last executing test programs:

3m2.81543031s ago: executing program 32 (id=198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
sendto$packet(r3, &(0x7f0000000440)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000480)={0x11, 0x9900, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m38.946258713s ago: executing program 3 (id=339):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x8000d0, &(0x7f0000000240), 0x1, 0x586, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000c00)={0x0, 0x5, 0x105, 0x80006, 0x183, 0x7})

2m38.327759099s ago: executing program 33 (id=339):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x8000d0, &(0x7f0000000240), 0x1, 0x586, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000c00)={0x0, 0x5, 0x105, 0x80006, 0x183, 0x7})

2m0.796670916s ago: executing program 6 (id=498):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='cdg', 0x3)
sendto$inet(r0, &(0x7f0000000880), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f00000008c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m59.086286658s ago: executing program 6 (id=508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)}}, 0xfe)
close(r1)

1m58.862278163s ago: executing program 1 (id=510):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m58.478226213s ago: executing program 1 (id=513):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83c)
listen(r0, 0x28)
poll(&(0x7f0000001900)=[{r0, 0x8202}], 0x1, 0x8001)
shutdown(r0, 0x0)

1m58.131337882s ago: executing program 1 (id=515):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x70, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x12, 0x6, "f1625848bf7925ddc9cd60b4fb3d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x406, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x804, 0x0, 0x0, {0x5, 0x0, 0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x214, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x19c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x890b}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x3b8}, 0x1, 0x0, 0x0, 0x4004055}, 0x20008004)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000fc0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff)
creat(&(0x7f0000000680)='./file1\x00', 0x4)
io_setup(0x202, &(0x7f00000006c0))
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000001040), 0x208e24b)

1m58.119581042s ago: executing program 6 (id=516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
close(r0)
recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0)

1m57.098107936s ago: executing program 6 (id=518):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
open(&(0x7f00000014c0)='./bus\x00', 0x8000, 0xe0)
open(&(0x7f0000001740)='./file1\x00', 0x14927e, 0x20)

1m56.855588712s ago: executing program 6 (id=520):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x4841)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x4e21, @broadcast}})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1m56.1382106s ago: executing program 6 (id=524):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000600)=0xe0, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0)

1m55.811272158s ago: executing program 34 (id=524):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000600)=0xe0, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0)

1m54.826217112s ago: executing program 1 (id=531):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f0000001740)='./file1\x00', 0x14927e, 0x20)

1m53.833515886s ago: executing program 1 (id=535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/reboot/force\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000c80)={0x54, 0x8}, 0x10)

1m50.689274893s ago: executing program 1 (id=546):
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x14)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x444, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1m50.155446816s ago: executing program 35 (id=546):
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x14)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x444, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1m50.132056287s ago: executing program 5 (id=548):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x73}, 0x94)

1m49.885764563s ago: executing program 5 (id=552):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000001280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000001300)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001340)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001440), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000001480), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000014c0)=0x2)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000001500)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001640)=@newqdisc={0x54, 0x24, 0x605, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_MPU={0x8, 0xe, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendto$inet6(r3, &(0x7f0000001540)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
socket$nl_netfilter(0x10, 0x3, 0xc)
getrandom(&(0x7f0000001040)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1m48.171371695s ago: executing program 5 (id=555):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
syz_open_dev$loop(&(0x7f0000000340), 0x10000, 0x6080)
syz_open_dev$loop(0x0, 0x2, 0x80040)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

1m47.668192058s ago: executing program 5 (id=559):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f0000001740)='./file1\x00', 0x14927e, 0x20)

1m46.992929714s ago: executing program 5 (id=560):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x20a42, 0x210)

1m45.294184325s ago: executing program 5 (id=562):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"})
syz_open_pts(r1, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)

1m44.893246575s ago: executing program 36 (id=562):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"})
syz_open_pts(r1, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)

55.539906342s ago: executing program 8 (id=678):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000001280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000001300)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001340)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001440), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000001480), 0x10106, 0x2, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240880c0, &(0x7f0000001500)={0xa, 0xe20, 0x0, @mcast1}, 0x1c)
socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001640)=@newqdisc={0x54, 0x24, 0x605, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_MPU={0x8, 0xe, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001540)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
socket$nl_netfilter(0x10, 0x3, 0xc)
getrandom(&(0x7f0000001040)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

50.946979414s ago: executing program 8 (id=689):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/reboot/force\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000c80)={0x54, 0x8}, 0x10)

50.510601025s ago: executing program 8 (id=694):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffdfff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2a, 0x0, &(0x7f0000000180)="b461802305604e48916a8fd0c915848330a7544435ed3373010000003d2600906919d5ebfe009d037ef8", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffa}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

49.558947147s ago: executing program 8 (id=700):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
shutdown(r0, 0x0)
connect$unix(r0, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = accept(r1, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000480)="9c7dd928db572a918ed7263deefe97011c56804d55b2c9758f08df05f045bf12b48111b45bb16ce402cfd9edd773775a85c8199b0a0414501fbca615a4d37b4d9495f4c1d15f658d8560c4d1e01f4cb273a90bbe62a1372189", 0x1, 0x4040045, 0x0, 0xffffffffffffffef)

48.165594832s ago: executing program 8 (id=702):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))

47.8540776s ago: executing program 8 (id=706):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000)

39.139451862s ago: executing program 2 (id=735):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
rt_sigprocmask(0x0, &(0x7f0000000000)={[0x100000000]}, 0x0, 0x8)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8)

36.006107239s ago: executing program 2 (id=743):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0)
recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)

35.359289045s ago: executing program 9 (id=745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000019600)={0x1, 0x0, 0x6, 0x0, 0x4}, 0xc)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x6)
keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r5, &(0x7f00000003c0)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000019400)='./sys\x00', &(0x7f0000019440)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019480)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000080)=0x8, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r0, 0x0, 0x4044000)

33.458295681s ago: executing program 9 (id=747):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f0000000440)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000480)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

33.352755254s ago: executing program 2 (id=749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

32.148378263s ago: executing program 37 (id=706):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000)

32.074791146s ago: executing program 2 (id=752):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(0x0, 0x8000, 0xe0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f0000001740)='./file1\x00', 0x14927e, 0x20)

31.508732219s ago: executing program 2 (id=757):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000019600)={0x1, 0x0, 0x6, 0x0, 0x4}, 0xc)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x6)
keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r5, &(0x7f00000003c0)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000019400)='./sys\x00', &(0x7f0000019440)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019480)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000080)=0x8, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r0, 0x0, 0x4044000)

29.266069604s ago: executing program 2 (id=761):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x0, 0x11, 0x0, 0x0)

28.794815255s ago: executing program 38 (id=761):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x0, 0x11, 0x0, 0x0)

28.773871816s ago: executing program 9 (id=764):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x21)
getdents64(r0, &(0x7f00000000c0)=""/24, 0x18)

28.446168884s ago: executing program 9 (id=767):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000014c0)='./bus\x00', 0x8000, 0xe0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0)
open(&(0x7f0000001740)='./file1\x00', 0x14927e, 0x20)

27.845511318s ago: executing program 9 (id=769):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000f40)='7', 0x1)
pselect6(0x40, &(0x7f0000000f80)={0x5, 0x3ff, 0x3, 0xffffffffffff7fff, 0x2, 0x7ff, 0xb1, 0x7}, 0x0, &(0x7f00000010c0)={0x6, 0x629a, 0x400, 0x8, 0x0, 0x9, 0xa, 0x3}, &(0x7f0000001000), &(0x7f0000001040)={&(0x7f0000001080)={[0x1000000000000000]}, 0x8})

25.385397299s ago: executing program 9 (id=774):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000001d00)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001d40)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000001d80)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000001dc0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

24.835652722s ago: executing program 39 (id=774):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000001d00)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001d40)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000001d80)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000001dc0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

22.553305368s ago: executing program 4 (id=785):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f0000000440)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000480)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

20.688895194s ago: executing program 4 (id=787):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
sendmsg(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x24, &(0x7f0000000240)=[{&(0x7f0000000280)='hello', 0x5}], 0x1, &(0x7f00000002c0)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0)

20.461944299s ago: executing program 4 (id=789):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000240))
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

18.851656329s ago: executing program 4 (id=791):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000014c0)='./bus\x00', 0x8000, 0xe0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(0x0, 0x14927e, 0x20)

18.610907374s ago: executing program 4 (id=793):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

18.059670028s ago: executing program 4 (id=794):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f0000000440)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000480)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

17.685151907s ago: executing program 40 (id=794):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f0000000440)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000480)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

16.629732073s ago: executing program 7 (id=797):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000019600)={0x1, 0x0, 0x6, 0x0, 0x4}, 0xc)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x6)
keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r5, &(0x7f00000003c0)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000019400)='./sys\x00', &(0x7f0000019440)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019480)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000080)=0x8, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4044000)

15.987049689s ago: executing program 7 (id=798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = socket$inet(0x2, 0x1, 0x6)
bind(r2, &(0x7f0000000340)=@in={0x2, 0x4908, @loopback}, 0x10)
listen(r2, 0x5)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000003c0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
r3 = socket$inet(0x2, 0x1, 0x6)
connect(r3, &(0x7f0000001a00)=@in={0x2, 0x15, @loopback}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

14.807234947s ago: executing program 7 (id=799):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='cdg', 0x3)
sendto$inet(r0, &(0x7f0000000880), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f00000008c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

13.776848593s ago: executing program 7 (id=800):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000014c0)='./bus\x00', 0x8000, 0xe0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(0x0, 0x14927e, 0x20)

12.950253953s ago: executing program 7 (id=801):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0)

12.546403963s ago: executing program 7 (id=802):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x2, 0x7fffffff)

11.984529866s ago: executing program 41 (id=802):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x2, 0x7fffffff)

7.549141695s ago: executing program 3 (id=763):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
statx(0xffffffffffffffff, 0x0, 0x6100, 0x76f, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x0, 0x0})
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000600)='1', 0x1)
r4 = socket$inet6(0xa, 0x80000, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x0, 0x0, 0x0, 0x4000000000000, 0x2, 0xffffffffffffffff}, {0x2, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe8)
close(r4)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000780)="0c2308fe72183e14453d1abb1b6a45d9", 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/reserved_size', 0x1, 0x1)
io_setup(0x4, &(0x7f0000000840))
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./proc\x00', 0xc55, &(0x7f0000000900)=ANY=[], 0x0, 0x2f7, &(0x7f0000000940)="$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")

6.046513242s ago: executing program 3 (id=805):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x13, 0x4e20, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="08001efbb07d", 0x6}], 0x1}, 0x40010)

4.46124499s ago: executing program 3 (id=807):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000400), 0x5, 0x50a, &(0x7f0000000c40)="$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")
open(&(0x7f0000001400)='./bus\x00', 0x14927e, 0x1)
mount(&(0x7f0000001440)=@loop={'/dev/loop', 0x0}, &(0x7f0000001480)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000014c0)='./bus\x00', 0x8000, 0xe0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(0x0, 0x14927e, 0x20)

3.911530823s ago: executing program 3 (id=810):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x84)

3.178483432s ago: executing program 3 (id=813):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x101c08a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x1, 0x2c1, &(0x7f0000000700)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b80)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000c00), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r1], 0x97)

2.786277121s ago: executing program 42 (id=813):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x101c08a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x1, 0x2c1, &(0x7f0000000700)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b80)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000c00), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r1], 0x97)

2.596599236s ago: executing program 0 (id=816):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)={0x10, 0x2b, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.289578484s ago: executing program 0 (id=817):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x4000)

2.056063019s ago: executing program 0 (id=818):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

308.877062ms ago: executing program 0 (id=819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000740)='a', 0x1)

