (id=723):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
syz_usb_connect(0x6, 0x371, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x4, 0x7, 0x7ffc0001}]})
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b40)={0x2, {{0xa, 0x4620, 0x407, @mcast2, 0x7f}}}, 0x90)
sysfs$3(0x3)
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000cc0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r0, {0x8}}, './sys/bus/pci/rescan\x00'})
writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0}], 0x2)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x40040, 0xd2, 0xf}, 0x18)
unshare(0x20000)
execveat(r2, &(0x7f0000000e40)='\x00', 0x0, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000ec0)='./security\x00', &(0x7f0000000f00)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./security/ima/policy\x00', 0x1, 0x0)
write(r3, &(0x7f0000000f80)='measu', 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000fc0)='./sys\x00', 0x0)
mount(0x0, &(0x7f0000001000)='./sys\x00', &(0x7f0000001040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff)
write(r4, &(0x7f0000001100)='1', 0x1)

3m24.060107403s ago: executing program 1 (id=730):
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000040)=@hat={'changehat ', 0x4}, 0x1d)

3m23.889925788s ago: executing program 1 (id=732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x80, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100))
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003}, 0x94)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080))
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]})

3m21.724390741s ago: executing program 1 (id=735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000540)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x54)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

3m21.563001455s ago: executing program 1 (id=736):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10)

3m20.355359785s ago: executing program 1 (id=738):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000600))

3m19.996213794s ago: executing program 49 (id=738):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000600))

2m6.692195936s ago: executing program 9 (id=928):
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs/trace_options\x00', 0x2, 0x0)
write$P9_RXATTRWALK(r0, 0x0, 0x3f)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)="8e31f8631bbe", 0x6)

2m6.242781977s ago: executing program 9 (id=931):
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

2m5.485276946s ago: executing program 9 (id=934):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x5e)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1m57.15343364s ago: executing program 7 (id=941):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x1, 0x0, 0x0, 0x41100}, 0x94)

1m56.960153575s ago: executing program 7 (id=943):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
socket(0xa, 0xa, 0x36)
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@const={0xe, 0x0, 0x0, 0xa, 0x2}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x9}, {0xa, 0x4000}]}]}, {0x0, [0x30]}}, &(0x7f0000000a80)=""/4096, 0x4f, 0x1000, 0x1, 0xba8, 0x10000}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000400), 0x208e24b)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, 0x0, 0x20004090)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0f, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x22, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x3ffd, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

1m56.544252275s ago: executing program 9 (id=947):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000540)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x54)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

1m55.559785099s ago: executing program 9 (id=950):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x0)
write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x8}}}}}}, 0x2e)

1m55.500096431s ago: executing program 7 (id=951):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r3, 0xc138fd09, &(0x7f0000000940)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a3020")
write(r2, &(0x7f0000000b00)='au', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x101001, 0xf6)
write(r4, &(0x7f00000021c0)='reconnect', 0x9)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002240)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002280)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x4, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

1m54.242036082s ago: executing program 9 (id=954):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0)

1m51.286676045s ago: executing program 50 (id=954):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0)

1m51.212270916s ago: executing program 7 (id=959):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000540)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x54)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

1m50.936124853s ago: executing program 7 (id=962):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x0)
write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x8}}}}}}, 0x2e)

1m50.768209627s ago: executing program 8 (id=963):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

1m50.603308311s ago: executing program 8 (id=965):
r0 = syz_open_dev$media(&(0x7f0000001340), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001400)=[{}, {}, {}, {}], 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001600)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640), 0x80200, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001680)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = syz_open_dev$sndmidi(&(0x7f00000016c0), 0x2, 0x141102)
writev(r1, &(0x7f0000001700)=[{&(0x7f0000001740)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = io_uring_setup(0x2e08, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001800)=[{&(0x7f0000002580)=""/4095, 0xfff}], 0x1)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000003600)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
connect$inet(0xffffffffffffffff, &(0x7f0000003640)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000003740)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r4, 0x0, 0x0)

1m50.480109984s ago: executing program 7 (id=966):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r3, 0xc138fd09, &(0x7f0000000940)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a3020")
write(r2, &(0x7f0000000b00)='au', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x101001, 0xf6)
write(r4, &(0x7f00000021c0)='reconnect', 0x9)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002240)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002280)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x4, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

1m47.338270961s ago: executing program 51 (id=966):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r3, 0xc138fd09, &(0x7f0000000940)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a3020")
write(r2, &(0x7f0000000b00)='au', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x101001, 0xf6)
write(r4, &(0x7f00000021c0)='reconnect', 0x9)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002240)={'syzkaller0\x00', 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002280)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x4, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

1m47.319252882s ago: executing program 8 (id=968):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
r0 = syz_open_dev$video(&(0x7f0000000280), 0x81, 0xa082)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

1m46.248194179s ago: executing program 8 (id=970):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
write$sndseq(r5, &(0x7f0000000540)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x54)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

1m46.029677273s ago: executing program 8 (id=972):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

1m45.876063038s ago: executing program 2 (id=973):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x0)
write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x8}}}}}}, 0x2e)

1m45.612452514s ago: executing program 8 (id=974):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, 0x0, 0x0)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080), &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000001c0)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000240)=@new_dev={0x1, 0x4}}}, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f00000002c0)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r1, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r6, 0xffff, 0x6c, &(0x7f0000000340)={0x6c, 0x1, {0x2, 0x9, 0xc, 0xd, 0x9, 0x8}, {}, {}, {0x0, 0x0, 0xf4b}}}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r3, r4)
r8 = syz_open_dev$ublk_chdev(&(0x7f00000003c0), r6, 0x2)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000400)={0x0, 0x0, 0x80}, &(0x7f0000000480)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4555}}], 0x1, &(0x7f0000000700)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x4d0, 0x0, &(0x7f0000000780)=@buf_1k="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"}}, &(0x7f0000001780))
nanosleep(&(0x7f00000017c0)={0x77359400}, &(0x7f0000001800))
r9 = getpid()
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000001840)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r1, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r6, 0xffff, 0x0, 0x0, r9}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r3, r4)
nanosleep(&(0x7f00000018c0)={0x5}, &(0x7f0000001900))
syz_open_dev$ublk_bdev(&(0x7f0000001940), r6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000001980)={0x1, 0x8, 0x5, 0x3}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000019c0)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001a40), 0x80200, 0x0)
r10 = syz_open_dev$sndmidi(&(0x7f0000001a80), 0x2, 0x141102)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000001ac0))
writev(r10, &(0x7f0000001b00)=[{&(0x7f0000001b40)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001b80), 0xffffffffffffffff)
socket$inet6(0xa, 0x80003, 0xff)

1m45.198534964s ago: executing program 52 (id=974):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, 0x0, 0x0)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080), &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000001c0)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000240)=@new_dev={0x1, 0x4}}}, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f00000002c0)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r1, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r6, 0xffff, 0x6c, &(0x7f0000000340)={0x6c, 0x1, {0x2, 0x9, 0xc, 0xd, 0x9, 0x8}, {}, {}, {0x0, 0x0, 0xf4b}}}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r3, r4)
r8 = syz_open_dev$ublk_chdev(&(0x7f00000003c0), r6, 0x2)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000400)={0x0, 0x0, 0x80}, &(0x7f0000000480)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4555}}], 0x1, &(0x7f0000000700)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x4d0, 0x0, &(0x7f0000000780)=@buf_1k="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"}}, &(0x7f0000001780))
nanosleep(&(0x7f00000017c0)={0x77359400}, &(0x7f0000001800))
r9 = getpid()
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000001840)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r1, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r6, 0xffff, 0x0, 0x0, r9}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r3, r4)
nanosleep(&(0x7f00000018c0)={0x5}, &(0x7f0000001900))
syz_open_dev$ublk_bdev(&(0x7f0000001940), r6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000001980)={0x1, 0x8, 0x5, 0x3}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000019c0)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001a40), 0x80200, 0x0)
r10 = syz_open_dev$sndmidi(&(0x7f0000001a80), 0x2, 0x141102)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000001ac0))
writev(r10, &(0x7f0000001b00)=[{&(0x7f0000001b40)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001b80), 0xffffffffffffffff)
socket$inet6(0xa, 0x80003, 0xff)

1m45.181804025s ago: executing program 2 (id=976):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d9010402"], 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
munmap(&(0x7f0000583000/0x4000)=nil, 0x4000)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000004c0)=<r8=>0x0)
r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=<r11=>0x0)
r12 = syz_open_dev$ublk_chdev(0x0, r9, 0x2)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
syz_ublk_setup_queues(r12, r11, &(0x7f00000005c0)={0x0, 0x3e0e, 0x400, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x3, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x4, 0x0, 0xb1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0)
prlimit64(r1, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340))
write(r0, &(0x7f0000000140)='1', 0x1)
socket$igmp(0x2, 0x3, 0x2)

1m41.863976086s ago: executing program 2 (id=977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x80, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100))
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003}, 0x94)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080))
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]})

1m40.0720374s ago: executing program 2 (id=978):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
write$sndseq(r5, &(0x7f0000000540)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x54)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

1m39.905593495s ago: executing program 2 (id=979):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000480), 0x12)
listen(r2, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000540)='auth.unix.ip/channel\x00', 0x2, 0x0)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97)

1m39.407805187s ago: executing program 2 (id=980):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x101042, 0x5)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

1m38.85602563s ago: executing program 53 (id=980):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x101042, 0x5)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

1m20.667962247s ago: executing program 4 (id=992):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, 0x0, 0x0)
listen(r2, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000540)='auth.unix.ip/channel\x00', 0x2, 0x0)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97)

1m20.326111845s ago: executing program 4 (id=993):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket(0xa, 0x5, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={0x0, 0x5, 0x4000003})
mmap(&(0x7f0000657000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x1004000)
listen(0xffffffffffffffff, 0xa)
mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00')
syz_open_dev$dvb_frontend(0x0, 0x9, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m18.248651947s ago: executing program 4 (id=995):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})

1m17.969164943s ago: executing program 4 (id=998):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r5, 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

1m17.606925642s ago: executing program 4 (id=999):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)

1m17.116229354s ago: executing program 4 (id=1001):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, 0x0, 0x0)
listen(r2, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000540)='auth.unix.ip/channel\x00', 0x2, 0x0)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97)

1m16.50423035s ago: executing program 54 (id=1001):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, 0x0, 0x0)
listen(r2, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000540)='auth.unix.ip/channel\x00', 0x2, 0x0)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97)

24.686610454s ago: executing program 3 (id=1129):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

24.329214052s ago: executing program 3 (id=1132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='01:80:c2:00:01:00', 0x11)

24.062962259s ago: executing program 3 (id=1133):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000b, 0x8012, r0, 0x0)

23.639707289s ago: executing program 3 (id=1137):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000540)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x38)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

21.802679005s ago: executing program 5 (id=1138):
socket$key(0xf, 0x3, 0x2)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x7, 0x200, 0x3, 0x80, <r0=>0xffffffffffffffff})
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x40, r1})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x205, 0x5})
ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002200)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000002240)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x100, 0x7, 0x803, 0x6, 0x4006, 0x0, 0x3]})
ioctl$COMEDI_DEVINFO(r2, 0x80b06401, &(0x7f0000002300))
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000023c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sec/apparmor/.load\x00', 0x2, 0x0)
write(r3, 0x0, 0x37)
mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000003, 0x30, r3, 0x0)

21.703770757s ago: executing program 3 (id=1139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x80, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100))
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003}, 0x94)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080))
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]})

21.516126432s ago: executing program 5 (id=1140):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket(0x400000000010, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x40000, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

21.334990786s ago: executing program 3 (id=1142):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d80)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]})
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r1, r1, 0x0)

21.243225178s ago: executing program 5 (id=1143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)
write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x8}}}}}}, 0x2e)

20.227974714s ago: executing program 55 (id=1142):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d40)={0x1, &(0x7f0000000d80)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]})
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r1, r1, 0x0)

20.164460995s ago: executing program 0 (id=1146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a3889", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d901040200"], 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
munmap(&(0x7f0000583000/0x4000)=nil, 0x4000)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000004c0)=<r8=>0x0)
r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=<r11=>0x0)
r12 = syz_open_dev$ublk_chdev(0x0, r9, 0x2)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
syz_ublk_setup_queues(r12, r11, &(0x7f00000005c0)={0x0, 0x3e0e, 0x400, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x3, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x4, 0x0, 0xb1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0)
prlimit64(r1, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340))
write(r0, &(0x7f0000000140)='1', 0x1)
socket$igmp(0x2, 0x3, 0x2)

20.102022517s ago: executing program 5 (id=1147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000540)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x38)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

19.844481832s ago: executing program 5 (id=1148):
socket$key(0xf, 0x3, 0x2)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x7, 0x200, 0x3, 0x80, <r0=>0xffffffffffffffff})
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x40, r1})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x205, 0x5})
ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002200)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000002240)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x100, 0x7, 0x803, 0x6, 0x4006, 0x0, 0x3]})
ioctl$COMEDI_DEVINFO(r2, 0x80b06401, &(0x7f0000002300))
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000023c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sec/apparmor/.load\x00', 0x2, 0x0)
write(r3, 0x0, 0x37)
mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000003, 0x30, r3, 0x0)

19.359681905s ago: executing program 5 (id=1150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x80, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100))
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003}, 0x94)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080))
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]})

