last executing test programs:

35.951233351s ago: executing program 2 (id=205):
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
setuid(0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)

35.356264908s ago: executing program 1 (id=210):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

34.924909628s ago: executing program 2 (id=213):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f21b034000f21c93c0f20c087531d440f22c066b8af00c4c2c9981500f0000066b8590066b83d018e9bf0f0b887008ee867360f062e0f09", 0x38}], 0x1, 0x8, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000340)=[@wrmsr={0x65, 0x20, {0x400000b2, 0xda71}}], 0x20})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

34.48432325s ago: executing program 1 (id=215):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
close_range(r0, 0xffffffffffffffff, 0x0)

34.484068061s ago: executing program 2 (id=216):
socket(0x2, 0x80805, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

32.853936864s ago: executing program 2 (id=222):
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612", @ANYRESDEC], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

30.964475909s ago: executing program 2 (id=229):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4)

26.330823445s ago: executing program 2 (id=242):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
close_range(r1, r3, 0x0)

25.719663104s ago: executing program 32 (id=242):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
close_range(r1, r3, 0x0)

6.330988318s ago: executing program 3 (id=310):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0xa9, @mcast2, 0x1ff80000}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005a00)=ANY=[@ANYBLOB="6163746976655f6c6f67733d322c686561702c6e6f696e6c696e655f64656e7472792c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303032332c6a71666d743d76667376302c616c6c6f635f6d6f64653d64656661756c742c6661756c745f747970653d30303030303030303030303031363737373231342c71756f74612c646973636172642c6a71666d743d76667376312c6673796e635f6d6f64653d706f7369782c696e6c696e655f646174612c67727071756f74613d6163746976655f6c6f67733d322c6c617a7974696d652c71756f74612c72657365727665725f726f6f743d30303030303030303030303030303030303030362c6d65615e7572652c7063723d30303030303030303030303030303030303034392c646f6e745f61707072616973652c00ff29d0fe17e4c4341c45671dd25dfa91a37c701b07211a12cd72f3186867d29073d5c363c29b4ca676972bf8f94697fab943ab1c6d7fa3a18d16d5e339f461016a1950fd58569021caba03d761f3ea76c27f97b8472cb94ebe242e118b5f1269b29ad902f9b17932c95626af588a06ce34c57c32ad59a72a3fda9a6463dbf665f435aed687bd95909d1f305ec0a2fae7420d7f112c385438f2959f370b3a9a24a59c3f28fa62acd9a57c8f5163f9"], 0x1, 0x5505, &(0x7f0000000340)="$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")
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x123242, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)

5.801731282s ago: executing program 0 (id=313):
r0 = semget$private(0x0, 0x4000000009, 0x0)
semop(r0, &(0x7f0000000040)=[{0x3, 0xff77}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r2, @ANYBLOB="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"], 0x8c8}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_rr_get_interval(0x0, &(0x7f0000000400))
semop(r0, &(0x7f0000000900)=[{0x2, 0x7f, 0x1800}], 0x1)
semop(r0, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000440)=""/70)

5.005980056s ago: executing program 4 (id=315):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)

4.810468442s ago: executing program 0 (id=316):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0xd0, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x200003ae, 0x7f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x7, 0x70, [0x13, 0x2a84, 0x26, 0x7, 0x2, 0x13, 0x7, 0x31, 0x10, 0x32, 0x2b, 0x3c, 0xc, 0x23, 0x801e, 0x32], 0x2, 0x80000001, 0x6}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 'veth1_to_team\x00', 'ip6erspan0\x00', {}, {0xff}, 0x29, 0x3}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x80, 0x2, [0x26, 0x11, 0x3, 0x3ff, 0x3e, 0xd, 0x14, 0x30, 0x8, 0x40, 0x1039, 0xf, 0x4, 0x20, 0x16, 0x32], 0x2, 0x8, 0xffffffffffffff00}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.448926483s ago: executing program 4 (id=317):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, &(0x7f0000003a00)=[{{&(0x7f00000002c0)=@caif=@rfm, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}, {&(0x7f0000000400)}, {&(0x7f0000001900)=""/4096}], 0x0, &(0x7f0000000dc0)=""/67}, 0x9}, {{&(0x7f0000000e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @empty}}, 0x0, &(0x7f0000001000)=[{&(0x7f0000000ec0)=""/68}, {&(0x7f0000000f40)=""/155}], 0x0, &(0x7f0000001040)=""/101}, 0x1ae0}, {{&(0x7f00000010c0), 0x0, &(0x7f0000001400)=[{&(0x7f0000001140)=""/76}, {&(0x7f00000011c0)=""/47}, {&(0x7f0000001200)=""/44}, {&(0x7f0000001240)=""/133}, {&(0x7f0000001300)=""/209}]}, 0x2}, {{&(0x7f0000001480)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x0, &(0x7f0000001600)=[{&(0x7f0000001500)=""/240}], 0x0, &(0x7f0000002900)=""/4096}, 0x3}, {{&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/119}, {&(0x7f0000001740)=""/26}, {&(0x7f0000001780)=""/3}, {&(0x7f0000005140)=""/4096}], 0x0, &(0x7f0000003900)=""/203}, 0x8}], 0x40000000000018c, 0x60000100, 0x0)

4.003646006s ago: executing program 0 (id=318):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
iopl(0x3)
recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x22, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x24)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r1, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

3.93500868s ago: executing program 3 (id=319):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3.38470642s ago: executing program 4 (id=320):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4)
pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = fcntl$dupfd(r0, 0x406, r0)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001)