118.226337ms ago: executing program 0 (id=820):
unshare(0xc040480)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x323902, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)

0s ago: executing program 0 (id=821):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000200)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x0, "6effcc"}}, 0x8)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff5b}]}, 0x24}}, 0x0)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5)

kernel console output (not intermixed with test programs):

ONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.296046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  193.329070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  193.365670][ T5704] device veth0_vlan entered promiscuous mode
[  193.399707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  193.410553][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  193.418879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  193.465894][ T5704] device veth1_vlan entered promiscuous mode
[  193.604107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  193.631883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  193.677447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.717338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.747497][ T5704] device veth0_macvtap entered promiscuous mode
[  193.812226][ T5704] device veth1_macvtap entered promiscuous mode
[  193.928978][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.190492][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.241680][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.248399][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.520909][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.590910][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.686421][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.761122][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.841419][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.915293][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.972522][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.101831][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  195.125879][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  195.197411][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.277574][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.337301][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.380783][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.629367][   T26] audit: type=1800 audit(1792330724.503:12): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.443" name=08 dev="sda1" ino=2044 res=0 errno=0
[  195.838265][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.063302][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.105776][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.529088][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.570366][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.614292][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.657804][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.695524][ T6100] netlink: 76 bytes leftover after parsing attributes in process `syz.4.440'.
[  198.674283][ T6146] loop5: detected capacity change from 0 to 512
[  198.876393][ T6149] FAULT_INJECTION: forcing a failure.
[  198.876393][ T6149] name fail_futex, interval 1, probability 0, space 0, times 0
[  198.895345][ T6149] CPU: 1 PID: 6149 Comm: syz.5.456 Not tainted syzkaller #0
[  198.902709][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  198.912786][ T6149] Call Trace:
[  198.916076][ T6149]  <TASK>
[  198.919032][ T6149]  dump_stack_lvl+0x188/0x24e
[  198.923750][ T6149]  ? show_regs_print_info+0x12/0x12
[  198.928963][ T6149]  ? load_image+0x410/0x410
[  198.933496][ T6149]  ? __lock_acquire+0x142d/0x7ea0
[  198.938569][ T6149]  should_fail_ex+0x390/0x4c0
[  198.943296][ T6149]  get_futex_key+0x1de/0x1000
[  198.948016][ T6149]  ? verify_lock_unused+0x140/0x140
[  198.953252][ T6149]  ? futex_setup_timer+0xc0/0xc0
[  198.958200][ T6149]  ? verify_lock_unused+0x140/0x140
[  198.963417][ T6149]  futex_wake+0x123/0x4f0
[  198.967760][ T6149]  ? futex_wake_mark+0x150/0x150
[  198.972721][ T6149]  do_futex+0x2e2/0x320
[  198.976890][ T6149]  ? __ia32_sys_get_robust_list+0x100/0x100
[  198.982795][ T6149]  ? __might_fault+0xc2/0x120
[  198.987481][ T6149]  mm_release+0x20a/0x330
[  198.991821][ T6149]  ? exit_robust_list+0x2ce/0x2f0
[  198.996872][ T6149]  ? exit_mm_release+0x30/0x30
[  199.001648][ T6149]  ? lockdep_hardirqs_on+0x94/0x140
[  199.006871][ T6149]  exit_mm+0xa0/0x350
[  199.010877][ T6149]  ? sysctl_delayacct+0x220/0x220
[  199.015936][ T6149]  ? do_exit+0x2570/0x2570
[  199.020465][ T6149]  ? mm_trace_rss_stat+0xa7/0x250
[  199.025508][ T6149]  ? sync_mm_rss+0x211/0x350
[  199.030340][ T6149]  do_exit+0x958/0x2570
[  199.034533][ T6149]  ? put_task_struct+0x80/0x80
[  199.039315][ T6149]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  199.045332][ T6149]  ? lock_chain_count+0x20/0x20
[  199.050228][ T6149]  ? _raw_spin_lock_irq+0xb7/0xf0
[  199.055269][ T6149]  do_group_exit+0x229/0x2e0
[  199.059895][ T6149]  ? lockdep_hardirqs_on+0x94/0x140
[  199.065159][ T6149]  get_signal+0x1259/0x1340
[  199.069705][ T6149]  arch_do_signal_or_restart+0xc4/0x1310
[  199.075382][ T6149]  ? __fget_files+0x28/0x460
[  199.080015][ T6149]  ? do_futex+0x310/0x320
[  199.084361][ T6149]  ? get_sigframe_size+0x10/0x10
[  199.089314][ T6149]  ? __ia32_sys_get_robust_list+0x100/0x100
[  199.095219][ T6149]  ? tipc_setsockopt+0x2a5/0x960
[  199.100187][ T6149]  ? exit_to_user_mode_loop+0x3b/0x110
[  199.105682][ T6149]  exit_to_user_mode_loop+0x70/0x110
[  199.110996][ T6149]  exit_to_user_mode_prepare+0xee/0x180
[  199.116559][ T6149]  syscall_exit_to_user_mode+0x16/0x40
[  199.122040][ T6149]  do_syscall_64+0x58/0xa0
[  199.126468][ T6149]  ? clear_bhb_loop+0x60/0xb0
[  199.131159][ T6149]  ? clear_bhb_loop+0x60/0xb0
[  199.135849][ T6149]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  199.141754][ T6149] RIP: 0033:0x7faaa899e559
[  199.146177][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.165819][ T6149] RSP: 002b:00007faaa983c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  199.174249][ T6149] RAX: fffffffffffffe00 RBX: 00007faaa8c25fa8 RCX: 00007faaa899e559
[  199.182233][ T6149] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faaa8c25fa8
[  199.190221][ T6149] RBP: 00007faaa8c25fa0 R08: 0000000000000000 R09: 0000000000000000
[  199.198202][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.206181][ T6149] R13: 00007faaa8c26038 R14: 00007fff5e2678b0 R15: 00007fff5e267998
[  199.214179][ T6149]  </TASK>
[  201.711090][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  201.721612][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  201.733601][ T5704] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.755394][ T5704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.766219][ T5704] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.779670][ T5704] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.027577][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.073670][ T6173] FAULT_INJECTION: forcing a failure.
[  202.073670][ T6173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.087048][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.107392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  202.124782][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'.
[  202.145271][ T6173] CPU: 0 PID: 6173 Comm: syz.2.460 Not tainted syzkaller #0
[  202.152647][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  202.162752][ T6173] Call Trace:
[  202.166080][ T6173]  <TASK>
[  202.169049][ T6173]  dump_stack_lvl+0x188/0x24e
[  202.173785][ T6173]  ? show_regs_print_info+0x12/0x12
[  202.179052][ T6173]  ? load_image+0x410/0x410
[  202.183612][ T6173]  ? __lock_acquire+0x7ea0/0x7ea0
[  202.188694][ T6173]  ? __lock_acquire+0x7ea0/0x7ea0
[  202.193783][ T6173]  should_fail_ex+0x390/0x4c0
[  202.198529][ T6173]  set_fd_set+0x3a/0x90
[  202.202745][ T6173]  core_sys_select+0x85a/0x980
[  202.207582][ T6173]  ? poll_select_set_timeout+0x150/0x150
[  202.213280][ T6173]  ? sigprocmask+0x190/0x190
[  202.217919][ T6173]  __se_sys_pselect6+0x2f4/0x3c0
[  202.222916][ T6173]  ? __x64_sys_pselect6+0xf0/0xf0
[  202.227996][ T6173]  ? __x64_sys_pselect6+0x1d/0xf0
[  202.233078][ T6173]  do_syscall_64+0x4c/0xa0
[  202.237542][ T6173]  ? clear_bhb_loop+0x60/0xb0
[  202.242264][ T6173]  ? clear_bhb_loop+0x60/0xb0
[  202.246996][ T6173]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  202.252930][ T6173] RIP: 0033:0x7f208839e559
[  202.257377][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.277028][ T6173] RSP: 002b:00007f20891f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  202.285494][ T6173] RAX: ffffffffffffffda RBX: 00007f2088625fa0 RCX: 00007f208839e559
[  202.293493][ T6173] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000040
[  202.301490][ T6173] RBP: 00007f2088435ab8 R08: 0000200000001000 R09: 0000000000000000
[  202.309481][ T6173] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000
[  202.317475][ T6173] R13: 00007f2088626038 R14: 00007f2088625fa0 R15: 00007ffc740d4628
[  202.325487][ T6173]  </TASK>
[  202.370874][ T5420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.378770][ T5420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.431648][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  205.060646][ T6201] db_root: cannot open:  �ÿÏQ
[  205.067680][ T6204] bond0: invalid ARP target specified
[  205.168659][ T6207] netlink: 76 bytes leftover after parsing attributes in process `syz.4.471'.
[  205.477610][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'.
[  205.594023][ T6225] netlink: 'syz.5.477': attribute type 6 has an invalid length.
[  205.594720][ T6222] loop4: detected capacity change from 0 to 512
[  205.673969][ T6228] loop6: detected capacity change from 0 to 512
[  205.724604][   T26] audit: type=1800 audit(1792330734.603:13): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.478" name="file1" dev="loop4" ino=1048654 res=0 errno=0
[  205.747049][ T6222] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  205.778335][ T6222] FAT-fs (loop4): Filesystem has been set read-only
[  205.896169][   T26] audit: type=1800 audit(1792330734.763:14): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.480" name=08 dev="sda1" ino=2044 res=0 errno=0
[  206.620671][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  206.627972][ T4285] Bluetooth: hci4: command 0x0406 tx timeout
[  206.634125][ T4285] Bluetooth: hci3: command 0x0406 tx timeout
[  207.738442][ T6260] netlink: 340 bytes leftover after parsing attributes in process `syz.6.488'.
[  207.747748][ T6260] netlink: 48 bytes leftover after parsing attributes in process `syz.6.488'.
[  207.777946][ T6263] netlink: 'syz.5.486': attribute type 4 has an invalid length.
[  207.796230][ T6263] netlink: 'syz.5.486': attribute type 11 has an invalid length.
[  207.807699][ T6261] FAULT_INJECTION: forcing a failure.
[  207.807699][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.820865][ T6263] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.486'.
[  207.831141][ T6261] CPU: 0 PID: 6261 Comm: syz.1.487 Not tainted syzkaller #0
[  207.838516][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  207.848622][ T6261] Call Trace:
[  207.851945][ T6261]  <TASK>
[  207.854922][ T6261]  dump_stack_lvl+0x188/0x24e
[  207.859660][ T6261]  ? show_regs_print_info+0x12/0x12
[  207.864914][ T6261]  ? load_image+0x410/0x410
[  207.869473][ T6261]  ? __lock_acquire+0x7ea0/0x7ea0
[  207.874570][ T6261]  should_fail_ex+0x390/0x4c0
[  207.879316][ T6261]  _copy_to_user+0x2c/0x130
[  207.883885][ T6261]  bpf_verifier_vlog+0x172/0x3a0
[  207.888876][ T6261]  __btf_verifier_log+0xdf/0x130
[  207.893868][ T6261]  ? btf_check_sec_info+0x350/0x350
[  207.899150][ T6261]  ? btf_parse_hdr+0x1dd/0x7d0
[  207.903962][ T6261]  btf_parse_hdr+0x42b/0x7d0
[  207.908592][ T6261]  btf_new_fd+0x367/0x760
[  207.912959][ T6261]  __sys_bpf+0x612/0x780
[  207.917244][ T6261]  ? bpf_link_show_fdinfo+0x380/0x380
[  207.922683][ T6261]  ? lock_chain_count+0x20/0x20
[  207.927576][ T6261]  __x64_sys_bpf+0x78/0x90
[  207.932044][ T6261]  do_syscall_64+0x4c/0xa0
[  207.936494][ T6261]  ? clear_bhb_loop+0x60/0xb0
[  207.941239][ T6261]  ? clear_bhb_loop+0x60/0xb0
[  207.945950][ T6261]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.951873][ T6261] RIP: 0033:0x7fc09e99e559
[  207.956320][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.975964][ T6261] RSP: 002b:00007fc09f7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  207.984417][ T6261] RAX: ffffffffffffffda RBX: 00007fc09ec25fa0 RCX: 00007fc09e99e559
[  207.992440][ T6261] RDX: 0000000000000028 RSI: 0000200000000400 RDI: 0000000000000012
[  208.000451][ T6261] RBP: 00007fc09ea35ab8 R08: 0000000000000000 R09: 0000000000000000
[  208.008449][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.016448][ T6261] R13: 00007fc09ec26038 R14: 00007fc09ec25fa0 R15: 00007ffe6c61a108
[  208.024469][ T6261]  </TASK>
[  208.561236][   T26] audit: type=1800 audit(1792330737.373:15): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.493" name=08 dev="sda1" ino=2044 res=0 errno=0
[  209.331201][ T6282] FAULT_INJECTION: forcing a failure.
[  209.331201][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.350976][ T6282] CPU: 1 PID: 6282 Comm: syz.1.495 Not tainted syzkaller #0
[  209.358373][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  209.368480][ T6282] Call Trace:
[  209.371817][ T6282]  <TASK>
[  209.374860][ T6282]  dump_stack_lvl+0x188/0x24e
[  209.379686][ T6282]  ? show_regs_print_info+0x12/0x12
[  209.384947][ T6282]  ? load_image+0x410/0x410
[  209.389489][ T6282]  ? __lock_acquire+0x7ea0/0x7ea0
[  209.394562][ T6282]  should_fail_ex+0x390/0x4c0
[  209.399289][ T6282]  _copy_to_user+0x2c/0x130
[  209.403825][ T6282]  __se_sys_mincore+0x4ea/0x720
[  209.408721][ T6282]  do_syscall_64+0x4c/0xa0
[  209.413171][ T6282]  ? clear_bhb_loop+0x60/0xb0
[  209.417894][ T6282]  ? clear_bhb_loop+0x60/0xb0
[  209.422603][ T6282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  209.428526][ T6282] RIP: 0033:0x7fc09e99e559
[  209.432972][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.452608][ T6282] RSP: 002b:00007fc09f7ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[  209.461075][ T6282] RAX: ffffffffffffffda RBX: 00007fc09ec25fa0 RCX: 00007fc09e99e559
[  209.469074][ T6282] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000
[  209.477070][ T6282] RBP: 00007fc09ea35ab8 R08: 0000000000000000 R09: 0000000000000000
[  209.485069][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.493082][ T6282] R13: 00007fc09ec26038 R14: 00007fc09ec25fa0 R15: 00007ffe6c61a108
[  209.501093][ T6282]  </TASK>
[  210.762801][ T6311] loop2: detected capacity change from 0 to 1024
[  210.824608][ T6311] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  210.874212][ T6311] EXT4-fs (loop2): barriers disabled
[  210.879585][ T6311] JBD2: no valid journal superblock found
[  210.931588][ T6311] EXT4-fs (loop2): error loading journal
[  211.052055][ T6321] program syz.5.507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.071352][ T6349] loop4: detected capacity change from 0 to 128
[  212.240347][ T6349] FAT-fs (loop4): bogus number of FAT structure
[  212.246824][ T6349] FAT-fs (loop4): Can't find a valid FAT filesystem
[  213.067920][ T6362] loop6: detected capacity change from 0 to 512
[  213.138774][ T6362] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  213.148357][ T6362] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  213.262572][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.277943][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.291850][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.303517][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.321537][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.336353][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.349467][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.362019][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.376173][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.394782][ T5704] EXT4-fs error (device loop6): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  213.650709][ T6370] loop4: detected capacity change from 0 to 32768
[  213.663844][ T6370] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  213.676074][ T6370] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  213.688510][ T6370] BTRFS info (device loop4): setting nodatacow, compression disabled
[  213.698568][ T6370] BTRFS info (device loop4): setting datasum, datacow enabled
[  213.709533][ T6370] BTRFS info (device loop4): force clearing of disk cache
[  213.716917][ T6370] BTRFS info (device loop4): turning on sync discard