17.93170554s ago: executing program 56 (id=1150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ipvs(0x0, r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
mq_open(0x0, 0x800, 0x80, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
prlimit64(0x0, 0x5, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000100))
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e0a483137140000006bbd6efb25eee9f60d000300020400bf050005001206cf466fe436d8ac70ec1ca835b50f7ce6a2ac101769da02dcdd672f3635467c1eed69d6934f35849cb28c297af7396c1b81b4c9e659da2448cbbeaaf0f67239dbeaf1dae1de19c5551a9a7b12fceb64b811981644549fea8f3161dd540945b1e9ff75877a7d7d1dddf961c5c23fefe52cbedbf781ff55f5c30db481f61a8e657fc5cb2ae84745d634444d1a9b829151a7cb2d5dd50f91aafcaf82e15183074811013285f31e707eb9750c69eb784ea025", 0xde}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000003}, 0x94)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080))
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]})

17.9236686s ago: executing program 0 (id=1153):
r0 = syz_open_dev$radio(&(0x7f00000006c0), 0x2, 0x2)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1)

17.658610346s ago: executing program 0 (id=1155):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)
write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x8}}}}}}, 0x2e)

17.380871304s ago: executing program 0 (id=1156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000006c0)={&(0x7f0000000680)='\x00', &(0x7f0000000ac0)='\x00', 0x8000})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000480)={0x0, 0x81, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000540)=[{0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x5}, {0x6, 0xb}}}], 0x38)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0xa8c01)
write$sndseq(r6, &(0x7f0000000600)=[{0x1e, 0x0, 0x88, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dev\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r7, 0xc138fd03, &(0x7f0000000880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70")

17.247393546s ago: executing program 0 (id=1157):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x300)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000280)=0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x24c03)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(0xffffffffffffffff, 0x204)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @remote, 0x4e22, 0x0, 'wrr\x00', 0x10}, 0x2c)
socket$inet(0x2, 0x1, 0x6)

16.772379128s ago: executing program 0 (id=1160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a3889", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d901040200"], 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
munmap(&(0x7f0000583000/0x4000)=nil, 0x4000)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000004c0)=<r8=>0x0)
r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=<r11=>0x0)
r12 = syz_open_dev$ublk_chdev(0x0, r9, 0x2)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
syz_ublk_setup_queues(r12, r11, &(0x7f00000005c0)={0x0, 0x3e0e, 0x400, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x3, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x4, 0x0, 0xb1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0)
prlimit64(r1, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340))
write(r0, &(0x7f0000000140)='1', 0x1)
socket$igmp(0x2, 0x3, 0x2)

16.346371129s ago: executing program 57 (id=1160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a3889", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d901040200"], 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
munmap(&(0x7f0000583000/0x4000)=nil, 0x4000)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000004c0)=<r8=>0x0)
r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=<r11=>0x0)
r12 = syz_open_dev$ublk_chdev(0x0, r9, 0x2)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
syz_ublk_setup_queues(r12, r11, &(0x7f00000005c0)={0x0, 0x3e0e, 0x400, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x3, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x4, 0x0, 0xb1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0)
prlimit64(r1, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340))
write(r0, &(0x7f0000000140)='1', 0x1)
socket$igmp(0x2, 0x3, 0x2)

1.676606169s ago: executing program 6 (id=1187):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@multicast2, @loopback, @empty}, 0xc)

1.404478776s ago: executing program 6 (id=1188):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x178)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800040, 0x0)

1.102843093s ago: executing program 6 (id=1189):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x68, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x68}}, 0x0)
write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x8}}}}}}, 0x2e)

729.396553ms ago: executing program 6 (id=1190):
socket$key(0xf, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0)
read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x40, r1})
fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x205, 0x5})
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002200)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000002240)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x100, 0x7, 0x803, 0x6, 0x4006, 0x0, 0x3]})
ioctl$COMEDI_DEVINFO(r2, 0x80b06401, &(0x7f0000002300))
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000023c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sec/apparmor/.load\x00', 0x2, 0x0)
write(r3, 0x0, 0x37)
mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000003, 0x30, r3, 0x0)

463.863889ms ago: executing program 6 (id=1191):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)="8e31f8631bbe", 0x6)

458.701999ms ago: executing program 1 (id=1144):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000180)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f0000000440)={0x1a1809580, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0, 0xff13}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x90)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x4008af23, &(0x7f0000000580))
rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000640)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
shmget(0x2, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
syz_open_dev$sg(&(0x7f00000005c0), 0x5, 0x24300)
write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000080)={0x1, 0x4})
r4 = getuid()
mknodat$loop(r2, &(0x7f0000000140)='./gadget\x00', 0x6000, 0x0)
quotactl$Q_QUOTAOFF(0x3, &(0x7f00000000c0)=@rnullb={'/dev/syzrnull', 0x0}, r4, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e)

0s ago: executing program 6 (id=1192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab1b590fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300ff168ef5dd000002100001000a0c10e1000000e6ff22", 0x58}], 0x1)
write(r0, &(0x7f00000000c0)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1', 0x1)

kernel console output (not intermixed with test programs):