[  213.724314][ T6370] BTRFS warning (device loop4): excessive commit interval 43283
[  213.732242][ T6370] BTRFS info (device loop4): enabling ssd optimizations
[  213.739484][ T6370] BTRFS info (device loop4): using spread ssd allocation scheme
[  213.747319][ T6370] BTRFS info (device loop4): not using ssd optimizations
[  213.754687][ T6370] BTRFS info (device loop4): not using spread ssd allocation scheme
[  213.763080][ T6370] BTRFS info (device loop4): using free space tree
[  213.792970][ T6370] BTRFS info (device loop4): rebuilding free space tree
[  213.849760][ T5704] EXT4-fs (loop6): unmounting filesystem.
[  213.884123][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.912800][ T4284] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  214.144121][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.268106][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.276255][ T6391] loop4: detected capacity change from 0 to 512
[  214.374651][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.427695][ T6330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  215.487795][ T6405] ip_tables: iptables: counters copy to user failed while replacing table
[  215.733596][ T6413] loop1: detected capacity change from 0 to 512
[  215.833182][ T6418] loop2: detected capacity change from 0 to 128
[  215.847203][ T6418] FAT-fs (loop2): bogus number of FAT structure
[  215.853647][ T6418] FAT-fs (loop2): Can't find a valid FAT filesystem
[  215.912828][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.935489][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.961112][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.969072][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.978553][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  215.985992][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.993736][ T6413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  216.041095][ T6413] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  216.071192][ T6425] qrtr: Invalid version 0
[  216.220497][ T6417] rxe_eth0 speed is unknown, defaulting to 1000
[  216.304715][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.409198][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.462085][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.513934][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.557241][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.611459][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.647109][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.698551][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.722897][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  216.753303][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  218.440348][ T4285] Bluetooth: hci1: command 0x0409 tx timeout
[  219.120049][ T6430] loop4: detected capacity change from 0 to 32768
[  219.170969][ T6430] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.534 (6430)
[  219.247252][ T6430] BTRFS error (device loop4): open_ctree failed: -4
[  219.290590][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.543'.
[  219.314801][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  219.446269][ T6417] chnl_net:caif_netlink_parms(): no params data found
[  219.555507][ T6240] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (6240)
[  220.148053][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.175072][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.192719][ T6417] device bridge_slave_0 entered promiscuous mode
[  220.382475][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.389677][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.425599][ T6417] device bridge_slave_1 entered promiscuous mode
[  221.543651][ T4285] Bluetooth: hci1: command 0x041b tx timeout
[  221.787851][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'.
[  221.960361][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.052572][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.094194][ T6501] netlink: 'syz.5.555': attribute type 1 has an invalid length.
[  222.226564][ T6501] 8021q: adding VLAN 0 to HW filter on device bond1
[  222.293798][ T6504] device gretap1 entered promiscuous mode
[  222.331448][ T6504] bond1: (slave gretap1): making interface the new active one
[  222.342422][ T6504] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  222.353558][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  222.369651][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  222.381284][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  222.389080][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  222.399576][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  222.408701][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  222.416174][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  222.482562][   T11] device hsr_slave_0 left promiscuous mode
[  222.500110][ T6516] loop4: detected capacity change from 0 to 512
[  222.523316][   T11] device hsr_slave_1 left promiscuous mode
[  222.541281][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.548770][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.561826][ T6520] loop5: detected capacity change from 0 to 512
[  222.578304][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.616361][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.635082][   T11] device bridge_slave_1 left promiscuous mode
[  222.649613][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.686665][   T11] device bridge_slave_0 left promiscuous mode
[  222.695559][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.708664][ T6520] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  222.723630][ T6520] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  222.837263][   T11] device veth1_macvtap left promiscuous mode
[  222.845997][   T11] device veth0_macvtap left promiscuous mode
[  222.860257][   T11] device veth1_vlan left promiscuous mode
[  222.890977][   T11] device veth0_vlan left promiscuous mode
[  223.135777][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.211753][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.274132][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.301753][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.326393][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.345768][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.359745][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.374132][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.393648][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.422321][ T5329] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  223.570823][ T4288] Bluetooth: hci1: command 0x040f tx timeout
[  223.963408][   T11] team0 (unregistering): Port device team_slave_1 removed
[  224.006154][   T11] team0 (unregistering): Port device team_slave_0 removed
[  224.048697][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.093825][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.401460][   T11] bond0 (unregistering): Released all slaves
[  224.457526][ T6515] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  224.525413][ T4288] Bluetooth: hci2: command 0x0409 tx timeout
[  224.554621][ T6507] rxe_eth0 speed is unknown, defaulting to 1000
[  224.566971][ T6417] team0: Port device team_slave_0 added
[  224.602923][ T6417] team0: Port device team_slave_1 added
[  224.690405][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.701644][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.713081][ T5329] EXT4-fs (loop5): unmounting filesystem.
[  224.791777][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.820562][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.841171][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.900800][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.931341][ T6512] rxe_eth0 speed is unknown, defaulting to 1000
[  225.049639][ T6417] device hsr_slave_0 entered promiscuous mode
[  225.078352][ T6417] device hsr_slave_1 entered promiscuous mode
[  225.098886][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.125686][ T6417] Cannot create hsr debugfs directory
[  225.670875][ T4288] Bluetooth: hci1: command 0x0419 tx timeout
[  226.449127][ T6560] db_root: cannot open:  �ÿÏQ
[  226.922964][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[  227.135323][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.157539][ T6512] chnl_net:caif_netlink_parms(): no params data found
[  227.174612][ T6417] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  227.214313][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  227.224320][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  227.232735][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  227.242188][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  227.249780][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  227.257252][ T6417] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  227.264171][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  227.303586][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.335165][ T6417] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  227.404516][ T6417] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  227.446911][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.734503][ T6571] rxe_eth0 speed is unknown, defaulting to 1000
[  227.902648][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.153549][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.178828][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.328181][ T6512] device bridge_slave_0 entered promiscuous mode
[  228.444396][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.466513][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.498884][ T6512] device bridge_slave_1 entered promiscuous mode
[  228.723552][ T6512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.802934][ T6512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.873288][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.892299][ T6593] loop2: detected capacity change from 0 to 1024
[  228.966709][ T6593] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  228.992132][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.003174][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[  229.031213][ T6593] EXT4-fs (loop2): barriers disabled
[  229.036594][ T6593] JBD2: no valid journal superblock found
[  229.050305][ T6593] EXT4-fs (loop2): error loading journal
[  229.075541][ T6512] team0: Port device team_slave_0 added
[  229.121203][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  229.145688][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.312837][ T6512] team0: Port device team_slave_1 added
[  229.321565][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[  229.452391][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.491734][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.663768][ T6512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.719268][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[  229.812925][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.879349][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.912261][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.004732][ T6512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.087046][ T6571] chnl_net:caif_netlink_parms(): no params data found
[  230.100650][ T6595] loop4: detected capacity change from 0 to 32768
[  230.174581][ T6595] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  230.187553][ T6595] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  230.200272][ T6595] BTRFS info (device loop4): setting nodatacow, compression disabled
[  230.209838][ T6595] BTRFS info (device loop4): setting datasum, datacow enabled
[  230.226842][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.237071][ T6595] BTRFS info (device loop4): force clearing of disk cache
[  230.245822][ T6595] BTRFS info (device loop4): turning on sync discard
[  230.255318][ T6595] BTRFS warning (device loop4): excessive commit interval 43283
[  230.263744][ T6595] BTRFS info (device loop4): enabling ssd optimizations
[  230.263769][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  230.289152][ T6595] BTRFS info (device loop4): using spread ssd allocation scheme
[  230.308401][ T6595] BTRFS info (device loop4): not using ssd optimizations
[  230.309737][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  230.332888][ T6595] BTRFS info (device loop4): not using spread ssd allocation scheme
[  230.358369][ T6595] BTRFS info (device loop4): using free space tree
[  230.371573][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.379803][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.440046][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  230.476770][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  230.506719][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.513937][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.542593][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  230.594777][ T6595] BTRFS info (device loop4): rebuilding free space tree
[  230.692554][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.750972][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  230.759157][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  230.801659][ T4284] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  230.838501][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  230.880993][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  230.905865][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  231.080900][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[  231.107929][ T6614] device syzkaller0 entered promiscuous mode
[  231.157665][ T6417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  231.176719][ T6417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.401006][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[  232.056529][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.100996][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.119854][ T6571] device bridge_slave_0 entered promiscuous mode
[  233.264095][ T6669] loop4: detected capacity change from 0 to 32768
[  233.304379][ T6669] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.584 (6669)
[  233.348442][ T6669] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.359916][ T6669] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  233.369923][ T6669] BTRFS info (device loop4): setting nodatacow, compression disabled
[  233.382145][ T6669] BTRFS info (device loop4): setting datasum, datacow enabled
[  233.398406][ T6669] BTRFS info (device loop4): force clearing of disk cache
[  233.413171][ T6669] BTRFS info (device loop4): turning on sync discard
[  233.421939][ T6669] BTRFS warning (device loop4): excessive commit interval 43283
[  233.429650][ T6669] BTRFS info (device loop4): enabling ssd optimizations
[  233.441287][ T6669] BTRFS info (device loop4): using spread ssd allocation scheme
[  233.449025][ T6669] BTRFS info (device loop4): not using ssd optimizations
[  233.469009][ T6669] BTRFS info (device loop4): not using spread ssd allocation scheme
[  233.477407][ T6669] BTRFS info (device loop4): using free space tree
[  233.487554][ T4285] Bluetooth: hci3: command 0x040f tx timeout
[  233.730373][ T6669] BTRFS info (device loop4): rebuilding free space tree
[  233.875528][ T4284] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  235.444820][ T6695] loop4: detected capacity change from 0 to 512
[  235.561036][ T4285] Bluetooth: hci3: command 0x0419 tx timeout
[  236.152983][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  236.163365][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  236.172213][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  236.180695][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  236.190057][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  236.199325][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  236.230627][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.243647][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.280660][ T6571] device bridge_slave_1 entered promiscuous mode
[  236.320594][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  236.365265][ T6512] device hsr_slave_0 entered promiscuous mode
[  236.381823][ T6512] device hsr_slave_1 entered promiscuous mode
[  236.400230][ T6512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.427811][ T6512] Cannot create hsr debugfs directory
[  236.490038][ T6571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.513584][ T6571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.657480][ T6571] team0: Port device team_slave_0 added
[  236.706925][ T6571] team0: Port device team_slave_1 added
[  236.762407][ T6716] loop4: detected capacity change from 0 to 1024
[  236.782044][ T6716] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  236.803318][ T6716] EXT4-fs (loop4): barriers disabled
[  236.815712][ T6716] JBD2: no valid journal superblock found
[  236.833116][ T6716] EXT4-fs (loop4): error loading journal
[  236.845986][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.853644][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.028379][ T6571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.126343][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.133477][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.165574][ T6571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.315836][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  237.326984][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.348192][ T6571] device hsr_slave_0 entered promiscuous mode
[  237.359150][ T6571] device hsr_slave_1 entered promiscuous mode
[  237.366684][ T6571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.374993][ T6571] Cannot create hsr debugfs directory
[  237.383984][   T11] tipc: Left network mode
[  237.400454][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.114709][ T6512] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  238.318638][ T6512] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  238.632296][ T6512] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  238.805924][ T6512] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  238.921759][ T6745] loop4: detected capacity change from 0 to 512
[  239.057489][ T6748] device syzkaller0 entered promiscuous mode
[  241.538616][ T6759] device syzkaller0 entered promiscuous mode
[  241.629559][ T6770] netlink: 140 bytes leftover after parsing attributes in process `syz.2.599'.
[  244.712979][ T6791] loop2: detected capacity change from 0 to 512
[  244.810413][ T6791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  244.829580][ T6791] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  244.927044][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  245.336371][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  245.352704][ T6797] loop2: detected capacity change from 0 to 32768
[  245.384805][ T6797] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.605 (6797)
[  245.398061][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  245.450381][ T6797] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  245.470990][ T6797] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  245.486949][ T6797] BTRFS info (device loop2): setting nodatacow, compression disabled
[  245.502370][ T6797] BTRFS info (device loop2): setting datasum, datacow enabled
[  245.544677][ T6797] BTRFS info (device loop2): force clearing of disk cache
[  245.593623][ T6797] BTRFS info (device loop2): turning on sync discard
[  245.614554][ T6797] BTRFS warning (device loop2): excessive commit interval 43283
[  245.640091][ T6797] BTRFS info (device loop2): enabling ssd optimizations
[  245.660897][ T6797] BTRFS info (device loop2): using spread ssd allocation scheme
[  245.695300][ T6797] BTRFS info (device loop2): not using ssd optimizations
[  245.703700][   T11] bond1: (slave gretap1): Releasing active interface
[  245.709879][ T6797] BTRFS info (device loop2): not using spread ssd allocation scheme
[  245.720081][ T6797] BTRFS info (device loop2): using free space tree
[  245.778985][ T6571] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  245.793830][ T6803] netlink: 276 bytes leftover after parsing attributes in process `syz.4.607'.
[  245.816884][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  245.856447][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  245.887711][ T6512] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.917107][ T6571] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  245.946645][ T6797] BTRFS info (device loop2): rebuilding free space tree
[  246.056496][ T6417] device veth0_vlan entered promiscuous mode
[  246.065334][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  246.080561][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  246.089823][ T4270] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  246.119721][ T6571] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  246.146281][ T6571] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  246.467162][ T6417] device veth1_vlan entered promiscuous mode
[  246.512484][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  246.531519][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  246.572185][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  247.450446][ T6512] 8021q: adding VLAN 0 to HW filter on device team0
[  247.527302][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  247.546839][ T6842] loop4: detected capacity change from 0 to 512
[  247.554494][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  247.563668][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.570850][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.606290][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.620216][ T6842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  247.630522][ T6842] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  247.831975][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  247.857861][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  247.879487][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  247.906362][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.913639][ T6557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.941312][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.963384][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.974251][ T6417] device veth0_macvtap entered promiscuous mode
[  248.005832][ T6852] netlink: 276 bytes leftover after parsing attributes in process `syz.4.615'.
[  248.032622][ T6417] device veth1_macvtap entered promiscuous mode
[  248.040008][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  248.058696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  248.067503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  248.088009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  248.123300][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  248.160674][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  249.158430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  249.199536][ T6571] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.258499][ T6512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  249.338359][ T6512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.383550][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.421244][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.450776][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.465406][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.487844][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.500216][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.510154][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.526941][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.562355][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.579594][ T6571] 8021q: adding VLAN 0 to HW filter on device team0
[  249.621177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  249.642307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  249.661583][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  249.680562][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  249.699777][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  249.710425][ T6856] loop4: detected capacity change from 0 to 32768
[  249.717991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  249.733092][ T6856] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.617 (6856)
[  249.757722][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.776966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.794079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  249.803308][ T6856] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  249.818512][ T6856] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  249.834189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  249.847795][ T6856] BTRFS info (device loop4): setting nodatacow, compression disabled
[  249.859161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  249.870549][ T6856] BTRFS info (device loop4): setting datasum, datacow enabled
[  249.881000][ T6856] BTRFS info (device loop4): force clearing of disk cache
[  249.894065][ T6856] BTRFS info (device loop4): turning on sync discard
[  249.924261][ T6856] BTRFS warning (device loop4): excessive commit interval 43283
[  249.979434][ T6856] BTRFS info (device loop4): enabling ssd optimizations
[  250.036979][ T6856] BTRFS info (device loop4): using spread ssd allocation scheme
[  250.131043][ T6856] BTRFS info (device loop4): not using ssd optimizations
[  250.189897][ T6856] BTRFS info (device loop4): not using spread ssd allocation scheme
[  250.270454][ T6856] BTRFS info (device loop4): using free space tree
[  250.739805][ T6856] BTRFS info (device loop4): rebuilding free space tree
[  250.889369][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.911448][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.929006][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.959666][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.990953][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.010832][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.031053][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.050766][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.081892][ T4284] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  251.097277][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.149266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  251.168381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  251.210540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  251.301595][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  251.324344][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.331555][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.354593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  251.363688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  251.394167][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.401399][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.427882][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  251.504937][ T6417] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.536229][ T6417] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.566229][ T6417] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.595102][ T6417] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.646033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  251.659876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  251.682716][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  251.716535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  251.760705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  251.780629][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  251.790342][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  251.819592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  251.843937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  251.889075][ T6571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.937169][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  251.983569][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  252.013654][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  252.149732][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.168540][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  252.229403][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.274933][ T5376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.313574][ T5376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.352686][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.471475][ T5376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.489259][ T5376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.508732][   T11] device hsr_slave_0 left promiscuous mode
[  252.526928][   T11] device hsr_slave_1 left promiscuous mode
[  252.551953][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.559590][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.584128][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.601754][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.612416][   T11] device bridge_slave_1 left promiscuous mode
[  252.618755][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.655263][   T11] device bridge_slave_0 left promiscuous mode
[  252.670986][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.721118][   T11] device hsr_slave_0 left promiscuous mode
[  252.738299][   T11] device hsr_slave_1 left promiscuous mode
[  252.746909][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.770830][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.778917][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.793418][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.811601][   T11] device bridge_slave_1 left promiscuous mode
[  252.817879][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.842801][   T11] device bridge_slave_0 left promiscuous mode
[  252.849084][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.979057][   T11] device veth1_macvtap left promiscuous mode
[  252.988547][   T11] device veth0_macvtap left promiscuous mode
[  252.999718][   T11] device veth1_vlan left promiscuous mode
[  253.015018][   T11] device veth0_vlan left promiscuous mode
[  253.026371][   T11] device veth1_macvtap left promiscuous mode
[  253.037028][   T11] device veth0_macvtap left promiscuous mode
[  253.046661][   T11] device veth1_vlan left promiscuous mode
[  253.057461][   T11] device veth0_vlan left promiscuous mode
[  253.950992][   T11] bond1 (unregistering): Released all slaves
[  254.446414][   T11] team0 (unregistering): Port device team_slave_1 removed
[  254.493349][   T11] team0 (unregistering): Port device team_slave_0 removed
[  254.534018][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.578468][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.892235][   T11] bond0 (unregistering): Released all slaves
[  255.389677][   T11] team0 (unregistering): Port device team_slave_1 removed
[  255.435467][   T11] team0 (unregistering): Port device team_slave_0 removed
[  255.481520][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.534445][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.648972][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.655599][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.872298][   T11] bond0 (unregistering): Released all slaves
[  255.928069][ T5376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  257.254292][ T6948] netlink: 'syz.4.631': attribute type 32 has an invalid length.
[  257.390597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  257.431468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  257.444967][ T6571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.622404][ T6958] loop2: detected capacity change from 0 to 512
[  257.917421][ T6958] device syzkaller0 entered promiscuous mode
[  258.069271][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  258.108150][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  258.498507][ T6512] device veth0_vlan entered promiscuous mode
[  260.807872][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  260.819097][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  260.861750][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  260.880102][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  260.924146][ T6512] device veth1_vlan entered promiscuous mode
[  260.980774][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  260.990473][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  261.034164][ T6512] device veth0_macvtap entered promiscuous mode
[  261.073223][ T6512] device veth1_macvtap entered promiscuous mode
[  261.148770][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.179914][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.199002][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.221013][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.251253][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.270841][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.301358][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.790796][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.850299][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  262.890608][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  262.930968][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  262.969400][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.000517][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.041748][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.067588][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.077663][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.098759][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.121732][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.159824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  263.179764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  263.222531][ T6512] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.232745][ T6512] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.241955][ T6512] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.270873][ T6512] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.296899][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  263.316384][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  263.749771][ T6571] device veth0_vlan entered promiscuous mode