nterface batadv_slave_0 (retrying later): interface not active
[  369.981182][ T9297] chnl_net:caif_netlink_parms(): no params data found
[  369.996580][ T5779] Bluetooth: hci0: command tx timeout
[  370.016192][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.068831][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.156548][ T5779] Bluetooth: hci1: command tx timeout
[  370.216557][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.667915][ T1083] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.694264][ T1083] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.809968][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.823979][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.832895][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.841134][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.854723][ T9250] hsr_slave_0: entered promiscuous mode
[  370.911782][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  370.919704][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.929981][ T9250] hsr_slave_1: entered promiscuous mode
[  370.980361][ T9250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  370.993737][ T9250] Cannot create hsr debugfs directory
[  371.093492][ T1083] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.119536][ T1083] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.250387][ T1083] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.260339][ T1083] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.430274][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.438218][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.445533][ T9297] bridge_slave_0: entered allmulticast mode
[  371.453204][ T9297] bridge_slave_0: entered promiscuous mode
[  371.469679][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.477819][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.485094][ T9297] bridge_slave_1: entered allmulticast mode
[  371.493201][ T9297] bridge_slave_1: entered promiscuous mode
[  371.505862][ T1083] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.518552][ T1083] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.610556][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.689969][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.824063][ T9297] team0: Port device team_slave_0 added
[  371.878492][ T9297] team0: Port device team_slave_1 added
[  372.070732][ T1083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.077329][ T5781] Bluetooth: hci0: command tx timeout
[  372.132261][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.147204][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.178948][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.219412][ T1083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.237067][ T5781] Bluetooth: hci1: command tx timeout
[  372.277859][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.284884][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.315795][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.408881][ T1083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.733718][ T1083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.003799][ T5781] Bluetooth: hci3: command tx timeout
[  373.130972][ T9297] hsr_slave_0: entered promiscuous mode
[  373.198007][ T9297] hsr_slave_1: entered promiscuous mode
[  373.254620][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  373.315478][ T9297] Cannot create hsr debugfs directory
[  373.765550][ T9250] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  373.833332][ T9250] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  373.878256][ T9250] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  373.946264][ T9250] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  373.997964][ T9372] chnl_net:caif_netlink_parms(): no params data found
[  374.324804][ T5781] Bluetooth: hci1: command tx timeout
[  374.601755][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.618505][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.625879][ T9372] bridge_slave_0: entered allmulticast mode
[  374.636313][ T9372] bridge_slave_0: entered promiscuous mode
[  374.936765][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.976915][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.984266][ T9372] bridge_slave_1: entered allmulticast mode
[  375.046609][ T5781] Bluetooth: hci3: command tx timeout
[  375.132604][ T9372] bridge_slave_1: entered promiscuous mode
[  375.424374][ T9372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.745396][ T9372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.982538][ T9372] team0: Port device team_slave_0 added
[  376.003348][ T9372] team0: Port device team_slave_1 added
[  376.322402][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.354855][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.387481][ T9372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.407494][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.414667][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.445474][ T9372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.574142][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.653799][ T9372] hsr_slave_0: entered promiscuous mode
[  376.664429][ T9372] hsr_slave_1: entered promiscuous mode
[  376.674119][ T9372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  376.682269][ T9372] Cannot create hsr debugfs directory
[  376.841745][ T9297] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  376.920657][ T9250] 8021q: adding VLAN 0 to HW filter on device team0
[  376.988514][ T9297] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  377.006005][ T9297] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  377.065409][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.072657][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.113553][ T9297] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  377.120758][ T5781] Bluetooth: hci3: command tx timeout
[  377.143027][ T9475] gadgetfs: bound to dummy_udc driver
[  377.155911][ T1083] hsr_slave_0: left promiscuous mode
[  377.165974][ T1083] hsr_slave_1: left promiscuous mode
[  377.192014][ T1083] bridge_slave_1: left allmulticast mode
[  377.206475][ T1083] bridge_slave_1: left promiscuous mode
[  377.212629][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.239561][ T1083] bridge_slave_0: left allmulticast mode
[  377.245266][ T1083] bridge_slave_0: left promiscuous mode
[  377.255825][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.282407][ T1083] hsr_slave_0: left promiscuous mode
[  377.299142][ T1083] hsr_slave_1: left promiscuous mode
[  377.308660][ T1083] bridge_slave_1: left allmulticast mode
[  377.314360][ T1083] bridge_slave_1: left promiscuous mode
[  377.337141][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.359017][ T1083] bridge_slave_0: left allmulticast mode
[  377.364737][ T1083] bridge_slave_0: left promiscuous mode
[  377.379873][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.447824][ T1083] veth1_macvtap: left promiscuous mode
[  377.454414][ T1083] veth0_macvtap: left promiscuous mode
[  377.460605][ T1083] veth1_vlan: left promiscuous mode
[  377.466101][ T1083] veth0_vlan: left promiscuous mode
[  377.478376][ T1083] veth1_macvtap: left promiscuous mode
[  377.484059][ T1083] veth0_macvtap: left promiscuous mode
[  377.496756][ T1083] veth1_vlan: left promiscuous mode
[  377.503736][ T1083] veth0_vlan: left promiscuous mode
[  377.981414][ T1083] bond1 (unregistering): Released all slaves
[  378.810428][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.819663][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  378.839364][ T1083] team0 (unregistering): Port device team_slave_1 removed
[  378.895915][ T1083] team0 (unregistering): Port device team_slave_0 removed
[  378.972690][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.052570][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.205068][ T5781] Bluetooth: hci3: command tx timeout
[  379.457401][ T1083] bond0 (unregistering): Released all slaves
[  380.130733][ T1083] team0 (unregistering): Port device team_slave_1 removed
[  380.180290][ T1083] team0 (unregistering): Port device team_slave_0 removed
[  380.247938][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.296624][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.628814][ T1083] bond0 (unregistering): Released all slaves
[  380.696961][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.704243][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.939923][ T9541] random: crng reseeded on system resumption
[  381.351032][ T9543] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.496066][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.611066][ T9543] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.764029][ T9543] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.785571][ T9297] 8021q: adding VLAN 0 to HW filter on device team0
[  381.961101][ T9543] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.011992][ T9250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.081472][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.088755][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.129140][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.136364][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.365871][ T9543] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.397484][ T9543] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.448401][ T9543] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.472279][ T9372] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  382.516250][ T9543] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.547125][ T9372] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  382.571241][ T9372] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  382.616623][ T9372] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  382.914175][ T9250] veth0_vlan: entered promiscuous mode
[  382.951031][ T9250] veth1_vlan: entered promiscuous mode
[  383.009017][ T9372] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.102275][ T9372] 8021q: adding VLAN 0 to HW filter on device team0
[  383.146125][ T9250] veth0_macvtap: entered promiscuous mode
[  383.248490][ T9250] veth1_macvtap: entered promiscuous mode
[  383.263969][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.271202][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.363110][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.370453][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.587032][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.621609][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.700718][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.736154][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.788571][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.815187][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.844866][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.909645][ T9250] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.933250][ T9250] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.942629][ T9250] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.951852][ T9250] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.251981][ T9297] veth0_vlan: entered promiscuous mode
[  384.357647][ T9297] veth1_vlan: entered promiscuous mode
[  384.520820][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.547372][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.577275][ T9297] veth0_macvtap: entered promiscuous mode
[  384.612854][ T9297] veth1_macvtap: entered promiscuous mode
[  384.623526][ T4838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.651977][ T4838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.697967][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.743343][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.771463][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  384.783241][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.809654][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.879576][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.911994][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.923556][ T9609] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  384.939383][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.009597][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.036847][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.135277][ T9297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.222720][ T9297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.275598][ T9297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.286678][ T9297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.325818][ T9372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.486363][ T6442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.520485][ T6442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.562954][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.596891][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.696628][ T6317] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  385.906468][ T6317] usb 10-1: Using ep0 maxpacket: 16
[  385.924516][ T6317] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.955225][ T6317] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  385.998477][ T6317] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  386.044678][ T6317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.079154][ T6317] usb 10-1: config 0 descriptor??
[  386.099775][ T6317] pxrc 10-1:0.0: Could not find endpoint
[  386.117935][ T6317] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  386.129592][ T9640] gadgetfs: bound to dummy_udc driver
[  386.353847][ T9372] veth0_vlan: entered promiscuous mode
[  386.411918][ T5818] usb 10-1: USB disconnect, device number 4
[  386.434938][ T9372] veth1_vlan: entered promiscuous mode
[  386.559198][ T9372] veth0_macvtap: entered promiscuous mode
[  386.593822][ T9372] veth1_macvtap: entered promiscuous mode
[  386.629692][ T9648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  386.650770][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.662434][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.672991][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.684571][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.701948][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.714317][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.731163][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.766418][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.786112][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.799169][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.814403][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.824410][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.834945][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.848947][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.872409][ T9372] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.888713][ T9372] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.907823][ T9372] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.921944][ T9372] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.377989][ T6442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.386016][ T6442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.712131][ T9666] gadgetfs: bound to dummy_udc driver
[  387.743955][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.807563][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.195004][   T28] audit: type=1400 audit(1791691886.339:1008): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="::o" pid=9672 comm="syz.7.739" name="::o" offset=71
[  388.417595][ T9679] netlink: 'syz.9.773': attribute type 1 has an invalid length.
[  388.452987][ T9679] bond0: (slave veth3): Enslaving as an active interface with an up link
[  388.565070][ T9679] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  388.821882][   T28] audit: type=1400 audit(1791691886.969:1009): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="::o" pid=9693 comm="syz.8.780" name="::o" offset=76
[  389.004925][ T9698] gadgetfs: bound to dummy_udc driver
[  390.206541][   T23] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  390.289101][   T28] audit: type=1400 audit(1791691888.439:1010): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="::o" pid=9718 comm="syz.7.789" name="::o" offset=76
[  390.440360][   T23] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  390.452626][   T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.478834][   T23] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  390.490354][ T5781] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  390.499960][ T5781] Bluetooth: hci0: Injecting HCI hardware error event
[  390.510269][ T5779] Bluetooth: hci0: hardware error 0x00
[  390.847599][   T23] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  391.120375][   T23] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  391.129650][   T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.138284][   T23] usb 10-1: Product: syz
[  391.142626][   T23] usb 10-1: Manufacturer: syz
[  391.147888][   T23] usb 10-1: SerialNumber: syz
[  391.159450][   T23] usbserial_generic 10-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  391.175821][   T23] usbserial_generic 10-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  391.187218][   T23] usbserial_generic 10-1:1.0: generic converter detected
[  391.210744][   T23] usb 10-1: generic converter now attached to ttyUSB0
[  391.224888][   T28] audit: type=1326 audit(1791691889.369:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9171b9e1d9 code=0x7ffc0000
[  391.248950][    C1] vkms_vblank_simulate: vblank timer overrun
[  391.255634][   T28] audit: type=1326 audit(1791691889.369:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9171b9e1d9 code=0x7ffc0000
[  391.334022][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.792'.
[  391.355495][   T28] audit: type=1326 audit(1791691889.499:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9171b9e1d9 code=0x7ffc0000
[  391.428504][   T23] usb 10-1: USB disconnect, device number 5
[  391.461672][   T23] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  391.484278][   T28] audit: type=1326 audit(1791691889.499:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9171b9e1d9 code=0x7ffc0000
[  391.518235][   T23] usbserial_generic 10-1:1.0: device disconnected
[  391.578371][ T9741] gadgetfs: bound to dummy_udc driver
[  391.583941][   T28] audit: type=1326 audit(1791691889.499:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9171b9e1d9 code=0x7ffc0000
[  391.653350][   T28] audit: type=1326 audit(1791691889.539:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9171b9e1d9 code=0x7ffc0000
[  391.723660][   T28] audit: type=1326 audit(1791691889.539:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.7.792" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9171b9e1d9 code=0x7ffc0000
[  391.747771][    C1] vkms_vblank_simulate: vblank timer overrun
[  392.717139][ T5779] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  392.885279][ T9757] block nbd7: not configured, cannot reconfigure
[  393.339779][ T9781] CIFS: Attempting to mount //127.0.0.1/share
[  393.361450][ T9781] CIFS: VFS: Error connecting to socket. Aborting operation.
[  393.371975][ T9781] CIFS: VFS: cifs_mount failed w/return code = -111
[  393.409964][ T9785] gadgetfs: bound to dummy_udc driver
[  393.746012][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  393.746028][   T28] audit: type=1400 audit(1791691891.889:1022): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="::o" pid=9792 comm="syz.7.809" name="::o" offset=76
[  394.022713][ T9798] block nbd7: not configured, cannot reconfigure
[  395.033023][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.815'.
[  395.398283][ T9821] CIFS: Attempting to mount //127.0.0.1/share
[  395.425574][ T9824] gadgetfs: bound to dummy_udc driver
[  395.447046][ T9821] CIFS: VFS: Error connecting to socket. Aborting operation.
[  395.472469][ T9821] CIFS: VFS: cifs_mount failed w/return code = -111
[  396.032823][   T28] audit: type=1400 audit(1791691894.179:1023): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="::o" pid=9832 comm="syz.9.819" name="::o" offset=76
[  396.191534][   T28] audit: type=1800 audit(1791691894.339:1024): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.820" name="file0" dev="overlay" ino=282 res=0 errno=0
[  397.874223][ T9844] block nbd8: not configured, cannot reconfigure
[  398.481857][ T9867] gadgetfs: bound to dummy_udc driver