[  263.830182][ T6571] device veth1_vlan entered promiscuous mode
[  264.041300][ T6571] device veth0_macvtap entered promiscuous mode
[  264.120523][ T6571] device veth1_macvtap entered promiscuous mode
[  264.225010][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  264.233811][ T7026] loop7: detected capacity change from 0 to 1024
[  264.242124][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  264.251034][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  264.263427][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  264.271956][ T7026] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  264.283620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  264.292827][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  264.297021][ T7026] EXT4-fs (loop7): barriers disabled
[  264.302868][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  264.321463][ T7026] JBD2: no valid journal superblock found
[  264.327257][ T7026] EXT4-fs (loop7): error loading journal
[  264.418345][ T5563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.455901][ T5563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.468939][ T7027] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  264.513788][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  264.541618][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.581215][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  264.631780][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  264.639578][ T7031] loop2: detected capacity change from 0 to 512
[  264.673203][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.732598][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.760904][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.805164][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.870777][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.920878][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.961017][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.981877][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.027686][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.098397][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  265.117849][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  265.151306][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.155017][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.171714][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.191389][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.250348][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.309498][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.330032][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.375596][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.419345][ T6571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.450675][ T6571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.482573][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.494546][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  265.507050][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  265.774476][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  267.396702][ T7080] program syz.4.654 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  268.245723][ T6571] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.255554][ T6571] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.265153][ T6571] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.274719][ T6571] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.693265][ T7100] loop8: detected capacity change from 0 to 128
[  268.734733][ T7100] FAT-fs (loop8): bogus number of FAT structure
[  268.741124][ T7100] FAT-fs (loop8): Can't find a valid FAT filesystem
[  269.581205][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.589285][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.668975][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  269.769129][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.799699][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.982311][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  270.428848][ T7116] loop7: detected capacity change from 0 to 1024
[  270.543638][ T7116] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  270.632741][ T7116] EXT4-fs (loop7): barriers disabled
[  270.696129][ T7116] JBD2: no valid journal superblock found
[  270.754424][ T7116] EXT4-fs (loop7): error loading journal
[  270.853504][ T7127] loop8: detected capacity change from 0 to 128
[  270.982915][ T7126] device syzkaller0 entered promiscuous mode
[  271.026696][ T7130] loop2: detected capacity change from 0 to 512
[  271.536849][ T7127] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  271.742526][ T7127] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.832615][ T7130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  272.071254][ T7130] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.667: invalid indirect mapped block 32768 (level 2)
[  272.155892][ T7130] EXT4-fs (loop2): 1 orphan inode deleted
[  272.162694][ T7130] EXT4-fs (loop2): 1 truncate cleaned up
[  272.168409][ T7130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  272.305243][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  272.331169][ T6512] EXT4-fs (loop8): unmounting filesystem.
[  272.633870][ T7149] loop2: detected capacity change from 0 to 512
[  272.915252][ T7149] device syzkaller0 entered promiscuous mode
[  275.099057][ T7196] loop4: detected capacity change from 0 to 512
[  275.234007][ T7196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  275.274452][ T7196] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.569876][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  276.582473][ T7209] loop7: detected capacity change from 0 to 1024
[  276.625453][ T7209] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  276.658565][ T7209] EXT4-fs (loop7): barriers disabled
[  276.665754][ T7209] JBD2: no valid journal superblock found
[  276.699811][ T7209] EXT4-fs (loop7): error loading journal
[  279.307980][ T7233] loop7: detected capacity change from 0 to 1024
[  279.378915][ T7233] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  279.416678][ T7233] EXT4-fs (loop7): barriers disabled
[  279.446010][ T7233] JBD2: no valid journal superblock found
[  279.470851][ T7233] EXT4-fs (loop7): error loading journal
[  279.734598][ T7249] program syz.8.694 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.516816][ T7260] loop2: detected capacity change from 0 to 1024
[  280.623876][ T7260] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  280.726374][ T7260] EXT4-fs (loop2): barriers disabled
[  280.769589][ T7260] JBD2: no valid journal superblock found
[  281.760017][ T7260] EXT4-fs (loop2): error loading journal
[  282.339056][ T7286] loop4: detected capacity change from 0 to 128
[  282.376352][ T7286] FAT-fs (loop4): bogus number of FAT structure
[  282.382746][ T7286] FAT-fs (loop4): Can't find a valid FAT filesystem
[  284.480063][ T7319] loop4: detected capacity change from 0 to 1024
[  284.571938][ T7319] ext3: Unknown parameter 'noacl'
[  284.616516][ T7316] Process accounting resumed
[  284.838604][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'.
[  285.434330][ T7339] loop7: detected capacity change from 0 to 128
[  285.442747][ T7339] FAT-fs (loop7): bogus number of FAT structure
[  285.450656][ T7339] FAT-fs (loop7): Can't find a valid FAT filesystem
[  286.154098][ T7355] loop2: detected capacity change from 0 to 1024
[  286.232631][ T7355] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  286.304276][ T7343] sctp: failed to load transform for md5: -2
[  286.330851][ T7346] sctp: failed to load transform for md5: -2
[  286.361073][ T7355] EXT4-fs (loop2): barriers disabled
[  286.366447][ T7355] JBD2: no valid journal superblock found
[  286.515034][ T7355] EXT4-fs (loop2): error loading journal
[  286.796998][ T7104] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  287.055506][ T7367] loop4: detected capacity change from 0 to 512
[  287.269177][ T7372] netlink: 76 bytes leftover after parsing attributes in process `syz.7.726'.
[  288.440668][ T7393] loop2: detected capacity change from 0 to 512
[  288.531861][ T7393] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  288.637172][ T7393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.729: bg 0: block 4: invalid block bitmap
[  288.654288][ T7393] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  288.666462][ T7393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.729: invalid indirect mapped block 1 (level 1)
[  288.685169][ T7393] EXT4-fs (loop2): 1 truncate cleaned up
[  288.692534][ T7393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  289.022774][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  292.380380][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.9.724'.
[  292.761847][ T7417] FAULT_INJECTION: forcing a failure.
[  292.761847][ T7417] name fail_futex, interval 1, probability 0, space 0, times 0
[  292.816274][ T7417] CPU: 0 PID: 7417 Comm: syz.7.737 Not tainted syzkaller #0
[  292.823647][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  292.833762][ T7417] Call Trace:
[  292.837085][ T7417]  <TASK>
[  292.840082][ T7417]  dump_stack_lvl+0x188/0x24e
[  292.844936][ T7417]  ? verify_lock_unused+0x140/0x140
[  292.850190][ T7417]  ? show_regs_print_info+0x12/0x12
[  292.855445][ T7417]  ? load_image+0x410/0x410
[  292.860010][ T7417]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  292.866066][ T7417]  should_fail_ex+0x390/0x4c0
[  292.870816][ T7417]  get_futex_key+0x1b1/0x1000
[  292.875563][ T7417]  ? futex_setup_timer+0xc0/0xc0
[  292.880558][ T7417]  futex_wake+0x123/0x4f0
[  292.884933][ T7417]  ? __might_fault+0xa6/0x120
[  292.889673][ T7417]  ? __might_fault+0xc2/0x120
[  292.894402][ T7417]  ? __might_fault+0xa6/0x120
[  292.899169][ T7417]  ? futex_wake_mark+0x150/0x150
[  292.904165][ T7417]  ? put_user_ifreq+0x81/0xb0
[  292.908942][ T7417]  ? sock_do_ioctl+0x29d/0x320
[  292.913773][ T7417]  do_futex+0x2e2/0x320
[  292.917995][ T7417]  ? __ia32_sys_get_robust_list+0x100/0x100
[  292.923952][ T7417]  __se_sys_futex+0x381/0x410
[  292.928722][ T7417]  ? __x64_sys_futex+0xf0/0xf0
[  292.933632][ T7417]  ? __x64_sys_futex+0x1d/0xf0
[  292.938462][ T7417]  do_syscall_64+0x4c/0xa0
[  292.942932][ T7417]  ? clear_bhb_loop+0x60/0xb0
[  292.947671][ T7417]  ? clear_bhb_loop+0x60/0xb0
[  292.952405][ T7417]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  292.958359][ T7417] RIP: 0033:0x7f6decb9e559
[  292.962821][ T7417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.982478][ T7417] RSP: 002b:00007f6dedb0b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  292.990967][ T7417] RAX: ffffffffffffffda RBX: 00007f6dece25fa8 RCX: 00007f6decb9e559
[  292.998992][ T7417] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6dece25fac
[  293.007015][ T7417] RBP: 00007f6dece25fa0 R08: 002ad0344d5cc1a0 R09: 0000000000000000
[  293.015040][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  293.023162][ T7417] R13: 00007f6dece26038 R14: 00007fff6c5e25b0 R15: 00007fff6c5e2698
[  293.031207][ T7417]  </TASK>
[  293.119014][ T7419] loop9: detected capacity change from 0 to 512
[  293.543557][ T7425] loop9: detected capacity change from 0 to 1024
[  293.601312][ T7425] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  293.649464][ T7425] EXT4-fs (loop9): barriers disabled
[  293.675712][ T7425] JBD2: no valid journal superblock found
[  293.702115][ T7425] EXT4-fs (loop9): error loading journal
[  293.792583][ T7422] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  297.104806][ T7472] loop7: detected capacity change from 0 to 128
[  297.126249][ T7472] FAT-fs (loop7): bogus number of FAT structure
[  297.132724][ T7472] FAT-fs (loop7): Can't find a valid FAT filesystem
[  297.560008][ T7444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  298.123848][ T7477] loop2: detected capacity change from 0 to 512
[  298.347782][ T7477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  298.356833][ T7477] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  298.597601][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  298.618711][ T7492] loop7: detected capacity change from 0 to 1024
[  298.631517][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  298.663616][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  298.708830][ T7492] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  298.742575][ T7492] EXT4-fs (loop7): barriers disabled
[  298.747948][ T7492] JBD2: no valid journal superblock found
[  298.754686][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  298.794253][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  298.806334][ T7492] EXT4-fs (loop7): error loading journal
[  298.849942][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  298.891828][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  298.995031][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  299.042647][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  299.094552][ T4270] EXT4-fs error (device loop2): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  299.647483][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.659169][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.668458][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.683220][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.693093][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  299.700393][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.908406][ T7501] rxe_eth0 speed is unknown, defaulting to 1000
[  300.040840][ T7513] netlink: 76 bytes leftover after parsing attributes in process `syz.9.747'.
[  300.711847][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  301.059162][ T6557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.236149][ T6557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.437455][ T6557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.482433][ T7547] loop7: detected capacity change from 0 to 512
[  301.503690][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'.
[  301.583314][ T7545] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92
[  301.682850][ T6557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.722088][ T4285] Bluetooth: hci5: command 0x0409 tx timeout
[  301.818630][ T7557] loop9: detected capacity change from 0 to 512
[  301.900099][ T7557] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  301.909987][ T7557] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  302.100681][ T7564] loop4: detected capacity change from 0 to 1024
[  302.203517][ T7564] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  302.263796][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.294014][ T7564] EXT4-fs (loop4): barriers disabled
[  302.299382][ T7564] JBD2: no valid journal superblock found
[  302.318547][ T7564] EXT4-fs (loop4): error loading journal
[  302.346268][ T7501] chnl_net:caif_netlink_parms(): no params data found
[  302.354000][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.453970][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.488062][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.506923][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.519652][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.538414][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.587241][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.612173][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.626137][ T6571] EXT4-fs error (device loop9): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size
[  302.662860][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.673046][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.689253][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.861691][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.941023][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  302.956459][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.213477][ T7566] rxe_eth0 speed is unknown, defaulting to 1000