[  398.499768][   T28] audit: type=1400 audit(1791691896.639:1025): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="::o" pid=9869 comm="syz.2.829" name="::o" offset=76
[  399.868346][ T9891] block nbd2: not configured, cannot reconfigure
[  400.152509][ T9900] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  400.159594][ T9900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  400.239460][ T9900] vhci_hcd vhci_hcd.0: Device attached
[  400.267599][ T9901] vhci_hcd: connection closed
[  400.270611][ T1083] vhci_hcd: stop threads
[  400.294587][ T1083] vhci_hcd: release socket
[  400.299680][ T1083] vhci_hcd: disconnect device
[  400.319688][ T9906] FAULT_INJECTION: forcing a failure.
[  400.319688][ T9906] name failslab, interval 1, probability 0, space 0, times 0
[  400.347182][ T9906] CPU: 1 PID: 9906 Comm: syz.2.837 Not tainted syzkaller #0
[  400.354661][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  400.364770][ T9906] Call Trace:
[  400.368100][ T9906]  <TASK>
[  400.371085][ T9906]  dump_stack_lvl+0x18c/0x250
[  400.375824][ T9906]  ? show_regs_print_info+0x20/0x20
[  400.381173][ T9906]  ? load_image+0x420/0x420
[  400.385755][ T9906]  ? __lock_acquire+0x7eb0/0x7eb0
[  400.390847][ T9906]  should_fail_ex+0x394/0x4c0
[  400.395574][ T9906]  should_failslab+0x9/0x20
[  400.400120][ T9906]  slab_pre_alloc_hook+0x59/0x300
[  400.405181][ T9906]  kmem_cache_alloc_node+0x5e/0x310
[  400.410424][ T9906]  ? alloc_vmap_area+0x6f7/0x1e50
[  400.415494][ T9906]  alloc_vmap_area+0x6f7/0x1e50
[  400.420429][ T9906]  ? vm_map_ram+0xcf0/0xcf0
[  400.424972][ T9906]  ? rcu_is_watching+0x15/0xb0
[  400.429805][ T9906]  __get_vm_area_node+0x162/0x370
[  400.434872][ T9906]  __vmalloc_node_range+0x36f/0x1320
[  400.440202][ T9906]  ? kvm_dev_ioctl+0x208/0x1810
[  400.445114][ T9906]  ? snprintf+0xe9/0x140
[  400.449420][ T9906]  ? free_vm_area+0x50/0x50
[  400.453962][ T9906]  ? vscnprintf+0x80/0x80
[  400.458332][ T9906]  ? alloc_fd+0x590/0x640
[  400.462701][ T9906]  ? kvm_dev_ioctl+0x208/0x1810
[  400.467591][ T9906]  __vmalloc+0x7a/0x90
[  400.471700][ T9906]  ? kvm_dev_ioctl+0x208/0x1810
[  400.476587][ T9906]  kvm_dev_ioctl+0x208/0x1810
[  400.481300][ T9906]  ? __fget_files+0x28/0x460
[  400.485927][ T9906]  ? kvm_resume+0x1e0/0x1e0
[  400.490473][ T9906]  ? bpf_lsm_file_ioctl+0x9/0x10
[  400.495450][ T9906]  ? security_file_ioctl+0x80/0xa0
[  400.500628][ T9906]  ? kvm_resume+0x1e0/0x1e0
[  400.505168][ T9906]  __se_sys_ioctl+0xfd/0x170
[  400.509797][ T9906]  do_syscall_64+0x55/0xb0
[  400.514241][ T9906]  ? clear_bhb_loop+0x40/0x90
[  400.518948][ T9906]  ? clear_bhb_loop+0x40/0x90
[  400.523660][ T9906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  400.529596][ T9906] RIP: 0033:0x7ff12b19e1d9
[  400.534038][ T9906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.553684][ T9906] RSP: 002b:00007ff12c067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  400.562147][ T9906] RAX: ffffffffffffffda RBX: 00007ff12b425fa0 RCX: 00007ff12b19e1d9
[  400.570151][ T9906] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  400.578158][ T9906] RBP: 00007ff12b235888 R08: 0000000000000000 R09: 0000000000000000
[  400.586156][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.594157][ T9906] R13: 00007ff12b426038 R14: 00007ff12b425fa0 R15: 00007fff0590c898
[  400.602189][ T9906]  </TASK>
[  401.085578][ T9919] random: crng reseeded on system resumption
[  401.204832][ T9926] gadgetfs: bound to dummy_udc driver
[  401.920555][   T23] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  402.109817][   T23] usb 9-1: config 0 has no interfaces?
[  402.119454][   T23] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  402.136523][   T23] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  402.146634][   T23] usb 9-1: Product: syz
[  402.150856][   T23] usb 9-1: Manufacturer: syz
[  402.192429][   T23] usb 9-1: SerialNumber: syz
[  402.210245][   T23] usb 9-1: config 0 descriptor??
[  404.041065][   T28] audit: type=1326 audit(1791691902.189:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.065787][   T28] audit: type=1326 audit(1791691902.189:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.102325][ T9925] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.121090][   T28] audit: type=1326 audit(1791691902.189:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.170938][   T28] audit: type=1326 audit(1791691902.189:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.218423][   T28] audit: type=1326 audit(1791691902.219:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.250678][ T9925] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.271317][   T28] audit: type=1326 audit(1791691902.239:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.295880][   T28] audit: type=1326 audit(1791691902.239:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.356797][   T28] audit: type=1326 audit(1791691902.239:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.405780][ T9982] syzkaller0: entered promiscuous mode
[  404.415194][ T9982] syzkaller0: entered allmulticast mode
[  404.421416][   T28] audit: type=1326 audit(1791691902.239:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.452936][   T28] audit: type=1326 audit(1791691902.239:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  404.481966][ T9925] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.566236][ T9925] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.589670][ T9986] gadgetfs: bound to dummy_udc driver
[  404.771069][ T9925] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.804264][ T9925] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.847184][ T9990] CIFS: Attempting to mount //127.0.0.1/share
[  404.885817][ T9925] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.932217][ T9990] CIFS: VFS: Error connecting to socket. Aborting operation.
[  404.982383][ T9925] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.987327][ T9990] CIFS: VFS: cifs_mount failed w/return code = -111
[  405.159031][  T174] usb 9-1: USB disconnect, device number 2
[  405.617934][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.9.862'.
[  407.003993][T10046] gadgetfs: bound to dummy_udc driver
[  408.871486][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.7.867'.
[  409.071406][T10052] CIFS: Attempting to mount //127.0.0.1/share
[  409.081290][T10052] CIFS: VFS: Error connecting to socket. Aborting operation.
[  409.093327][T10052] CIFS: VFS: cifs_mount failed w/return code = -111
[  409.232282][T10054] random: crng reseeded on system resumption
[  409.840625][ T5764] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  410.055620][ T5764] usb 8-1: config 0 has no interfaces?
[  410.064103][ T5764] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  410.076280][ T5764] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  410.085122][ T5764] usb 8-1: Product: syz
[  410.089488][ T5764] usb 8-1: Manufacturer: syz
[  410.094229][ T5764] usb 8-1: SerialNumber: syz
[  410.105692][ T5764] usb 8-1: config 0 descriptor??
[  410.916003][T10042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.923834][T10042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.932952][T10042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.942172][T10042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.132913][T10055] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.193465][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  411.193482][   T28] audit: type=1326 audit(1791691909.339:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  411.251509][   T28] audit: type=1326 audit(1791691909.369:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  411.332015][   T28] audit: type=1326 audit(1791691909.369:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  411.395943][   T28] audit: type=1326 audit(1791691909.369:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x7ffc0000
[  411.426678][ T5821] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  411.436321][T10055] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.490486][   T28] audit: type=1326 audit(1791691909.379:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12b19de6b code=0x7ffc0000
[  411.545646][   T28] audit: type=1326 audit(1791691909.379:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12b19de6b code=0x7ffc0000
[  411.601668][   T28] audit: type=1326 audit(1791691909.379:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12b19de6b code=0x7ffc0000
[  411.659921][   T28] audit: type=1326 audit(1791691909.379:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12b19de6b code=0x7ffc0000
[  411.729477][ T5821] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  411.733525][   T28] audit: type=1326 audit(1791691909.379:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12b19de6b code=0x7ffc0000
[  411.778739][ T5821] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  411.801815][   T28] audit: type=1326 audit(1791691909.379:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.2.870" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff12b19de6b code=0x7ffc0000
[  411.806554][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.837048][T10055] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.878466][ T5821] usb 9-1: Product: syz
[  411.884357][ T5821] usb 9-1: Manufacturer: syz
[  411.923675][ T5821] usb 9-1: SerialNumber: syz
[  411.973821][ T5821] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[  411.995736][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 87
[  412.015422][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7
[  412.024935][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81
[  412.033632][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 82
[  412.041902][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1
[  412.054151][T10055] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.089482][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[  412.104452][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 85
[  412.113343][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 5
[  412.125087][ T5821] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  412.153361][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 83
[  412.197255][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[  412.225538][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 3
[  412.259592][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4
[  412.282579][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 86
[  412.302672][T10055] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.319020][ T5821] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[  412.340042][ T5821] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  412.396844][T10055] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.449609][ T5821] usb 9-1: USB disconnect, device number 3
[  412.478286][ T5821] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  412.489719][T10055] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.511062][ T5821] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  412.531596][T10055] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.541761][ T5821] keyspan 9-1:1.0: device disconnected
[  412.550404][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'.
[  412.622953][ T6315] usb 8-1: USB disconnect, device number 7
[  413.726664][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  416.278505][T10114] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10)
[  416.285202][T10114] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  416.293635][T10114] vhci_hcd vhci_hcd.0: Device attached
[  416.531140][  T174] vhci_hcd: vhci_device speed not set
[  416.712883][  T174] usb 49-1: new high-speed USB device number 2 using vhci_hcd
[  416.975392][T10115] vhci_hcd: connection reset by peer
[  417.133823][ T6442] vhci_hcd: stop threads
[  417.183873][ T6442] vhci_hcd: release socket
[  417.295673][ T6442] vhci_hcd: disconnect device
[  421.291282][T10101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.298815][T10101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.309121][T10101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.316872][T10101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.943985][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  421.944002][   T28] audit: type=1800 audit(1791691920.089:1085): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.893" name="nexus" dev="configfs" ino=31702 res=0 errno=0
[  421.971198][T10178] Missing 'naa.' prefix
[  421.976844][T10178] Missing 'naa.' prefix
[  421.996760][  T174] vhci_hcd: vhci_device speed not set
[  422.006761][ T6315] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  422.214298][ T6315] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  422.305947][ T6315] usb 3-1: config 0 interface 0 has no altsetting 0
[  422.416943][ T6315] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  422.536974][ T6315] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  422.646786][ T6315] usb 3-1: Product: syz
[  422.698678][ T6315] usb 3-1: Manufacturer: syz
[  422.763301][ T6315] usb 3-1: SerialNumber: syz
[  422.916645][ T6315] usb 3-1: config 0 descriptor??
[  422.953992][ T6315] usb 3-1: selecting invalid altsetting 0
[  423.888374][ T6315] usb 3-1: USB disconnect, device number 5
[  427.199914][   T28] audit: type=1800 audit(1791691925.349:1086): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.903" name="nexus" dev="configfs" ino=32303 res=0 errno=0
[  427.221668][T10216] Missing 'naa.' prefix
[  427.227020][T10216] Missing 'naa.' prefix
[  429.154887][T10226] futex_wake_op: syz.9.906 tries to shift op by 144; fix this program
[  429.279025][T10230] netlink: 'syz.8.908': attribute type 6 has an invalid length.
[  429.527447][T10230] binder: 10229:10230 unknown command 1074553619
[  429.533870][T10230] binder: 10229:10230 ioctl c0306201 200000000300 returned -22
[  430.826745][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  431.318211][T10230] binder: 10229:10230 ioctl 80605414 200000000380 returned -22
[  431.552119][   T28] audit: type=1800 audit(1791691929.699:1087): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.912" name="nexus" dev="configfs" ino=32817 res=0 errno=0
[  431.553126][T10247] Missing 'naa.' prefix
[  431.628547][T10247] Missing 'naa.' prefix
[  431.679561][T10252] Mass Storage Function, version: 2009/09/11
[  431.687258][T10252] LUN: removable file: (no medium)
[  432.614942][   T28] audit: type=1804 audit(1791691930.489:1088): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.910" name="bus" dev="ramfs" ino=32827 res=1 errno=0
[  432.843392][   T28] audit: type=1804 audit(1791691930.849:1089): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.910" name="bus" dev="ramfs" ino=32827 res=1 errno=0
[  435.468444][   T28] audit: type=1326 audit(1791691933.619:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  435.541515][   T28] audit: type=1326 audit(1791691933.639:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  435.614875][   T28] audit: type=1326 audit(1791691933.639:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  435.670466][   T28] audit: type=1326 audit(1791691933.639:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  435.726900][   T28] audit: type=1326 audit(1791691933.639:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  435.783488][   T28] audit: type=1326 audit(1791691933.639:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  435.870894][   T28] audit: type=1326 audit(1791691933.639:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  436.000521][   T28] audit: type=1326 audit(1791691933.639:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.2.917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b19e1d9 code=0x50000
[  439.807792][T10271] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  439.835025][T10295] netlink: 'syz.9.921': attribute type 10 has an invalid length.
[  439.889647][T10295] team0: Port device netdevsim0 added
[  439.915900][T10301] netlink: 'syz.9.921': attribute type 10 has an invalid length.
[  439.972868][T10301] team0: Port device netdevsim0 removed
[  440.072007][T10301] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  441.066771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  442.591742][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  442.598284][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  444.331610][T10348] nbd: must specify a device to reconfigure
[  452.502628][T10381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.522283][T10381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.549127][T10381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.578083][T10381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.995180][T10351] Set syz1 is full, maxelem 65536 reached
[  453.009867][T10407] nbd: must specify a device to reconfigure
[  454.009924][ T5779] Bluetooth: hci3: link tx timeout
[  454.024468][ T5779] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  454.037834][ T5779] Bluetooth: hci3: link tx timeout
[  454.043021][ T5779] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  457.392520][ T5779] Bluetooth: hci3: command 0x0406 tx timeout
[  461.728558][ T1146] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.897654][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  461.908028][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  461.927090][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  461.936517][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  461.944432][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  461.951997][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  462.075605][ T1146] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.206117][ T1146] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.343494][ T1146] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.965765][T10495] chnl_net:caif_netlink_parms(): no params data found
[  463.320681][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  463.332286][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  463.349178][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  463.359691][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  463.376903][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  463.388590][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  463.637025][T10495] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.644267][T10495] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.667065][T10495] bridge_slave_0: entered allmulticast mode
[  463.674634][T10495] bridge_slave_0: entered promiscuous mode
[  463.756776][T10495] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.764017][T10495] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.776693][T10495] bridge_slave_1: entered allmulticast mode
[  463.784198][T10495] bridge_slave_1: entered promiscuous mode
[  463.990023][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.999267][ T5779] Bluetooth: hci0: command tx timeout
[  464.102024][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.204175][T10495] team0: Port device team_slave_0 added
[  464.354383][T10495] team0: Port device team_slave_1 added
[  464.652419][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.659573][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.686089][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.756109][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.776469][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.802437][    C0] vkms_vblank_simulate: vblank timer overrun
[  464.889015][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.375983][ T1146] hsr_slave_0: left promiscuous mode
[  465.417300][ T1146] hsr_slave_1: left promiscuous mode
[  465.435788][ T1146] bridge_slave_1: left allmulticast mode
[  465.442267][ T5779] Bluetooth: hci3: command tx timeout
[  465.468796][ T1146] bridge_slave_1: left promiscuous mode
[  465.485206][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.524830][ T1146] bridge_slave_0: left allmulticast mode
[  465.557875][ T1146] bridge_slave_0: left promiscuous mode
[  465.578338][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.729726][ T1146] veth1_macvtap: left promiscuous mode
[  465.735415][ T1146] veth0_macvtap: left promiscuous mode
[  465.763045][ T1146] veth1_vlan: left promiscuous mode
[  465.771606][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  465.782059][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  465.791056][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  465.799575][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  465.807519][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  465.814949][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  465.872641][ T1146] veth0_vlan: left promiscuous mode
[  466.078170][ T5781] Bluetooth: hci0: command tx timeout
[  467.130473][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  467.181121][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  467.231151][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.285313][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  467.516887][ T5781] Bluetooth: hci3: command tx timeout
[  467.662582][ T1146] bond0 (unregistering): Released all slaves
[  467.745985][T10495] hsr_slave_0: entered promiscuous mode
[  467.753008][T10495] hsr_slave_1: entered promiscuous mode
[  467.919716][ T5781] Bluetooth: hci2: command tx timeout
[  468.214877][ T5781] Bluetooth: hci0: command tx timeout
[  469.489776][T10524] chnl_net:caif_netlink_parms(): no params data found
[  469.615295][ T5781] Bluetooth: hci3: command tx timeout
[  469.996731][ T5781] Bluetooth: hci2: command tx timeout
[  470.166697][T10524] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.173972][T10524] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.184855][T10524] bridge_slave_0: entered allmulticast mode
[  470.196516][T10524] bridge_slave_0: entered promiscuous mode
[  470.207907][T10524] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.215096][T10524] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.226012][T10524] bridge_slave_1: entered allmulticast mode
[  470.234418][T10524] bridge_slave_1: entered promiscuous mode
[  470.241142][ T5781] Bluetooth: hci0: command tx timeout
[  470.304021][ T1146] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.431316][ T1146] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.480445][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.535745][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.584829][ T1146] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.633530][T10571] chnl_net:caif_netlink_parms(): no params data found
[  470.655584][ T1146] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.712738][T10524] team0: Port device team_slave_0 added
[  470.785293][T10524] team0: Port device team_slave_1 added
[  470.957200][T10524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.983670][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.010581][T10524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.078149][T10524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.085258][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.119730][T10524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.249449][T10495] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  471.293528][T10571] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.309362][T10571] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.325242][T10571] bridge_slave_0: entered allmulticast mode
[  471.334543][T10571] bridge_slave_0: entered promiscuous mode
[  471.368591][T10495] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  471.399388][T10495] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  471.431384][T10571] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.446880][T10571] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.454297][T10571] bridge_slave_1: entered allmulticast mode
[  471.467521][T10571] bridge_slave_1: entered promiscuous mode
[  471.536680][T10495] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  471.571663][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  471.588607][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  471.597780][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  471.622048][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  471.641269][T10524] hsr_slave_0: entered promiscuous mode
[  471.652023][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  471.660889][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  471.673922][T10524] hsr_slave_1: entered promiscuous mode
[  471.679717][ T5781] Bluetooth: hci3: command tx timeout
[  471.686850][T10524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  471.694447][T10524] Cannot create hsr debugfs directory
[  471.801907][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.824003][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.030154][T10571] team0: Port device team_slave_0 added
[  472.076611][ T5781] Bluetooth: hci2: command tx timeout
[  472.132023][T10571] team0: Port device team_slave_1 added
[  472.333529][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.345181][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.371816][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.386273][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.393739][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.423010][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.805586][T10571] hsr_slave_0: entered promiscuous mode
[  472.813713][T10571] hsr_slave_1: entered promiscuous mode
[  472.820333][T10571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.832987][T10571] Cannot create hsr debugfs directory
[  473.681102][T10630] chnl_net:caif_netlink_parms(): no params data found
[  473.728131][T10495] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.766950][ T5781] Bluetooth: hci1: command tx timeout
[  473.787228][ T1146] hsr_slave_0: left promiscuous mode
[  473.795470][ T1146] hsr_slave_1: left promiscuous mode
[  473.806441][ T1146] bridge_slave_1: left allmulticast mode
[  473.812114][ T1146] bridge_slave_1: left promiscuous mode
[  473.819560][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.829011][ T1146] bridge_slave_0: left allmulticast mode
[  473.834936][ T1146] bridge_slave_0: left promiscuous mode
[  473.840977][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.865970][ T1146] veth1_macvtap: left promiscuous mode
[  473.871647][ T1146] veth0_macvtap: left promiscuous mode
[  473.877439][ T1146] veth1_vlan: left promiscuous mode
[  473.882796][ T1146] veth0_vlan: left promiscuous mode
[  474.156762][ T5781] Bluetooth: hci2: command tx timeout
[  474.526304][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  474.585480][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  474.641345][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.697726][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  475.047810][ T1146] bond0 (unregistering): Released all slaves
[  475.174952][T10495] 8021q: adding VLAN 0 to HW filter on device team0
[  475.228115][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.235311][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.359080][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.366280][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.627839][T10630] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.635158][T10630] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.652891][T10630] bridge_slave_0: entered allmulticast mode
[  475.661295][T10630] bridge_slave_0: entered promiscuous mode
[  475.670787][T10630] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.679758][T10630] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.703710][T10630] bridge_slave_1: entered allmulticast mode
[  475.727105][T10630] bridge_slave_1: entered promiscuous mode
[  475.734903][T10524] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  475.777374][T10524] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  475.795763][T10524] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  475.815145][T10524] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  475.836594][ T5781] Bluetooth: hci1: command tx timeout
[  475.991966][T10630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.044450][T10630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.204375][T10630] team0: Port device team_slave_0 added
[  476.225743][T10630] team0: Port device team_slave_1 added
[  476.422038][T10630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.451362][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.487712][T10630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.510117][T10630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.525390][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.557997][T10630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.759750][T10495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.779008][T10630] hsr_slave_0: entered promiscuous mode
[  476.798962][T10630] hsr_slave_1: entered promiscuous mode
[  476.817580][T10630] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.825211][T10630] Cannot create hsr debugfs directory
[  477.021220][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.125495][T10571] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  477.168109][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.242396][T10571] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  477.313038][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.332876][T10571] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  477.346204][T10571] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  477.371517][T10524] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.430280][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.481576][T10524] 8021q: adding VLAN 0 to HW filter on device team0
[  477.555791][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.563013][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.801548][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.808827][ T4838] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.923945][ T5781] Bluetooth: hci1: command tx timeout
[  477.948371][T10495] veth0_vlan: entered promiscuous mode
[  478.284805][T10495] veth1_vlan: entered promiscuous mode
[  478.612683][T10571] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.725918][T10630] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  478.757913][T10495] veth0_macvtap: entered promiscuous mode
[  478.790160][T10630] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  478.861292][T10495] veth1_macvtap: entered promiscuous mode
[  478.868630][T10630] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  478.881596][T10630] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  478.900733][T10571] 8021q: adding VLAN 0 to HW filter on device team0
[  478.943763][T10524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.963153][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.970346][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.029451][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.036717][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.090721][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.101345][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.115023][T10495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.220912][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.246161][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.257763][T10495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.324702][T10495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.343298][T10495] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.354678][T10495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.366586][T10495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.685919][T10630] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.772540][ T1146] hsr_slave_0: left promiscuous mode
[  479.783067][ T1146] hsr_slave_1: left promiscuous mode
[  479.793521][ T1146] bridge_slave_1: left allmulticast mode
[  479.800286][ T1146] bridge_slave_1: left promiscuous mode
[  479.806072][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.817059][ T1146] bridge_slave_0: left allmulticast mode
[  479.822752][ T1146] bridge_slave_0: left promiscuous mode
[  479.828771][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.874919][ T1146] veth1_macvtap: left promiscuous mode
[  479.881745][ T1146] veth0_macvtap: left promiscuous mode
[  479.889174][ T1146] veth1_vlan: left promiscuous mode
[  479.894825][ T1146] veth0_vlan: left promiscuous mode
[  479.997139][ T5781] Bluetooth: hci1: command tx timeout
[  480.551511][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  480.603163][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  480.660485][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.714624][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  481.069155][ T1146] bond0 (unregistering): Released all slaves
[  481.139671][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.162754][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.172723][T10630] 8021q: adding VLAN 0 to HW filter on device team0
[  481.250449][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.257666][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.291072][T10524] veth0_vlan: entered promiscuous mode
[  481.350826][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.360815][T10571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.369391][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.383463][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.390719][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.425573][T10524] veth1_vlan: entered promiscuous mode
[  482.504240][T10524] veth0_macvtap: entered promiscuous mode
[  482.543131][T10524] veth1_macvtap: entered promiscuous mode
[  482.565239][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.576727][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.587422][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.598251][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.630067][T10524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.674883][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.716228][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.741350][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.780906][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.827842][T10524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.860018][T10524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.869199][T10524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.923105][T10524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.935704][T10524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.358439][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.408433][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.552748][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.603460][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.614977][T10630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.813531][T10571] veth0_vlan: entered promiscuous mode
[  483.932728][T10571] veth1_vlan: entered promiscuous mode
[  484.043139][T10630] veth0_vlan: entered promiscuous mode
[  484.138665][T10630] veth1_vlan: entered promiscuous mode
[  484.248608][T10571] veth0_macvtap: entered promiscuous mode
[  484.324654][T10571] veth1_macvtap: entered promiscuous mode
[  484.454750][T10630] veth0_macvtap: entered promiscuous mode
[  484.512683][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.544577][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.576642][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.624369][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.684962][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  484.726563][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.754917][T10571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  484.793600][T10630] veth1_macvtap: entered promiscuous mode
[  484.842840][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.872478][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.901427][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.933667][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  484.966592][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  484.993228][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.034123][T10571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.072422][T10571] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.081284][T10571] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.090545][T10571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.101179][T10571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.149680][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.162671][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.184065][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.195866][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.216185][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.232169][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.242293][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.253142][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.286299][T10630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.368951][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.380178][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.403027][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.422673][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.432978][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.444708][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.455180][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.465760][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.485405][T10630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.572328][T10630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.581301][T10630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.592196][T10630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.603046][T10630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.674126][ T6442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.712322][ T6442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.767787][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.789398][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.896484][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.926630][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.000765][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.045442][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.850140][T10791] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  489.549327][T10880] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  491.195327][T10889] jffs2: notice: (10889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  491.311233][   T28] kauditd_printk_skb: 60 callbacks suppressed
[  491.311343][   T28] audit: type=1326 audit(1791691989.449:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6f9e1d9 code=0x7fc00000
[  491.433429][   T28] audit: type=1326 audit(1791691989.449:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efee6f9e1d9 code=0x7fc00000
[  491.537195][   T28] audit: type=1326 audit(1791691989.449:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6f9e1d9 code=0x7fc00000
[  491.623032][   T28] audit: type=1326 audit(1791691989.449:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6f9e1d9 code=0x7fc00000
[  491.703626][   T28] audit: type=1326 audit(1791691989.449:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6f9e1d9 code=0x7fc00000
[  491.796730][   T28] audit: type=1326 audit(1791691989.449:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6f9e1d9 code=0x7fc00000
[  491.899149][   T28] audit: type=1326 audit(1791691989.449:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee6f9e1d9 code=0x7fc00000
[  492.705585][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.113434][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.330419][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.630611][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.833738][T10935] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1006'.
[  494.852646][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  494.863367][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  494.872134][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  494.884361][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  494.898439][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  494.905944][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  496.956511][   T51] Bluetooth: hci3: command tx timeout
[  498.264015][T10946] chnl_net:caif_netlink_parms(): no params data found
[  498.383600][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'.
[  498.536996][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'.
[  499.036571][   T51] Bluetooth: hci3: command tx timeout
[  499.499210][   T12] hsr_slave_0: left promiscuous mode
[  499.588235][   T12] hsr_slave_1: left promiscuous mode
[  499.675098][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.713706][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.785534][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.824952][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.860539][   T12] bridge_slave_1: left allmulticast mode