[  303.435501][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.448372][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.477005][ T7501] device bridge_slave_0 entered promiscuous mode
[  303.511852][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.548298][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.582708][ T7501] device bridge_slave_1 entered promiscuous mode
[  304.011787][ T4285] Bluetooth: hci5: command 0x041b tx timeout
[  304.463397][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.648111][ T6571] EXT4-fs (loop9): unmounting filesystem.
[  304.660600][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.822515][ T7501] team0: Port device team_slave_0 added
[  304.951476][ T7586] netlink: 76 bytes leftover after parsing attributes in process `syz.4.772'.
[  305.000710][ T7501] team0: Port device team_slave_1 added
[  305.081129][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[  305.178247][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.196968][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.290856][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.334511][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.367284][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.406578][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.515058][ T7566] chnl_net:caif_netlink_parms(): no params data found
[  305.610557][ T7501] device hsr_slave_0 entered promiscuous mode
[  305.639977][ T7501] device hsr_slave_1 entered promiscuous mode
[  305.660196][ T7501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.686105][ T7501] Cannot create hsr debugfs directory
[  305.737532][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'.
[  305.915302][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  305.926164][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  305.936641][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  305.944759][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  305.968524][ T7612] loop4: detected capacity change from 0 to 1024
[  305.976904][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  306.001149][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.003057][ T7612] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  306.034212][ T7612] EXT4-fs (loop4): barriers disabled
[  306.052645][ T4289] Bluetooth: hci5: command 0x040f tx timeout
[  306.059440][ T7612] JBD2: no valid journal superblock found
[  306.069541][ T7612] EXT4-fs (loop4): error loading journal
[  306.206481][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.231870][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.248657][ T7566] device bridge_slave_0 entered promiscuous mode
[  306.273760][ T7609] rxe_eth0 speed is unknown, defaulting to 1000
[  306.280374][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.302860][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.317478][ T7566] device bridge_slave_1 entered promiscuous mode
[  306.430080][ T7616] loop7: detected capacity change from 0 to 512
[  306.466682][ T7616] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00080002)
[  306.510260][ T7616] FAT-fs (loop7): Filesystem has been set read-only
[  306.670244][ T7566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.743157][ T7566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.049727][ T7566] team0: Port device team_slave_0 added
[  307.068276][ T7566] team0: Port device team_slave_1 added
[  307.120281][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.138157][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.170832][ T4285] Bluetooth: hci0: command 0x041b tx timeout
[  307.187031][ T7566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.209113][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.219815][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.258649][ T7566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.343786][ T7566] device hsr_slave_0 entered promiscuous mode
[  307.364151][ T7566] device hsr_slave_1 entered promiscuous mode
[  307.377190][ T7566] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.389118][ T7566] Cannot create hsr debugfs directory
[  307.599888][ T6557] device hsr_slave_0 left promiscuous mode
[  307.607702][ T6557] device hsr_slave_1 left promiscuous mode
[  307.615377][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.638179][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.661606][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.669106][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.691596][ T6557] device bridge_slave_1 left promiscuous mode
[  307.698676][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.712324][ T6557] device bridge_slave_0 left promiscuous mode
[  307.718644][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.780485][ T6557] device veth1_macvtap left promiscuous mode
[  307.787235][ T6557] device veth0_macvtap left promiscuous mode
[  307.795235][ T6557] device veth1_vlan left promiscuous mode
[  307.801248][ T6557] device veth0_vlan left promiscuous mode
[  308.124514][ T4289] Bluetooth: hci2: command 0x0409 tx timeout
[  308.131450][ T4285] Bluetooth: hci5: command 0x0419 tx timeout
[  308.554606][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  308.604350][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  308.657029][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.709603][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.035994][ T6557] bond0 (unregistering): Released all slaves
[  309.223863][ T7624] netlink: 76 bytes leftover after parsing attributes in process `syz.4.785'.
[  309.243001][ T4289] Bluetooth: hci0: command 0x040f tx timeout
[  310.577217][ T7653] loop4: detected capacity change from 0 to 512
[  310.631176][ T7609] chnl_net:caif_netlink_parms(): no params data found
[  310.709306][ T7655] loop7: detected capacity change from 0 to 1024
[  310.801814][ T7655] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  310.817445][ T7653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  310.862215][ T7653] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  310.930832][ T7655] EXT4-fs (loop7): barriers disabled
[  310.956678][ T7655] JBD2: no valid journal superblock found
[  310.981022][ T7655] EXT4-fs (loop7): error loading journal
[  311.201871][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.228283][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.248229][ T4289] Bluetooth: hci2: command 0x041b tx timeout
[  311.260104][ T7609] device bridge_slave_0 entered promiscuous mode
[  311.285748][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.293111][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.302259][ T7609] device bridge_slave_1 entered promiscuous mode
[  311.322170][ T4289] Bluetooth: hci0: command 0x0419 tx timeout
[  311.346623][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.359394][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.369241][ T7653] loop4: detected capacity change from 512 to 64
[  311.475078][ T7609] team0: Port device team_slave_0 added
[  311.489168][ T4284] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Out of memory
[  311.512248][ T7609] team0: Port device team_slave_1 added
[  311.523469][ T4284] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz-executor: mark_inode_dirty error
[  311.769399][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.791860][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.840738][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.929166][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.938954][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.977002][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  312.026840][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.255001][ T7609] device hsr_slave_0 entered promiscuous mode
[  312.299892][ T7609] device hsr_slave_1 entered promiscuous mode
[  312.312395][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  312.320107][ T7609] Cannot create hsr debugfs directory
[  312.685340][ T6557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.814520][ T6557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.943046][ T6557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.997512][ T7501] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  313.079775][ T6557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.097788][ T7501] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  313.138283][ T7501] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  313.172132][ T7501] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  313.188053][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.199606][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.207709][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.217146][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.226017][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  313.233373][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.321744][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[  313.367947][ T7566] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  313.414252][ T7566] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  313.534788][ T6557] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.139173][ T7668] rxe_eth0 speed is unknown, defaulting to 1000
[  314.171888][ T7566] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  314.333753][ T7686] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  314.397062][ T6557] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.579209][ T7566] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  314.768258][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.874374][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  314.888571][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  314.918507][ T7501] 8021q: adding VLAN 0 to HW filter on device team0
[  314.985557][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  315.006907][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  315.044014][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.051270][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.153535][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  315.192115][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  315.229388][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  315.271394][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.278585][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.316409][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  315.332876][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[  315.339679][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  315.357364][ T7566] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.400276][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  315.412014][ T4289] Bluetooth: hci2: command 0x0419 tx timeout
[  315.418622][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  315.456982][ T6557] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.555949][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  315.575569][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  315.592734][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  315.635504][ T6557] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.751495][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  315.767912][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  315.790608][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  315.811916][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  315.827830][ T7566] 8021q: adding VLAN 0 to HW filter on device team0
[  315.846262][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  315.882593][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  315.892266][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  315.900323][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  315.909787][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  315.919371][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.926573][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.935627][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  315.944976][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  315.954029][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.961214][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.970282][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  316.006281][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  316.040674][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  316.151496][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  316.175122][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  316.209626][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  316.242140][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  316.251330][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  316.296097][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  316.307717][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  316.324955][ T7668] chnl_net:caif_netlink_parms(): no params data found
[  316.457166][ T6557] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.479499][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  316.488762][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  316.528464][ T7566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  316.572147][ T7713] loop7: detected capacity change from 0 to 512
[  316.652321][ T7713] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  316.684552][ T6557] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.696330][ T7713] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  316.736320][ T7609] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  316.811259][ T7609] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  316.891958][ T7713] loop7: detected capacity change from 512 to 64
[  316.931692][ T6557] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.983389][ T7609] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  317.040993][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.048597][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.084715][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.092928][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.101023][ T7609] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  317.108386][ T6417] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Out of memory
[  317.118314][ T6417] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #2: comm syz-executor: mark_inode_dirty error
[  317.191858][ T6557] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.266140][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.358840][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.377559][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.401610][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[  317.409888][ T7668] device bridge_slave_0 entered promiscuous mode
[  317.440434][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.461981][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.479473][ T7668] device bridge_slave_1 entered promiscuous mode
[  317.496501][ T6417] EXT4-fs (loop7): unmounting filesystem.
[  317.643292][ T7668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.673839][ T7668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.740178][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  317.772031][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  317.802203][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.809823][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.866650][ T7566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.887610][ T7668] team0: Port device team_slave_0 added
[  317.992736][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  318.012348][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  318.046048][ T7668] team0: Port device team_slave_1 added
[  318.124053][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.139996][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  318.162182][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  318.181517][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  318.204920][ T7501] device veth0_vlan entered promiscuous mode
[  318.221166][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.228208][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.290281][ T7668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.312855][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.319866][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.357773][ T7668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.390296][ T7566] device veth0_vlan entered promiscuous mode
[  318.427866][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  318.441829][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  318.471431][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.491519][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  318.521969][ T7501] device veth1_vlan entered promiscuous mode
[  318.572494][ T7566] device veth1_vlan entered promiscuous mode