[  499.866269][   T12] bridge_slave_1: left promiscuous mode
[  499.924665][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.994741][   T12] bridge_slave_0: left allmulticast mode
[  500.025457][   T12] bridge_slave_0: left promiscuous mode
[  500.062355][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.303070][   T12] veth1_macvtap: left promiscuous mode
[  500.329973][   T12] veth0_macvtap: left promiscuous mode
[  500.335715][   T12] veth1_vlan: left promiscuous mode
[  500.402519][   T12] veth0_vlan: left promiscuous mode
[  501.116584][   T51] Bluetooth: hci3: command tx timeout
[  501.276770][ T5848] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  501.483687][ T5848] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  501.493782][ T5848] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  501.520542][ T5848] usb 6-1: string descriptor 0 read error: -22
[  501.529682][ T5848] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  501.543587][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.592334][ T5848] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null))
[  501.607952][ T5848] etas_es58x 6-1:1.0: could not retrieve the product info string
[  501.688325][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  501.914238][ T6315] IPVS: starting estimator thread 0...
[  502.062806][T11095] IPVS: using max 16 ests per chain, 38400 per kthread
[  503.196423][   T51] Bluetooth: hci3: command tx timeout
[  504.304815][   T12] team0 (unregistering): Port device team_slave_1 removed
[  504.457472][   T12] team0 (unregistering): Port device team_slave_0 removed
[  504.572813][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  504.703463][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.174037][T11165] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  507.180720][T11165] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  507.188817][T11165] vhci_hcd vhci_hcd.0: Device attached
[  507.396860][ T6591] vhci_hcd: vhci_device speed not set
[  507.522114][ T6591] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  507.833590][T11166] vhci_hcd: connection reset by peer
[  507.887118][T10844] vhci_hcd: stop threads
[  507.916039][T10844] vhci_hcd: release socket
[  507.974261][T10844] vhci_hcd: disconnect device
[  508.375755][   T12] bond0 (unregistering): Released all slaves
[  508.462490][T10946] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.471667][T10946] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.479675][T10946] bridge_slave_0: entered allmulticast mode
[  508.490658][T10946] bridge_slave_0: entered promiscuous mode
[  508.633968][T10946] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.686670][T10946] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.693996][T10946] bridge_slave_1: entered allmulticast mode
[  508.747813][T10946] bridge_slave_1: entered promiscuous mode
[  508.859374][ T5848] usb 6-1: USB disconnect, device number 4
[  508.867803][ T5848] etas_es58x 6-1:1.0: Disconnecting (null) (null)
[  508.875325][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.008694][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.199047][T10946] team0: Port device team_slave_0 added
[  509.274345][T10946] team0: Port device team_slave_1 added
[  509.333808][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.344846][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.376745][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.399526][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.409505][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.483226][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.702240][T10946] hsr_slave_0: entered promiscuous mode
[  509.724624][T10946] hsr_slave_1: entered promiscuous mode
[  509.749433][T10946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  509.770544][T10946] Cannot create hsr debugfs directory
[  511.601680][T11213] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  511.608395][T11213] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  511.616571][T11213] vhci_hcd vhci_hcd.0: Device attached
[  511.799839][T11218] vhci_hcd: connection closed
[  511.806801][T10831] vhci_hcd: stop threads
[  511.913006][ T5764] vhci_hcd: vhci_device speed not set
[  512.003317][T10831] vhci_hcd: release socket
[  512.103360][T10831] vhci_hcd: disconnect device
[  512.221871][ T5764] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  512.327643][ T5764] usb 45-1: enqueue for inactive port 0
[  512.456706][ T5764] vhci_hcd: vhci_device speed not set
[  512.747350][ T6591] vhci_hcd: vhci_device speed not set
[  512.856731][   T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  513.069685][   T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  513.087663][   T27] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  513.107384][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.147499][   T27] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  513.174302][T10946] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  513.186928][   T27] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81
[  513.210306][   T27] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1
[  513.234277][T10946] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  513.247935][   T27] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  513.260881][   T27] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  513.273153][T10946] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  513.288376][   T27] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  513.314465][T10946] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  513.322149][   T27] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  513.354284][   T27] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  513.616320][   T27] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  515.178181][T11267] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  515.184872][T11267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  515.192575][T11267] vhci_hcd vhci_hcd.0: Device attached
[  515.348351][T11268] vhci_hcd: connection closed
[  515.365078][   T12] vhci_hcd: stop threads
[  515.456794][   T27] vhci_hcd: vhci_device speed not set
[  515.500100][   T12] vhci_hcd: release socket
[  515.588716][   T12] vhci_hcd: disconnect device
[  515.626955][   T27] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  515.770395][   T27] usb 43-1: enqueue for inactive port 0
[  515.863181][T10946] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.913600][T10946] 8021q: adding VLAN 0 to HW filter on device team0
[  515.936771][   T27] vhci_hcd: vhci_device speed not set
[  515.959463][T10850] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.966701][T10850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.021084][ T6315] usb 1-1: USB disconnect, device number 7
[  516.034574][T11272] tipc: Started in network mode
[  516.043183][ T6315] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  516.083195][T11272] tipc: Node identity 4, cluster identity 4711
[  516.105383][ T6315] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  516.138581][ T6315] keyspan 1-1:1.0: device disconnected
[  516.147681][T11272] tipc: Node number set to 4
[  516.185955][T10850] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.193266][T10850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.231847][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.379880][   T28] audit: type=1400 audit(1791692015.529:1165): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=11312 comm="syz.0.1065"
[  518.220388][T11320] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  518.227047][T11320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  518.240557][T11320] vhci_hcd vhci_hcd.0: Device attached
[  518.391281][T11321] vhci_hcd: connection closed
[  518.421187][T10851] vhci_hcd: stop threads
[  518.508334][T10851] vhci_hcd: release socket
[  518.574219][T10851] vhci_hcd: disconnect device
[  518.597043][   T27] vhci_hcd: vhci_device speed not set
[  518.687365][T10946] veth0_vlan: entered promiscuous mode
[  519.094069][T10946] veth1_vlan: entered promiscuous mode
[  519.309706][T10946] veth0_macvtap: entered promiscuous mode
[  519.376584][T10946] veth1_macvtap: entered promiscuous mode
[  519.652296][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.735170][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.766276][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.806541][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.835563][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.856988][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.886699][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.927348][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.958513][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.031729][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.096458][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.136479][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.177446][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.200140][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.216467][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.227753][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.239580][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.251714][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.295970][T10946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.327003][T10946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.335789][T10946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.368117][T10946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.718046][T10831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.756513][T10831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.766544][   T28] audit: type=1326 audit(1791692018.899:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa501f9e1d9 code=0x7ffc0000
[  520.888553][T10846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.896164][   T28] audit: type=1326 audit(1791692018.899:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa501f9e1d9 code=0x7ffc0000
[  520.921419][   T28] audit: type=1326 audit(1791692018.899:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  520.947477][   T28] audit: type=1326 audit(1791692018.899:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  520.975953][T10846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.987753][   T28] audit: type=1326 audit(1791692018.899:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  522.657960][   T28] audit: type=1326 audit(1791692018.899:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  522.780328][T11380] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  522.787024][T11380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  522.796004][T11380] vhci_hcd vhci_hcd.0: Device attached
[  522.845340][   T28] audit: type=1326 audit(1791692018.899:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  522.974894][T11381] vhci_hcd: connection closed
[  523.010069][ T4838] vhci_hcd: stop threads
[  523.040996][ T5818] vhci_hcd: vhci_device speed not set
[  523.180060][ T4838] vhci_hcd: release socket
[  523.226703][ T5818] usb 43-1: new full-speed USB device number 5 using vhci_hcd
[  523.260884][ T4838] vhci_hcd: disconnect device
[  523.351929][   T28] audit: type=1326 audit(1791692018.899:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.477533][   T28] audit: type=1326 audit(1791692018.899:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.502938][   T28] audit: type=1326 audit(1791692018.899:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.527270][   T28] audit: type=1326 audit(1791692018.899:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.556910][   T28] audit: type=1326 audit(1791692018.899:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.581240][   T28] audit: type=1326 audit(1791692018.899:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.608619][   T28] audit: type=1326 audit(1791692018.899:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.686796][   T28] audit: type=1326 audit(1791692018.899:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.0.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa501f9de6b code=0x7ffc0000
[  523.926916][T10718] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  524.214633][T10718] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  524.360377][T10718] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  524.560996][T10718] usb 7-1: string descriptor 0 read error: -22
[  524.634258][T10718] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  524.707004][T10718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.792994][T10718] etas_es58x 7-1:1.0: Starting (null) (null) (Serial Number (null))
[  524.836129][T10718] etas_es58x 7-1:1.0: could not retrieve the product info string
[  525.158851][ T6181] IPVS: starting estimator thread 0...
[  525.277406][T11415] IPVS: using max 16 ests per chain, 38400 per kthread
[  527.499451][T10718] usb 7-1: USB disconnect, device number 2
[  527.608187][T10718] etas_es58x 7-1:1.0: Disconnecting (null) (null)
[  527.696598][T11432] netlink: 'syz.6.1089': attribute type 1 has an invalid length.
[  527.744369][T11432] 8021q: adding VLAN 0 to HW filter on device bond1
[  527.876697][T11439] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  527.883387][T11439] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  527.892659][T11439] vhci_hcd vhci_hcd.0: Device attached
[  528.798294][T11440] vhci_hcd: connection reset by peer
[  528.825856][T11441] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  529.070280][   T12] vhci_hcd: stop threads
[  529.118236][   T12] vhci_hcd: release socket
[  529.146609][   T12] vhci_hcd: disconnect device
[  529.207056][ T5818] vhci_hcd: vhci_device speed not set
[  529.258918][T11436] bond1: (slave veth3): Enslaving as an active interface with a down link
[  529.325832][T11432] bond1: (slave dummy0): making interface the new active one
[  529.360956][T11432] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  532.864737][T11502] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  532.871417][T11502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  532.879240][T11502] vhci_hcd vhci_hcd.0: Device attached
[  533.229096][T11503] vhci_hcd: connection closed
[  533.230642][   T34] vhci_hcd: stop threads
[  533.547934][   T34] vhci_hcd: release socket
[  533.553374][   T34] vhci_hcd: disconnect device
[  533.626574][ T6181] vhci_hcd: vhci_device speed not set
[  533.801813][T11514] netlink: 'syz.6.1106': attribute type 1 has an invalid length.
[  534.096623][   T27] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  535.763243][   T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.084877][   T27] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  536.586539][   T27] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  536.659865][   T27] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  536.704749][T11557] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  536.711402][T11557] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  536.719999][T11557] vhci_hcd vhci_hcd.0: Device attached
[  536.733104][T11562] vhci_hcd: connection closed
[  536.737638][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.738856][T10838] vhci_hcd: stop threads
[  536.838491][T10838] vhci_hcd: release socket
[  536.844981][T10838] vhci_hcd: disconnect device
[  536.886524][   T27] cxacru_cm: 17 callbacks suppressed
[  536.886663][   T27] cxacru 7-1:1.0: send of cm 0x90 failed (-71)
[  536.938071][T11570] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  536.976473][   T27] usb 7-1: USB disconnect, device number 3
[  536.991532][T11570] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  540.723329][T11596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.732153][T11596] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.818914][T11596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.826666][T11596] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.726728][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  542.136405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  548.403090][   T51] block nbd0: Receive control failed (result -107)
[  548.429929][T11667] nbd0: detected capacity change from 0 to 18
[  548.559840][   T10] block nbd0: Dead connection, failed to find a fallback
[  548.569047][   T10] block nbd0: shutting down sockets
[  548.574922][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.585683][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.597450][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.607090][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.617427][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.626925][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.635255][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.644483][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.652988][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.662495][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.671008][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.683473][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.692793][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.702055][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.710223][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.719740][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.727758][T11669] ldm_validate_partition_table(): Disk read failed.
[  548.734688][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.743886][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.752601][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  548.761780][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  548.770212][T11669] Dev nbd0: unable to read RDB block 0
[  548.776561][T11669]  nbd0: unable to read partition table
[  548.782410][T11669] nbd0: partition table beyond EOD, truncated
[  548.815278][T11667] ldm_validate_partition_table(): Disk read failed.
[  548.867243][T11667] Dev nbd0: unable to read RDB block 0
[  548.873763][T11667]  nbd0: unable to read partition table
[  548.879787][T11667] nbd0: partition table beyond EOD, truncated
[  548.889276][T11669] ldm_validate_partition_table(): Disk read failed.
[  548.898430][T11669] Dev nbd0: unable to read RDB block 0
[  548.904383][T11669]  nbd0: unable to read partition table
[  548.911756][T11669] nbd0: partition table beyond EOD, truncated
[  549.057405][T10825] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.391537][T10825] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.623650][T10825] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.960153][T10825] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.290298][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  551.302520][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  551.317426][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  551.326199][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  551.339272][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  551.347078][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  551.381877][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  551.395983][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  551.403875][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  551.412485][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  551.420646][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  551.428699][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  552.509305][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  552.523261][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  552.532764][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  552.545752][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  552.554085][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  552.561927][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  553.054805][T11710] chnl_net:caif_netlink_parms(): no params data found
[  553.463639][T10825] hsr_slave_0: left promiscuous mode
[  553.483425][T10825] hsr_slave_1: left promiscuous mode
[  553.491505][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.516158][T10825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.526608][ T5781] Bluetooth: hci0: command tx timeout
[  553.547597][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.555115][T10825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.578911][T10825] bridge_slave_1: left allmulticast mode