[  318.589841][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.621402][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  318.635488][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  318.647695][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  318.699110][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  318.717980][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  318.726194][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.735737][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.746724][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.778825][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.786651][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  318.800077][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  318.818523][ T7609] 8021q: adding VLAN 0 to HW filter on device team0
[  318.883402][ T7668] device hsr_slave_0 entered promiscuous mode
[  318.911172][ T7668] device hsr_slave_1 entered promiscuous mode
[  318.920342][ T7668] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.952157][ T7668] Cannot create hsr debugfs directory
[  318.980341][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  318.989750][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  319.018050][ T7566] device veth0_macvtap entered promiscuous mode
[  319.039090][ T7566] device veth1_macvtap entered promiscuous mode
[  319.081287][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  319.090123][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  319.110388][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  319.120421][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  319.137677][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  319.150425][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.157636][ T7350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.182425][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  319.199846][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  319.209515][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.216710][ T7350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.226873][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  319.235633][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  319.429616][ T7501] device veth0_macvtap entered promiscuous mode
[  319.449439][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  319.467632][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  319.491008][ T4289] Bluetooth: hci3: command 0x040f tx timeout
[  319.612350][ T7501] device veth1_macvtap entered promiscuous mode
[  319.621663][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  319.629974][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  319.643849][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  319.655561][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  319.664524][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  319.674649][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  319.684710][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.695775][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.706061][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.716899][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.727422][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.738134][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.748357][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.759092][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.771497][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.789667][ T7609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  319.802148][ T7609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  319.821184][ T7745] rxe_eth0 speed is unknown, defaulting to 1000
[  319.955795][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  319.971823][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  319.991463][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  320.011372][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  320.024553][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  320.034337][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  320.043376][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  320.061113][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  320.073234][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.094658][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.109401][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.129189][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.139432][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.159763][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.180022][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.192466][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.206131][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.219501][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.231349][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.241597][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.252586][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.269200][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.279971][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.305884][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.320007][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.339493][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.350542][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.372741][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.470166][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  320.479916][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  320.489688][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  320.511998][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  320.546770][ T7566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.556183][ T7566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.574006][ T7566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.588838][ T7566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.625877][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.639324][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.651546][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.663033][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.673324][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.684822][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.695041][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.707260][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.717911][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.729816][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.761685][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.851233][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[  320.915071][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  320.932097][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  320.954803][ T7501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.965999][ T7501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.976386][ T7501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.985509][ T7501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.486267][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  321.502289][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  321.561633][ T4289] Bluetooth: hci3: command 0x0419 tx timeout
[  321.579856][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.751608][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.759501][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.068334][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  322.095167][ T4621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.149812][ T4621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.253418][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  322.372149][ T4621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.413637][ T4621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.428037][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  322.453727][ T4621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.481361][ T7745] chnl_net:caif_netlink_parms(): no params data found
[  322.482899][ T4621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.521338][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  322.923638][ T4288] Bluetooth: hci1: command 0x041b tx timeout
[  322.932910][ T7812] loop3: detected capacity change from 0 to 128
[  322.973014][ T7812] FAT-fs (loop3): bogus number of FAT structure
[  322.979390][ T7812] FAT-fs (loop3): Can't find a valid FAT filesystem
[  323.686672][ T7677] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  323.703734][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.741909][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.758830][ T7745] device bridge_slave_0 entered promiscuous mode
[  324.141997][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.420875][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.483147][ T7745] device bridge_slave_1 entered promiscuous mode
[  324.686124][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.762997][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.911865][ T7745] team0: Port device team_slave_0 added
[  324.945947][ T7745] team0: Port device team_slave_1 added
[  325.067852][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.101173][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.220329][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.265254][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.302959][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.442374][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.445202][ T4288] Bluetooth: hci1: command 0x040f tx timeout
[  325.698021][ T7831] loop3: detected capacity change from 0 to 512
[  325.818017][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  325.853003][ T7831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  325.861922][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  325.871350][ T7831] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  325.976229][ T7745] device hsr_slave_0 entered promiscuous mode
[  325.997959][ T7745] device hsr_slave_1 entered promiscuous mode
[  326.008912][ T7745] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.030559][ T7745] Cannot create hsr debugfs directory
[  326.049732][ T7609] device veth0_vlan entered promiscuous mode
[  326.071456][ T7831] loop3: detected capacity change from 512 to 64
[  326.186861][ T7566] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory
[  326.198526][ T7566] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz-executor: mark_inode_dirty error
[  326.217384][ T7668] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  326.239321][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  326.251746][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  326.292590][ T7609] device veth1_vlan entered promiscuous mode
[  326.311868][ T7668] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  326.356247][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  326.383966][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  326.410133][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  326.428508][ T7668] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  326.566213][ T7850] WARNING! power/level is deprecated; use power/control instead
[  326.724822][ T7668] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  326.747341][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  326.753033][ T7855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.812'.
[  326.803331][ T7566] EXT4-fs (loop3): unmounting filesystem.
[  326.811955][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'.
[  326.962866][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  326.982000][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  327.016464][ T7609] device veth0_macvtap entered promiscuous mode
[  327.127262][ T7609] device veth1_macvtap entered promiscuous mode
[  327.291997][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.330469][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.366025][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.410864][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.431645][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.481077][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.481282][ T4288] Bluetooth: hci1: command 0x0419 tx timeout
[  327.515005][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.525942][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.536639][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.547218][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.557446][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.577044][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.594459][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.622893][ T6557] device hsr_slave_0 left promiscuous mode
[  327.631145][ T6557] device hsr_slave_1 left promiscuous mode
[  327.661583][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.669148][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.687577][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.710806][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.725369][ T6557] device bridge_slave_1 left promiscuous mode
[  327.740986][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.750203][ T6557] device bridge_slave_0 left promiscuous mode
[  327.761659][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.813224][ T6557] device hsr_slave_0 left promiscuous mode
[  327.831055][ T6557] device hsr_slave_1 left promiscuous mode
[  327.841125][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.848722][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.881921][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.889417][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.911885][ T6557] device bridge_slave_1 left promiscuous mode
[  327.918182][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.942280][ T6557] device bridge_slave_0 left promiscuous mode
[  327.948639][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.991281][ T6557] device hsr_slave_0 left promiscuous mode
[  328.020977][ T6557] device hsr_slave_1 left promiscuous mode
[  328.033510][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.059871][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.092409][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.099924][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.113876][ T6557] device bridge_slave_1 left promiscuous mode
[  328.120265][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.148327][ T6557] device bridge_slave_0 left promiscuous mode
[  328.162683][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.274337][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  328.285502][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  328.294484][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  328.312227][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  328.321438][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  328.330091][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  328.377591][ T6557] device veth1_macvtap left promiscuous mode
[  328.383864][ T6557] device veth0_macvtap left promiscuous mode
[  328.390017][ T6557] device veth1_vlan left promiscuous mode
[  328.397353][ T6557] device veth0_vlan left promiscuous mode
[  328.406476][ T6557] device veth1_macvtap left promiscuous mode
[  328.412997][ T6557] device veth0_macvtap left promiscuous mode
[  328.419257][ T6557] device veth1_vlan left promiscuous mode
[  328.426076][ T6557] device veth0_vlan left promiscuous mode
[  328.447008][ T6557] device veth1_macvtap left promiscuous mode
[  328.461116][ T6557] device veth0_macvtap left promiscuous mode
[  328.472858][ T6557] device veth1_vlan left promiscuous mode
[  328.495901][ T6557] device veth0_vlan left promiscuous mode
[  330.318488][ T7912] 
[  330.320908][ T7912] ======================================================
[  330.327965][ T7912] WARNING: possible circular locking dependency detected
[  330.335120][ T7912] syzkaller #0 Not tainted
[  330.339601][ T7912] ------------------------------------------------------
[  330.346654][ T7912] syz.0.821/7912 is trying to acquire lock:
[  330.352584][ T7912] ffff888055df3350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x8de/0xd10
[  330.361789][ T7912] 
[  330.361789][ T7912] but task is already holding lock:
[  330.361818][ T4288] Bluetooth: hci0: command 0x0409 tx timeout
[  330.369164][ T7912] ffff888055df0510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340
[  330.385821][ T7912] 
[  330.385821][ T7912] which lock already depends on the new lock.
[  330.385821][ T7912] 
[  330.396295][ T7912] 
[  330.396295][ T7912] the existing dependency chain (in reverse order) is:
[  330.405348][ T7912] 
[  330.405348][ T7912] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}:
[  330.414106][ T7912]        __mutex_lock+0x12d/0xae0
[  330.419183][ T7912]        nfc_urelease_event_work+0x120/0x310
[  330.425208][ T7912]        process_one_work+0x8ab/0x1160
[  330.430711][ T7912]        worker_thread+0xaf5/0x12a0
[  330.435962][ T7912]        kthread+0x29d/0x330
[  330.440600][ T7912]        ret_from_fork+0x1f/0x30
[  330.445592][ T7912] 
[  330.445592][ T7912] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}:
[  330.453457][ T7912]        __mutex_lock+0x12d/0xae0
[  330.458529][ T7912]        nfc_register_device+0x38/0x300
[  330.464121][ T7912]        nci_register_device+0x89f/0x9f0
[  330.469801][ T7912]        virtual_ncidev_open+0x55/0xc0
[  330.475315][ T7912]        misc_open+0x31f/0x390
[  330.480135][ T7912]        chrdev_open+0x585/0x5f0
[  330.485123][ T7912]        do_dentry_open+0x7dd/0x10b0
[  330.490456][ T7912]        path_openat+0x2674/0x2f10
[  330.495622][ T7912]        do_filp_open+0x1ee/0x420
[  330.500695][ T7912]        do_sys_openat2+0x14b/0x4f0
[  330.505948][ T7912]        __x64_sys_openat+0x135/0x160
[  330.511383][ T7912]        do_syscall_64+0x4c/0xa0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  330.516408][ T7912]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.522867][ T7912] 
[  330.522867][ T7912] -> #1 (nci_mutex){+.+.}-{3:3}:
[  330.530035][ T7912]        __mutex_lock+0x12d/0xae0
[  330.535106][ T7912]        virtual_nci_close+0x13/0x40
[  330.540443][ T7912]        nci_dev_up+0x976/0xd90
[  330.545347][ T7912]        nfc_dev_up+0x15d/0x310
[  330.550306][ T7912]        nfc_genl_dev_up+0x85/0xd0
[  330.555461][ T7912]        genl_family_rcv_msg_doit+0x22f/0x350
[  330.561581][ T7912]        genl_rcv_msg+0x601/0x790
[  330.566654][ T7912]        netlink_rcv_skb+0x1ef/0x440
[  330.571983][ T7912]        genl_rcv+0x24/0x40
[  330.576534][ T7912]        netlink_unicast+0x7ad/0x920
[  330.581862][ T7912]        netlink_sendmsg+0x8ad/0xbd0
[  330.587184][ T7912]        ____sys_sendmsg+0x5ed/0x9a0
[  330.592514][ T7912]        ___sys_sendmsg+0x2a2/0x360
[  330.597783][ T7912]        __se_sys_sendmsg+0x1c3/0x2b0
[  330.603194][ T7912]        do_syscall_64+0x4c/0xa0
[  330.608171][ T7912]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.614626][ T7912] 
[  330.614626][ T7912] -> #0 (&ndev->req_lock){+.+.}-{3:3}:
[  330.622404][ T7912]        __lock_acquire+0x3a03/0x7ea0
[  330.627822][ T7912]        lock_acquire+0x1bc/0x4a0
[  330.632901][ T7912]        __mutex_lock+0x12d/0xae0
[  330.637997][ T7912]        nci_start_poll+0x8de/0xd10
[  330.643263][ T7912]        nfc_start_poll+0x141/0x2c0
[  330.648509][ T7912]        nfc_genl_start_poll+0x1d7/0x340
[  330.654182][ T7912]        genl_family_rcv_msg_doit+0x22f/0x350
[  330.660297][ T7912]        genl_rcv_msg+0x601/0x790
[  330.665379][ T7912]        netlink_rcv_skb+0x1ef/0x440
[  330.670720][ T7912]        genl_rcv+0x24/0x40
[  330.675267][ T7912]        netlink_unicast+0x7ad/0x920
[  330.680625][ T7912]        netlink_sendmsg+0x8ad/0xbd0
[  330.685956][ T7912]        ____sys_sendmsg+0x5ed/0x9a0
[  330.691303][ T7912]        ___sys_sendmsg+0x2a2/0x360
[  330.696550][ T7912]        __se_sys_sendmsg+0x1c3/0x2b0
[  330.701963][ T7912]        do_syscall_64+0x4c/0xa0
[  330.706946][ T7912]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.713409][ T7912] 
[  330.713409][ T7912] other info that might help us debug this:
[  330.713409][ T7912] 
[  330.723680][ T7912] Chain exists of:
[  330.723680][ T7912]   &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex
[  330.723680][ T7912] 
[  330.737994][ T7912]  Possible unsafe locking scenario:
[  330.737994][ T7912] 
[  330.745473][ T7912]        CPU0                    CPU1
[  330.750868][ T7912]        ----                    ----
[  330.756267][ T7912]   lock(&genl_data->genl_data_mutex);
[  330.761803][ T7912]                                lock(nfc_devlist_mutex);
[  330.768960][ T7912]                                lock(&genl_data->genl_data_mutex);
[  330.776980][ T7912]   lock(&ndev->req_lock);
[  330.781437][ T7912] 
[  330.781437][ T7912]  *** DEADLOCK ***
[  330.781437][ T7912] 
[  330.789615][ T7912] 4 locks held by syz.0.821/7912:
[  330.794673][ T7912]  #0: ffffffff8ebb71d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40
[  330.802924][ T7912]  #1: ffffffff8ebb6fe8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790
[  330.811956][ T7912]  #2: ffff888055df0510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340
[  330.823068][ T7912]  #3: ffff888055df0100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0
[  330.832391][ T7912] 
[  330.832391][ T7912] stack backtrace:
[  330.838317][ T7912] CPU: 1 PID: 7912 Comm: syz.0.821 Not tainted syzkaller #0
[  330.845651][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  330.855740][ T7912] Call Trace:
[  330.859067][ T7912]  <TASK>
[  330.862044][ T7912]  dump_stack_lvl+0x188/0x24e
[  330.866764][ T7912]  ? load_image+0x410/0x410
[  330.871291][ T7912]  ? show_regs_print_info+0x12/0x12
[  330.876535][ T7912]  ? print_circular_bug+0x12b/0x1a0
[  330.881760][ T7912]  check_noncircular+0x2f8/0x400
[  330.886752][ T7912]  ? print_deadlock_bug+0x5d0/0x5d0
[  330.892003][ T7912]  ? lockdep_lock+0xf1/0x1f0
[  330.896672][ T7912]  ? _find_first_zero_bit+0xd2/0x100
[  330.902036][ T7912]  __lock_acquire+0x3a03/0x7ea0
[  330.906947][ T7912]  ? arch_stack_walk+0xf2/0x140
[  330.911848][ T7912]  ? verify_lock_unused+0x140/0x140
[  330.917101][ T7912]  ? stack_trace_save+0xa6/0xf0
[  330.922012][ T7912]  ? stack_trace_snprint+0xe0/0xe0
[  330.927168][ T7912]  ? check_noncircular+0x186/0x400
[  330.932337][ T7912]  ? print_deadlock_bug+0x5d0/0x5d0
[  330.937637][ T7912]  lock_acquire+0x1bc/0x4a0
[  330.942191][ T7912]  ? nci_start_poll+0x8de/0xd10
[  330.947096][ T7912]  ? __might_sleep+0xd0/0xd0
[  330.951726][ T7912]  ? read_lock_is_recursive+0x10/0x10
[  330.957153][ T7912]  __mutex_lock+0x12d/0xae0
[  330.961726][ T7912]  ? nci_start_poll+0x8de/0xd10
[  330.966626][ T7912]  ? verify_lock_unused+0x140/0x140
[  330.971874][ T7912]  ? nci_start_poll+0x8de/0xd10
[  330.976782][ T7912]  ? mutex_lock_nested+0x10/0x10
[  330.981780][ T7912]  nci_start_poll+0x8de/0xd10
[  330.986540][ T7912]  ? nci_dev_down+0x40/0x40
[  330.991096][ T7912]  ? trace_raw_output_contention_end+0xd0/0xd0
[  330.997307][ T7912]  ? __mutex_trylock_common+0x15c/0x260
[  331.002903][ T7912]  ? rcu_is_watching+0x11/0xa0
[  331.007717][ T7912]  ? trace_contention_end+0x5f/0x170
[  331.013046][ T7912]  ? __mutex_lock+0x1ab/0xae0
[  331.017776][ T7912]  ? trace_contention_end+0x5f/0x170
[  331.023108][ T7912]  ? __mutex_lock+0x1ab/0xae0
[  331.027836][ T7912]  ? nfc_start_poll+0x4f/0x2c0
[  331.032681][ T7912]  ? mutex_lock_nested+0x10/0x10
[  331.037940][ T7912]  ? nfc_genl_start_poll+0x1c9/0x340
[  331.043284][ T7912]  ? nfc_get_device+0x82/0xd0
[  331.048020][ T7912]  ? nfc_release+0x2e0/0x2e0
[  331.052689][ T7912]  nfc_start_poll+0x141/0x2c0
[  331.057424][ T7912]  nfc_genl_start_poll+0x1d7/0x340
[  331.062592][ T7912]  genl_family_rcv_msg_doit+0x22f/0x350
[  331.068188][ T7912]  ? end_current_label_crit_section+0x170/0x170
[  331.074498][ T7912]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  331.080456][ T7912]  ? bpf_lsm_capable+0x5/0x10
[  331.085175][ T7912]  ? security_capable+0x85/0xb0
[  331.090077][ T7912]  genl_rcv_msg+0x601/0x790
[  331.094639][ T7912]  ? genl_bind+0x360/0x360
[  331.099100][ T7912]  ? nfc_genl_dev_down+0xd0/0xd0
[  331.104087][ T7912]  netlink_rcv_skb+0x1ef/0x440
[  331.108900][ T7912]  ? genl_bind+0x360/0x360
[  331.113366][ T7912]  ? netlink_ack+0x1160/0x1160
[  331.118175][ T7912]  ? down_read+0x1a8/0x2d0
[  331.122649][ T7912]  genl_rcv+0x24/0x40
[  331.126680][ T7912]  netlink_unicast+0x7ad/0x920
[  331.131502][ T7912]  netlink_sendmsg+0x8ad/0xbd0
[  331.136314][ T7912]  ? netlink_getsockopt+0x550/0x550
[  331.141563][ T7912]  ? apparmor_socket_sendmsg+0x8a/0x330
[  331.147165][ T7912]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  331.152495][ T7912]  ? security_socket_sendmsg+0x7c/0xa0
[  331.158023][ T7912]  ? netlink_getsockopt+0x550/0x550
[  331.163295][ T7912]  ____sys_sendmsg+0x5ed/0x9a0
[  331.168108][ T7912]  ? __sys_sendmsg_sock+0x30/0x30
[  331.173205][ T7912]  ? __import_iovec+0x306/0x510
[  331.178114][ T7912]  ? import_iovec+0x6f/0xa0
[  331.182670][ T7912]  ___sys_sendmsg+0x2a2/0x360
[  331.187398][ T7912]  ? __sys_sendmsg+0x2a0/0x2a0
[  331.192323][ T7912]  __se_sys_sendmsg+0x1c3/0x2b0
[  331.197246][ T7912]  ? __x64_sys_sendmsg+0x80/0x80
[  331.202265][ T7912]  ? lockdep_hardirqs_on+0x94/0x140
[  331.207520][ T7912]  do_syscall_64+0x4c/0xa0
[  331.211998][ T7912]  ? clear_bhb_loop+0x60/0xb0
[  331.216724][ T7912]  ? clear_bhb_loop+0x60/0xb0
[  331.221459][ T7912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  331.227395][ T7912] RIP: 0033:0x7fb85779e559
[  331.231849][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.251508][ T7912] RSP: 002b:00007fb8559d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.259975][ T7912] RAX: ffffffffffffffda RBX: 00007fb857a26090 RCX: 00007fb85779e559
[  331.267998][ T7912] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  331.276015][ T7912] RBP: 00007fb857835ab8 R08: 0000000000000000 R09: 0000000000000000
[  331.284026][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.292035][ T7912] R13: 00007fb857a26128 R14: 00007fb857a26090 R15: 00007ffd0e3e8948
[  331.300061][ T7912]  </TASK>
[  331.327040][ T7912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  331.451267][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  331.555001][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  331.658752][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.727287][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.089120][ T6557] bond0 (unregistering): Released all slaves
[  332.441467][ T4288] Bluetooth: hci0: command 0x041b tx timeout
[  332.759260][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  332.807523][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  332.852729][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.913477][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.224825][ T6557] bond0 (unregistering): Released all slaves
[  333.624288][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  333.663185][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  333.698870][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.744211][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.016702][ T6557] bond0 (unregistering): Released all slaves
[  334.066968][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  334.076109][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  334.087035][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  334.098442][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  334.412889][ T7912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  334.522040][ T4288] Bluetooth: hci0: command 0x040f tx timeout
[  336.091950][ T6557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.129332][ T6557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.186801][ T6557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.236796][ T6557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.338612][ T6557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.385000][ T6557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.447095][ T6557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.485836][ T6557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.975361][ T6557] device hsr_slave_0 left promiscuous mode
[  337.984578][ T6557] device hsr_slave_1 left promiscuous mode
[  337.992477][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.999927][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.010542][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.018653][ T6557] device bridge_slave_1 left promiscuous mode
[  338.027176][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.035807][ T6557] device bridge_slave_0 left promiscuous mode
[  338.044493][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.056152][ T6557] device hsr_slave_0 left promiscuous mode
[  338.064792][ T6557] device hsr_slave_1 left promiscuous mode
[  338.071431][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.079028][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.089214][ T6557] device bridge_slave_1 left promiscuous mode
[  338.095863][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.107702][ T6557] device bridge_slave_0 left promiscuous mode
[  338.114004][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.127892][ T6557] device hsr_slave_0 left promiscuous mode
[  338.134618][ T6557] device hsr_slave_1 left promiscuous mode
[  338.143465][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.151317][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.159814][ T6557] device bridge_slave_1 left promiscuous mode
[  338.168691][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.177028][ T6557] device bridge_slave_0 left promiscuous mode
[  338.185386][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.196703][ T6557] device hsr_slave_0 left promiscuous mode
[  338.206649][ T6557] device hsr_slave_1 left promiscuous mode
[  338.215040][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.224894][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.233245][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.242963][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.250644][ T6557] device bridge_slave_1 left promiscuous mode
[  338.257163][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.267999][ T6557] device bridge_slave_0 left promiscuous mode
[  338.274431][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.288477][ T6557] device hsr_slave_0 left promiscuous mode
[  338.294930][ T6557] device hsr_slave_1 left promiscuous mode
[  338.303855][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.312152][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.319917][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.331088][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.338797][ T6557] device bridge_slave_1 left promiscuous mode
[  338.345240][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.353746][ T6557] device bridge_slave_0 left promiscuous mode
[  338.359948][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.373011][ T6557] device veth1_macvtap left promiscuous mode
[  338.379071][ T6557] device veth0_macvtap left promiscuous mode
[  338.385298][ T6557] device veth1_vlan left promiscuous mode
[  338.391296][ T6557] device veth0_vlan left promiscuous mode
[  338.397704][ T6557] device veth1_macvtap left promiscuous mode
[  338.404091][ T6557] device veth0_macvtap left promiscuous mode
[  338.410166][ T6557] device veth1_vlan left promiscuous mode
[  338.416190][ T6557] device veth0_vlan left promiscuous mode
[  338.423443][ T6557] device veth1_macvtap left promiscuous mode
[  338.429480][ T6557] device veth0_macvtap left promiscuous mode
[  338.435708][ T6557] device veth1_vlan left promiscuous mode
[  338.441615][ T6557] device veth0_vlan left promiscuous mode
[  338.688225][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  338.718919][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  338.731357][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  338.744686][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.793244][ T6557] bond0 (unregistering): Released all slaves
[  338.876422][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  338.900588][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  338.911991][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  338.924986][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.968265][ T6557] bond0 (unregistering): Released all slaves
[  339.069395][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  339.094454][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  339.118150][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.145159][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.186847][ T6557] bond0 (unregistering): Released all slaves
[  339.264814][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  339.290074][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  339.301871][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.331156][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.382213][ T6557] bond0 (unregistering): Released all slaves
[  339.488249][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  339.513090][ T6557] team0 (unregistering): Port device team_slave_0 removed
[  339.525795][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.538855][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.588750][ T6557] bond0 (unregistering): Released all slaves