[  553.584631][T10825] bridge_slave_1: left promiscuous mode
[  553.606285][T10825] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.626118][T10825] bridge_slave_0: left allmulticast mode
[  553.636062][T10825] bridge_slave_0: left promiscuous mode
[  553.651336][T10825] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.725148][T10825] veth1_macvtap: left promiscuous mode
[  553.732859][T10825] veth0_macvtap: left promiscuous mode
[  553.744756][T10825] veth1_vlan: left promiscuous mode
[  553.750348][T10825] veth0_vlan: left promiscuous mode
[  554.029397][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  554.042130][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  554.053359][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  554.064962][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  554.073303][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  554.083662][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  554.648445][ T5781] Bluetooth: hci3: command tx timeout
[  554.714063][T10825] team0 (unregistering): Port device team_slave_1 removed
[  554.770551][T10825] team0 (unregistering): Port device team_slave_0 removed
[  554.827346][T10825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.899340][T10825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.282600][T10825] bond0 (unregistering): Released all slaves
[  555.429821][T11710] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.443254][T11710] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.455839][T11710] bridge_slave_0: entered allmulticast mode
[  555.470289][T11710] bridge_slave_0: entered promiscuous mode
[  555.518067][T11710] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.525283][T11710] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.534421][T11710] bridge_slave_1: entered allmulticast mode
[  555.542850][T11710] bridge_slave_1: entered promiscuous mode
[  555.600429][ T5781] Bluetooth: hci0: command tx timeout
[  555.654707][T11710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.692941][T11710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.902583][T11710] team0: Port device team_slave_0 added
[  555.964221][T11710] team0: Port device team_slave_1 added
[  556.237115][ T5781] Bluetooth: hci1: command tx timeout
[  556.265216][T11733] chnl_net:caif_netlink_parms(): no params data found
[  556.346169][T11710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.366473][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.397800][T11710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.474405][T11710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.482266][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.508463][T11710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.716833][ T5781] Bluetooth: hci3: command tx timeout
[  556.755951][T11710] hsr_slave_0: entered promiscuous mode
[  556.785758][T11710] hsr_slave_1: entered promiscuous mode
[  556.804558][T11710] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  556.832574][T11710] Cannot create hsr debugfs directory
[  556.850476][T11765] chnl_net:caif_netlink_parms(): no params data found
[  556.872252][T11733] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.896651][T11733] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.904001][T11733] bridge_slave_0: entered allmulticast mode
[  556.920785][T11733] bridge_slave_0: entered promiscuous mode
[  557.009346][T11733] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.026621][T11733] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.033957][T11733] bridge_slave_1: entered allmulticast mode
[  557.059117][T11733] bridge_slave_1: entered promiscuous mode
[  557.151765][T10825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.361915][T10825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.419476][T11733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.442643][T11733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.509837][T10825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.676689][ T5781] Bluetooth: hci0: command tx timeout
[  558.074517][T10825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.133463][T11765] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.148021][T11765] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.155431][T11765] bridge_slave_0: entered allmulticast mode
[  558.163872][T11765] bridge_slave_0: entered promiscuous mode
[  558.182202][T11765] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.189573][T11765] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.197759][T11765] bridge_slave_1: entered allmulticast mode
[  558.205364][T11765] bridge_slave_1: entered promiscuous mode
[  558.222547][T11733] team0: Port device team_slave_0 added
[  558.279002][T11733] team0: Port device team_slave_1 added
[  558.326665][ T5781] Bluetooth: hci1: command tx timeout
[  558.432260][T11765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  558.481648][T11733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.500076][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.537160][T11733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  558.574864][T11765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  558.618613][T11733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  558.629798][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.686409][T11733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.796619][ T5781] Bluetooth: hci3: command tx timeout
[  558.885314][T11733] hsr_slave_0: entered promiscuous mode
[  558.902294][T11733] hsr_slave_1: entered promiscuous mode
[  558.910972][T11733] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  558.923461][T11733] Cannot create hsr debugfs directory
[  558.941834][T11765] team0: Port device team_slave_0 added
[  558.960262][T11765] team0: Port device team_slave_1 added
[  559.034232][T10825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.293263][T10825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.415687][T11765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  559.439826][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  559.491323][T11765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.518262][T11765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  559.525476][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  559.557037][T11765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  559.624417][T10825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.746270][T10825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.757184][ T5781] Bluetooth: hci0: command tx timeout
[  559.798969][T11765] hsr_slave_0: entered promiscuous mode
[  559.805989][T11765] hsr_slave_1: entered promiscuous mode
[  559.815997][T11765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  559.824239][T11765] Cannot create hsr debugfs directory
[  560.077588][T11733] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.247154][T11733] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.397178][ T5781] Bluetooth: hci1: command tx timeout
[  560.453060][T11733] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.597900][T11864] input: syz1 as /devices/virtual/input/input9
[  560.663678][T11864] db_root: cannot open: ./my_
[  560.722587][T11733] bond0: (slave netdevsim0): Releasing backup interface
[  560.737212][T11733] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.876773][ T5781] Bluetooth: hci3: command tx timeout
[  561.251152][T11710] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  561.353008][T11710] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  561.377878][T11710] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  561.551365][T11882] jffs2: notice: (11882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  561.605474][T11710] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  561.664162][T11885] Bluetooth: ISO socket layer initialized
[  562.224755][T11733] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  562.242832][T11733] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  562.277122][T11733] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  562.345171][T11710] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.416492][T11733] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  562.477099][ T5781] Bluetooth: hci1: command tx timeout
[  562.503137][T11710] 8021q: adding VLAN 0 to HW filter on device team0
[  562.662005][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.669250][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  562.760164][T10831] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.767428][T10831] bridge0: port 2(bridge_slave_1) entered forwarding state
[  562.999479][T11765] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  563.040620][T11765] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  563.075038][T11765] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  563.125968][T11765] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  563.139432][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.220663][T10825] hsr_slave_0: left promiscuous mode
[  563.238718][T10825] hsr_slave_1: left promiscuous mode
[  563.252118][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.274944][T10825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.283726][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.292040][T10825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.305138][T10825] bridge_slave_1: left allmulticast mode
[  563.311485][T10825] bridge_slave_1: left promiscuous mode
[  563.317910][T10825] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.328616][T10825] bridge_slave_0: left allmulticast mode
[  563.335960][T10825] bridge_slave_0: left promiscuous mode
[  563.342205][T10825] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.362132][T10825] hsr_slave_0: left promiscuous mode
[  563.373199][T10825] hsr_slave_1: left promiscuous mode
[  563.387670][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.395147][T10825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.405069][T10825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.413044][T10825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.421338][T10825] bridge_slave_1: left allmulticast mode
[  563.427402][T10825] bridge_slave_1: left promiscuous mode
[  563.433174][T10825] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.453515][T10825] bridge_slave_0: left allmulticast mode
[  563.464155][T10825] bridge_slave_0: left promiscuous mode
[  563.470629][T10825] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.676960][T10825] veth1_macvtap: left promiscuous mode
[  563.682571][T10825] veth0_macvtap: left promiscuous mode
[  563.738203][T10825] veth1_vlan: left promiscuous mode
[  563.749589][T10825] veth0_vlan: left promiscuous mode
[  563.759797][T10825] veth1_macvtap: left promiscuous mode
[  563.774137][T10825] veth0_macvtap: left promiscuous mode
[  563.783299][T10825] veth1_vlan: left promiscuous mode
[  563.792513][T10825] veth0_vlan: left promiscuous mode
[  563.942438][T11920] binder: 11919:11920 ioctl c018620c 200000000200 returned -1
[  564.732779][T10825] team0 (unregistering): Port device team_slave_1 removed
[  564.791120][T10825] team0 (unregistering): Port device team_slave_0 removed
[  564.853499][T10825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  564.911919][T10825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  565.336831][T10825] bond0 (unregistering): Released all slaves
[  565.986631][T10825] team0 (unregistering): Port device team_slave_1 removed
[  566.041044][T10825] team0 (unregistering): Port device team_slave_0 removed
[  566.095428][T10825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  566.148575][T10825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  566.724842][T10825] bond0 (unregistering): Released all slaves
[  567.069797][T11733] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.163352][T11733] 8021q: adding VLAN 0 to HW filter on device team0
[  567.221848][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.229193][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.292168][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.299396][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.454613][T11733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  567.569292][T11765] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.666160][T11765] 8021q: adding VLAN 0 to HW filter on device team0
[  567.714779][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.722056][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.739864][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.747130][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.866191][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.953610][T10825] IPVS: stop unused estimator thread 0...
[  568.078215][T11710] veth0_vlan: entered promiscuous mode
[  568.149028][T11710] veth1_vlan: entered promiscuous mode
[  568.205271][T11954] netlink: 'syz.6.1187': attribute type 4 has an invalid length.
[  568.251925][T11954] netlink: 'syz.6.1187': attribute type 4 has an invalid length.
[  568.273109][T11733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  568.360345][T11710] veth0_macvtap: entered promiscuous mode
[  568.383304][T11710] veth1_macvtap: entered promiscuous mode
[  568.453029][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.478400][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.495452][T11960] jffs2: notice: (11960) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  568.514669][T11710] batman_adv: batadv0: Interface activated: batadv_slave_0
[  568.529616][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.547184][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.578128][T11710] batman_adv: batadv0: Interface activated: batadv_slave_1
[  568.610513][T11710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.637063][T11710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.645854][T11710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.673532][T11710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.761779][T11765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  568.983677][T10825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.017095][T10825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.073469][ T4838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.123906][ T4838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.231032][T11733] veth0_vlan: entered promiscuous mode
[  569.276079][T11733] veth1_vlan: entered promiscuous mode
[  569.393787][T11733] veth0_macvtap: entered promiscuous mode
[  569.426217][T11733] veth1_macvtap: entered promiscuous mode
[  569.501935][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.537632][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.554477][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.567996][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.583226][T11733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  569.634523][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  569.646756][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.658899][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  569.669901][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.685006][T11733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  569.728370][T11733] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  569.743054][T11733] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  569.760957][T11733] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  569.773798][T11733] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  569.900520][T11765] veth0_vlan: entered promiscuous mode
[  569.912466][T11985] 
[  569.914858][T11985] ======================================================
[  569.921909][T11985] WARNING: possible circular locking dependency detected
[  569.928972][T11985] syzkaller #0 Not tainted
[  569.933428][T11985] ------------------------------------------------------
[  569.940476][T11985] syz.6.1192/11985 is trying to acquire lock:
[  569.946572][T11985] ffff88814e1cc0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390
[  569.953043][T11765] veth1_vlan: entered promiscuous mode
[  569.956096][T11985] 
[  569.956096][T11985] but task is already holding lock:
[  569.956105][T11985] ffff888020d38108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0
[  569.978643][T11985] 
[  569.978643][T11985] which lock already depends on the new lock.
[  569.978643][T11985] 
[  569.989104][T11985] 
[  569.989104][T11985] the existing dependency chain (in reverse order) is:
[  569.998153][T11985] 
[  569.998153][T11985] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}:
[  570.006388][T11985]        __mutex_lock+0x135/0xc80
[  570.011591][T11985]        bd_finish_claiming+0x229/0x3f0
[  570.017189][T11985]        blkdev_get_by_dev+0x469/0x610
[  570.022698][T11985]        bdev_open_by_dev+0x77/0x100
[  570.028065][T11985]        setup_bdev_super+0x59/0x660
[  570.033432][T11985]        mount_bdev+0x1ce/0x2c0
[  570.038371][T11985]        legacy_get_tree+0xea/0x180
[  570.043669][T11985]        vfs_get_tree+0x8c/0x280
[  570.045565][T11765] veth0_macvtap: entered promiscuous mode
[  570.048634][T11985]        do_new_mount+0x24a/0xa40
[  570.048660][T11985]        init_mount+0xde/0x130
[  570.064281][T11985]        do_mount_root+0x97/0x230
[  570.069403][T11985]        mount_root_generic+0x1a6/0x3e0
[  570.073153][T11765] veth1_macvtap: entered promiscuous mode
[  570.074978][T11985]        prepare_namespace+0xc2/0x100
[  570.086126][T11985]        kernel_init_freeable+0x41a/0x560
[  570.091906][T11985]        kernel_init+0x1d/0x1c0
[  570.096918][T11985]        ret_from_fork+0x48/0x80
[  570.101940][T11985]        ret_from_fork_asm+0x11/0x20
[  570.107314][T11985] 
[  570.107314][T11985] -> #3 (bdev_lock){+.+.}-{3:3}:
[  570.114539][T11985]        __mutex_lock+0x135/0xc80
[  570.119620][T11985]        bd_prepare_to_claim+0x1d9/0x4a0
[  570.125341][T11985]        truncate_bdev_range+0x4e/0x260
[  570.130943][T11985]        blkdev_common_ioctl+0x1c7a/0x2580
[  570.133858][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.136792][T11985]        blkdev_ioctl+0x512/0x730
[  570.136825][T11985]        __se_sys_ioctl+0xfd/0x170
[  570.136852][T11985]        do_syscall_64+0x55/0xb0
[  570.136872][T11985]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  570.147997][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.152396][T11985] 
[  570.152396][T11985] -> #2 (mapping.invalidate_lock){++++}-{3:3}
[  570.164325][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.168900][T11985] :
[  570.168907][T11985]        down_write+0x97/0x200
[  570.168939][T11985]        set_blocksize+0x247/0x4b0
[  570.168961][T11985]        sb_min_blocksize+0xbe/0x190
[  570.168982][T11985]        ext4_fill_super+0x6e7/0x6870
[  570.181218][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.187040][T11985]        get_tree_bdev+0x3e5/0x520
[  570.187069][T11985]        vfs_get_tree+0x8c/0x280
[  570.187092][T11985]        do_new_mount+0x24a/0xa40
[  570.187112][T11985]        init_mount+0xde/0x130
[  570.187137][T11985]        do_mount_root+0x97/0x230
[  570.187161][T11985]        mount_root_generic+0x1a6/0x3e0
[  570.187185][T11985]        prepare_namespace+0xc2/0x100
[  570.187210][T11985]        kernel_init_freeable+0x41a/0x560
[  570.201678][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.204872][T11985]        kernel_init+0x1d/0x1c0
[  570.211290][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.215301][T11985]        ret_from_fork+0x48/0x80
[  570.225939][T11765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.230529][T11985]        ret_from_fork_asm+0x11/0x20
[  570.230564][T11985] 
[  570.230564][T11985] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  570.230602][T11985]        down_write+0x97/0x200
[  570.230628][T11985]        set_blocksize+0x1ff/0x4b0
[  570.230650][T11985]        sb_min_blocksize+0xbe/0x190
[  570.230671][T11985]        ext4_fill_super+0x6e7/0x6870
[  570.252123][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.255626][T11985]        get_tree_bdev+0x3e5/0x520
[  570.261903][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.266691][T11985]        vfs_get_tree+0x8c/0x280
[  570.266719][T11985]        do_new_mount+0x24a/0xa40
[  570.266741][T11985]        init_mount+0xde/0x130
[  570.266765][T11985]        do_mount_root+0x97/0x230
[  570.266789][T11985]        mount_root_generic+0x1a6/0x3e0
[  570.308378][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.309856][T11985]        prepare_namespace+0xc2/0x100
[  570.309890][T11985]        kernel_init_freeable+0x41a/0x560
[  570.320563][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.323762][T11985]        kernel_init+0x1d/0x1c0
[  570.337708][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.339034][T11985]        ret_from_fork+0x48/0x80
[  570.355869][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.360004][T11985]        ret_from_fork_asm+0x11/0x20
[  570.360041][T11985] 
[  570.360041][T11985] -> #0 (&type->s_umount_key#32){++++}-{3:3}:
[  570.360079][T11985]        __lock_acquire+0x3a07/0x7eb0
[  570.391820][T11765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.395284][T11985]        lock_acquire+0x19e/0x420
[  570.395318][T11985]        down_read+0x46/0x2e0
[  570.448333][T11765] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.456720][T11985]        super_lock+0x189/0x390
[  570.456749][T11985]        fs_bdev_mark_dead+0xad/0x1f0
[  570.456771][T11985]        bdev_mark_dead+0x83/0x1a0
[  570.477510][T11765] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.483010][T11985]        blk_report_disk_dead+0x21c/0x3e0
[  570.483049][T11985]        del_gendisk+0x2cb/0x8f0
[  570.501865][T11765] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.506314][T11985]        sd_remove+0x8d/0x100
[  570.524532][T11765] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.525650][T11985]        device_release_driver_internal+0x458/0x6f0
[  570.565463][T11985]        bus_remove_device+0x43b/0x520
[  570.571038][T11985]        device_del+0x51f/0x910
[  570.575971][T11985]        __scsi_remove_device+0x1a2/0x390
[  570.581877][T11985]        scsi_forget_host+0xd0/0x110
[  570.587245][T11985]        scsi_remove_host+0x1b3/0x730
[  570.592699][T11985]        virtscsi_remove+0x130/0x1a0
[  570.598037][T11985]        virtio_dev_remove+0x96/0x1a0
[  570.603506][T11985]        device_release_driver_internal+0x408/0x6f0
[  570.610148][T11985]        bus_remove_device+0x43b/0x520
[  570.615681][T11985]        device_del+0x51f/0x910
[  570.620582][T11985]        device_unregister+0x20/0xc0
[  570.625913][T11985]        unregister_virtio_device+0x37/0x60
[  570.631853][T11985]        virtio_pci_remove+0x7f/0xf0
[  570.637185][T11985]        pci_device_remove+0x93/0x1b0
[  570.642649][T11985]        device_release_driver_internal+0x408/0x6f0
[  570.649316][T11985]        pci_stop_bus_device+0x108/0x140
[  570.655032][T11985]        pci_stop_and_remove_bus_device_locked+0x1a/0x30
[  570.662111][T11985]        remove_store+0xe6/0x150
[  570.667102][T11985]        kernfs_fop_write_iter+0x3a4/0x520
[  570.672981][T11985]        vfs_write+0x474/0x9a0
[  570.677797][T11985]        ksys_write+0x151/0x260
[  570.682696][T11985]        do_syscall_64+0x55/0xb0
[  570.687673][T11985]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  570.694142][T11985] 
[  570.694142][T11985] other info that might help us debug this:
[  570.694142][T11985] 
[  570.704409][T11985] Chain exists of:
[  570.704409][T11985]   &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock
[  570.704409][T11985] 
[  570.718127][T11985]  Possible unsafe locking scenario:
[  570.718127][T11985] 
[  570.725619][T11985]        CPU0                    CPU1
[  570.731052][T11985]        ----                    ----
[  570.736451][T11985]   lock(&bdev->bd_holder_lock);
[  570.741436][T11985]                                lock(bdev_lock);
[  570.747896][T11985]                                lock(&bdev->bd_holder_lock);
[  570.755401][T11985]   rlock(&type->s_umount_key#32);
[  570.760601][T11985] 
[  570.760601][T11985]  *** DEADLOCK ***
[  570.760601][T11985] 
[  570.768779][T11985] 9 locks held by syz.6.1192/11985:
[  570.774023][T11985]  #0: ffff88805e46cfc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330
[  570.783368][T11985]  #1: ffff888079fe8418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  570.792334][T11985]  #2: ffff88806311f488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520
[  570.802159][T11985]  #3: ffffffff8e6168a8 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_stop_and_remove_bus_device_locked+0x12/0x30
[  570.814271][T11985]  #4: ffff888147a481f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0
[  570.824882][T11985]  #5: ffff88814126e1b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0
[  570.835491][T11985]  #6: ffff88801bbbc0e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730
[  570.845495][T11985]  #7: ffff8881423fe3b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0
[  570.856096][T11985]  #8: ffff888020d38108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0
[  570.866183][T11985] 
[  570.866183][T11985] stack backtrace:
[  570.872199][T11985] CPU: 1 PID: 11985 Comm: syz.6.1192 Not tainted syzkaller #0
[  570.879723][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  570.889824][T11985] Call Trace:
[  570.893232][T11985]  <TASK>
[  570.896298][T11985]  dump_stack_lvl+0x18c/0x250
[  570.901100][T11985]  ? load_image+0x420/0x420
[  570.905748][T11985]  ? show_regs_print_info+0x20/0x20
[  570.911013][T11985]  ? print_circular_bug+0x12b/0x1a0
[  570.916276][T11985]  check_noncircular+0x2fc/0x400
[  570.921294][T11985]  ? print_deadlock_bug+0x5d0/0x5d0
[  570.926549][T11985]  ? lockdep_lock+0xf5/0x230
[  570.931210][T11985]  ? _find_first_zero_bit+0xd6/0x100
[  570.936553][T11985]  __lock_acquire+0x3a07/0x7eb0
[  570.941469][T11985]  ? __lock_acquire+0x135d/0x7eb0
[  570.946567][T11985]  ? verify_lock_unused+0x140/0x140
[  570.951819][T11985]  ? verify_lock_unused+0x140/0x140
[  570.957156][T11985]  ? find_lock_entries+0x120/0x1020
[  570.962447][T11985]  lock_acquire+0x19e/0x420
[  570.967000][T11985]  ? super_lock+0x189/0x390
[  570.971550][T11985]  ? __might_sleep+0xe0/0xe0
[  570.976216][T11985]  ? read_lock_is_recursive+0x20/0x20
[  570.981668][T11985]  ? __mutex_trylock_common+0x160/0x270
[  570.987271][T11985]  ? trace_raw_output_contention_end+0xd0/0xd0
[  570.993479][T11985]  ? mapping_try_invalidate+0x4bf/0x570
[  570.999082][T11985]  down_read+0x46/0x2e0
[  571.003301][T11985]  ? super_lock+0x189/0x390
[  571.007852][T11985]  super_lock+0x189/0x390
[  571.012232][T11985]  ? xa_find_after+0xaf/0x430
[  571.016962][T11985]  ? user_get_super+0x180/0x180
[  571.021867][T11985]  ? mutex_lock_nested+0x20/0x20
[  571.026869][T11985]  fs_bdev_mark_dead+0xad/0x1f0
[  571.031774][T11985]  ? super_s_dev_set+0xa0/0xa0
[  571.036579][T11985]  bdev_mark_dead+0x83/0x1a0
[  571.041215][T11985]  ? blk_report_disk_dead+0x88/0x3e0
[  571.046561][T11985]  blk_report_disk_dead+0x21c/0x3e0
[  571.051813][T11985]  ? __blk_mark_disk_dead+0x120/0x120
[  571.057245][T11985]  ? xa_find_after+0xaf/0x430
[  571.061985][T11985]  del_gendisk+0x2cb/0x8f0
[  571.066465][T11985]  ? blk_report_disk_dead+0x3e0/0x3e0
[  571.071896][T11985]  ? __pm_runtime_resume+0x129/0x170
[  571.077235][T11985]  sd_remove+0x8d/0x100
[  571.081448][T11985]  ? sd_probe+0x11c0/0x11c0
[  571.086000][T11985]  device_release_driver_internal+0x458/0x6f0
[  571.092125][T11985]  bus_remove_device+0x43b/0x520
[  571.097127][T11985]  ? bus_probe_device+0x260/0x260
[  571.102206][T11985]  ? up_write+0x1be/0x410
[  571.106589][T11985]  ? kernfs_remove_by_name_ns+0x117/0x150
[  571.112367][T11985]  device_del+0x51f/0x910
[  571.116765][T11985]  ? kill_device+0x160/0x160
[  571.121417][T11985]  ? kobject_put+0x421/0x450
[  571.126161][T11985]  __scsi_remove_device+0x1a2/0x390
[  571.131426][T11985]  scsi_forget_host+0xd0/0x110
[  571.136277][T11985]  scsi_remove_host+0x1b3/0x730
[  571.141190][T11985]  virtscsi_remove+0x130/0x1a0
[  571.146029][T11985]  virtio_dev_remove+0x96/0x1a0
[  571.150942][T11985]  ? virtio_dev_probe+0xae0/0xae0
[  571.156024][T11985]  device_release_driver_internal+0x408/0x6f0
[  571.162150][T11985]  bus_remove_device+0x43b/0x520
[  571.167159][T11985]  ? bus_probe_device+0x260/0x260
[  571.172243][T11985]  ? up_write+0x1be/0x410
[  571.176632][T11985]  ? kernfs_remove_by_name_ns+0x117/0x150
[  571.182423][T11985]  device_del+0x51f/0x910
[  571.186815][T11985]  ? kill_device+0x160/0x160
[  571.191652][T11985]  ? pci_device_is_present+0x175/0x240
[  571.197181][T11985]  ? pci_real_dma_dev+0x20/0x20
[  571.202131][T11985]  device_unregister+0x20/0xc0
[  571.206948][T11985]  unregister_virtio_device+0x37/0x60
[  571.212401][T11985]  virtio_pci_remove+0x7f/0xf0
[  571.217216][T11985]  pci_device_remove+0x93/0x1b0
[  571.222132][T11985]  ? pci_device_probe+0x8d0/0x8d0
[  571.227221][T11985]  device_release_driver_internal+0x408/0x6f0
[  571.233346][T11985]  pci_stop_bus_device+0x108/0x140
[  571.238527][T11985]  pci_stop_and_remove_bus_device_locked+0x1a/0x30
[  571.245093][T11985]  remove_store+0xe6/0x150
[  571.249556][T11985]  ? pci_dev_hp_attrs_are_visible+0xe0/0xe0
[  571.255500][T11985]  ? __virt_addr_valid+0x10c/0x380
[  571.260673][T11985]  ? sysfs_kf_write+0x187/0x2a0
[  571.265575][T11985]  ? sysfs_kf_read+0x360/0x360
[  571.270384][T11985]  kernfs_fop_write_iter+0x3a4/0x520
[  571.275812][T11985]  vfs_write+0x474/0x9a0
[  571.280122][T11985]  ? file_end_write+0x250/0x250
[  571.285034][T11985]  ? __fget_files+0x3fc/0x460
[  571.289776][T11985]  ? __fdget_pos+0x2a3/0x330
[  571.294418][T11985]  ? ksys_write+0x74/0x260
[  571.298892][T11985]  ksys_write+0x151/0x260
[  571.303284][T11985]  ? __ia32_sys_read+0x90/0x90
[  571.308108][T11985]  ? lockdep_hardirqs_on+0x98/0x150
[  571.313456][T11985]  do_syscall_64+0x55/0xb0
[  571.317932][T11985]  ? clear_bhb_loop+0x40/0x90
[  571.322667][T11985]  ? clear_bhb_loop+0x40/0x90
[  571.327392][T11985]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  571.333344][T11985] RIP: 0033:0x7ff9a1f9e1d9
[  571.337893][T11985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.357615][T11985] RSP: 002b:00007ff9a2ede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  571.366175][T11985] RAX: ffffffffffffffda RBX: 00007ff9a2225fa0 RCX: 00007ff9a1f9e1d9
[  571.374201][T11985] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  571.382221][T11985] RBP: 00007ff9a2035888 R08: 0000000000000000 R09: 0000000000000000
[  571.390239][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.398262][T11985] R13: 00007ff9a2226038 R14: 00007ff9a2225fa0 R15: 00007ffd9b417fe8
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  571.406291][T11985]  </TASK>
[  571.474572][   T24] blk_print_req_error: 40 callbacks suppressed
[  571.474589][   T24] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  571.492035][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 145446)
[  571.504871][   T24] Buffer I/O error on device sda1, logical block 145408
[  571.512823][   T24] device offline error, dev sda, sector 1171734 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  571.529210][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 146466)
[  571.540872][   T24] Buffer I/O error on device sda1, logical block 146428
[  571.547943][   T24] Buffer I/O error on device sda1, logical block 146429
[  571.554938][   T24] Buffer I/O error on device sda1, logical block 146430
[  571.562050][   T24] Buffer I/O error on device sda1, logical block 146431
[  571.569163][   T24] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  571.579773][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 147494)
[  571.582931][T10825] device offline error, dev sda, sector 1257774 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  571.591769][   T24] Buffer I/O error on device sda1, logical block 147456
[  571.609561][   T24] device offline error, dev sda, sector 1188118 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  571.620287][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 148514)
[  571.633855][   T24] Buffer I/O error on device sda1, logical block 148476
[  571.641488][ T5102] device offline error, dev sda, sector 1054926 op 0x1:(WRITE) flags 0x9800 phys_seg 9 prio class 2
[  571.652436][   T24] Buffer I/O error on device sda1, logical block 148477
[  571.659494][   T24] Buffer I/O error on device sda1, logical block 148478
[  571.666527][   T24] Buffer I/O error on device sda1, logical block 148479
[  571.673567][   T24] device offline error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  571.684274][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2034 starting block 151590)
[  571.696036][   T24] device offline error, dev sda, sector 1220886 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  571.706721][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2034 starting block 152610)
[  571.718425][   T24] device offline error, dev sda, sector 1241390 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  571.730235][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2034 starting block 155173)
[  571.742047][   T24] device offline error, dev sda, sector 1274158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  571.752807][   T24] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2032 starting block 159269)
[  571.764559][T10825] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 157221)
[  571.776408][T10825] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2028 starting block 143398)
[  571.818025][ T5102] Aborting journal on device sda1-8.
[  571.840124][   T10] buffer_io_error: 40 callbacks suppressed
[  571.840222][   T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  571.858301][ T5102] JBD2: I/O error when updating journal superblock for sda1-8.
[  571.961501][T11985] EXT4-fs (sda1): shut down requested (2)
Oct 11 04:14:30 syzkaller kern.alert kernel: [  571.961501][T11985] EXT4-fs (sda1): shut down requested (2)
[  572.143460][T11985] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  572.789963][T11987] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000
[  572.817275][T11987] pci 0000:00:03.0: BAR 0 [io  0xc000-0xc03f]
[  572.837109][T11987] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f]
[  572.938113][ T5817] virtio-pci 0000:00:03.0: BAR 0 [io  0xc000-0xc03f]: not claimed; can't enable device
[  572.949299][T11987] virtio-pci: probe of 0000:00:03.0 failed with error -22
[  573.509484][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.584934][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.641528][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.717591][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.878100][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  573.933025][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.103825][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.153718][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.262215][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.304615][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.374363][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.452931][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.399356][   T12] hsr_slave_0: left promiscuous mode
[  575.405173][   T12] hsr_slave_1: left promiscuous mode
[  575.411562][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.419239][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.429396][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.439681][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.448466][   T12] bridge_slave_1: left allmulticast mode
[  575.454132][   T12] bridge_slave_1: left promiscuous mode
[  575.460041][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.469157][   T12] bridge_slave_0: left allmulticast mode
[  575.474812][   T12] bridge_slave_0: left promiscuous mode
[  575.482341][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.494483][   T12] hsr_slave_0: left promiscuous mode
[  575.500364][   T12] hsr_slave_1: left promiscuous mode
[  575.506179][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.513834][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.522689][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.532872][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.540617][   T12] bridge_slave_1: left allmulticast mode
[  575.546272][   T12] bridge_slave_1: left promiscuous mode
[  575.552296][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.562272][   T12] bridge_slave_0: left allmulticast mode
[  575.568266][   T12] bridge_slave_0: left promiscuous mode
[  575.574020][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.586198][   T12] hsr_slave_0: left promiscuous mode
[  575.592718][   T12] hsr_slave_1: left promiscuous mode
[  575.602367][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.610187][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.618216][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.626272][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.637029][   T12] bridge_slave_1: left allmulticast mode
[  575.642688][   T12] bridge_slave_1: left promiscuous mode
[  575.648499][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.657196][   T12] bridge_slave_0: left allmulticast mode
[  575.662935][   T12] bridge_slave_0: left promiscuous mode
[  575.668992][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.684989][   T12] veth1_macvtap: left promiscuous mode
[  575.690636][   T12] veth0_macvtap: left promiscuous mode
[  575.696230][   T12] veth1_vlan: left promiscuous mode
[  575.701710][   T12] veth0_vlan: left promiscuous mode
[  575.709885][   T12] veth1_macvtap: left promiscuous mode
[  575.715404][   T12] veth0_macvtap: left promiscuous mode
[  575.722710][   T12] veth1_vlan: left promiscuous mode
[  575.728171][   T12] veth0_vlan: left promiscuous mode
[  575.734503][   T12] veth1_macvtap: left promiscuous mode
[  575.740793][   T12] veth0_macvtap: left promiscuous mode
[  575.746525][   T12] veth1_vlan: left promiscuous mode
[  575.751853][   T12] veth0_vlan: left promiscuous mode
[  576.149360][   T12] team0 (unregistering): Port device team_slave_1 removed
[  576.182077][   T12] team0 (unregistering): Port device team_slave_0 removed
[  576.212044][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  576.242969][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  576.323483][   T12] bond0 (unregistering): Released all slaves
[  576.471129][   T12] team0 (unregistering): Port device team_slave_1 removed
[  576.502375][   T12] team0 (unregistering): Port device team_slave_0 removed
[  576.539527][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  576.572301][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  576.655962][   T12] bond0 (unregistering): Released all slaves
[  576.823521][   T12] team0 (unregistering): Port device team_slave_1 removed
[  576.837723][   T12] team0 (unregistering): Port device team_slave_0 removed
[  576.869744][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  576.901393][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  576.980415][   T12] bond0 (unregistering): Released all slaves
[  577.894329][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.952690][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.003905][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.052424][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.181982][   T12] tipc: Left network mode
[  578.849736][   T12] hsr_slave_0: left promiscuous mode
[  578.856768][   T12] hsr_slave_1: left promiscuous mode
[  578.864163][   T12] bridge_slave_1: left allmulticast mode
[  578.870662][   T12] bridge_slave_1: left promiscuous mode
[  578.876520][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.885630][   T12] bridge_slave_0: left allmulticast mode
[  578.892414][   T12] bridge_slave_0: left promiscuous mode
[  578.898828][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.910183][   T12] veth1_macvtap: left promiscuous mode
[  578.915715][   T12] veth0_macvtap: left promiscuous mode
[  578.922153][   T12] veth1_vlan: left promiscuous mode
[  578.927683][   T12] veth0_vlan: left promiscuous mode
[  579.001857][   T12] bond2 (unregistering): Released all slaves
[  579.032902][   T12] bond1 (unregistering): (slave veth3): Releasing active interface
[  579.044016][   T12] bond1 (unregistering): (slave veth3): the permanent HWaddr of slave - be:63:6e:bd:2b:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  579.183933][   T12] bond1 (unregistering): (slave dummy0): Releasing active interface
[  579.192907][   T12] bond1 (unregistering): Released all slaves
[  579.361144][   T12] team0 (unregistering): Port device team_slave_1 removed
[  579.394625][   T12] team0 (unregistering): Port device team_slave_0 removed
[  579.425629][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  579.455729][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.541304][   T12] bond0 (unregistering): Released all slaves
[  579.825581][   T12] IPVS: stop unused estimator thread 0...