3.000114214s ago: executing program 0 (id=321):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000032000/0x4000)=nil, 0x4000, 0xe)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

2.691950495s ago: executing program 4 (id=322):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fchownat(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1000)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)

2.526431978s ago: executing program 3 (id=323):
r0 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1001, 0x800}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010083, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=remount-ro,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000002000022,iocharset=cp857,errors=remount-ro,\x00'], 0x3, 0x1507, &(0x7f0000000440)="$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")
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000020240), 0x10010)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)

1.95310041s ago: executing program 1 (id=215):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
close_range(r0, 0xffffffffffffffff, 0x0)

1.758436935s ago: executing program 1 (id=324):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
r0 = socket$kcm(0xa, 0x3, 0x11)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000)

1.480243447s ago: executing program 3 (id=325):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x0, 0xfffc, 0x41, 0x2}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xff7fffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f00000001c0)=0x54)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.328414121s ago: executing program 0 (id=326):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
recvmmsg$unix(r1, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0)

1.152745012s ago: executing program 4 (id=327):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b)

750.938473ms ago: executing program 1 (id=328):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
r1 = fanotify_init(0x1a, 0x800)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0)
fallocate(r0, 0x0, 0x9, 0x10001)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0)

652.500837ms ago: executing program 3 (id=329):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r0, 0x800)
r2 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

457.968634ms ago: executing program 4 (id=330):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0)

393.494501ms ago: executing program 1 (id=331):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x5, 0x0, [{0x3d4, 0x0, 0x3}, {0xb2f, 0x0, 0x8}, {0xa58, 0x0, 0x1}, {0x84d}, {0xbb6}]})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

225.237514ms ago: executing program 0 (id=332):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x3)
r4 = getpgrp(0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4})
sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)

0s ago: executing program 3 (id=333):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x800, 0xfffffffb, 0x325}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts.
[   71.044006][ T5812] cgroup: Unknown subsys name 'net'
[   71.178706][ T5812] cgroup: Unknown subsys name 'cpuset'
[   71.188269][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.831347][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[   71.838876][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[   72.641596][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.026675][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.039958][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.051102][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.061360][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.071483][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.082682][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.083540][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.091567][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.100487][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.108947][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.122383][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.122450][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.132206][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.140440][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.148947][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.155027][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.161560][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.168656][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.179986][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.184057][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.189799][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.197989][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.205660][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.218436][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.230772][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.852364][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   76.976247][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   77.058482][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   77.200224][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.208417][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.218051][ T5834] bridge_slave_0: entered allmulticast mode
[   77.226489][ T5834] bridge_slave_0: entered promiscuous mode
[   77.265473][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.273080][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.281211][ T5834] bridge_slave_1: entered allmulticast mode
[   77.289008][ T5834] bridge_slave_1: entered promiscuous mode
[   77.298102][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   77.310400][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   77.389337][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.397562][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.405818][ T5827] bridge_slave_0: entered allmulticast mode
[   77.413463][ T5827] bridge_slave_0: entered promiscuous mode
[   77.466473][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.474470][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.482197][ T5827] bridge_slave_1: entered allmulticast mode
[   77.490196][ T5827] bridge_slave_1: entered promiscuous mode
[   77.502190][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.536141][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.545031][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.552704][ T5825] bridge_slave_0: entered allmulticast mode
[   77.560400][ T5825] bridge_slave_0: entered promiscuous mode
[   77.570075][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.578318][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.587383][ T5825] bridge_slave_1: entered allmulticast mode
[   77.596504][ T5825] bridge_slave_1: entered promiscuous mode
[   77.617500][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.712830][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.759947][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.774355][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.787479][ T5834] team0: Port device team_slave_0 added
[   77.823083][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.847221][ T5834] team0: Port device team_slave_1 added
[   77.864510][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.872558][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.880965][ T5826] bridge_slave_0: entered allmulticast mode
[   77.889563][ T5826] bridge_slave_0: entered promiscuous mode
[   77.934865][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.942544][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.950365][ T5828] bridge_slave_0: entered allmulticast mode
[   77.958718][ T5828] bridge_slave_0: entered promiscuous mode
[   77.967415][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.975515][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.983330][ T5826] bridge_slave_1: entered allmulticast mode
[   77.991617][ T5826] bridge_slave_1: entered promiscuous mode
[   78.013569][ T5827] team0: Port device team_slave_0 added
[   78.033687][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.041912][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.050647][ T5828] bridge_slave_1: entered allmulticast mode
[   78.059145][ T5828] bridge_slave_1: entered promiscuous mode
[   78.089470][ T5825] team0: Port device team_slave_0 added
[   78.099659][ T5827] team0: Port device team_slave_1 added
[   78.123454][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.131442][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.159484][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.197847][ T5825] team0: Port device team_slave_1 added
[   78.217552][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.224961][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.253073][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.279690][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.304455][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.306433][   T51] Bluetooth: hci2: command tx timeout
[   78.313463][ T5835] Bluetooth: hci1: command tx timeout
[   78.319151][ T5149] Bluetooth: hci4: command tx timeout
[   78.325121][ T5836] Bluetooth: hci0: command tx timeout
[   78.331318][ T5829] Bluetooth: hci3: command tx timeout
[   78.338286][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.370790][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.396607][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.410730][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.432584][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.440725][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.468609][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.493415][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.515517][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.522534][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.551471][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.567715][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.574797][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.603381][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.680342][ T5826] team0: Port device team_slave_0 added
[   78.716874][ T5828] team0: Port device team_slave_0 added
[   78.726219][ T5826] team0: Port device team_slave_1 added
[   78.761865][ T5834] hsr_slave_0: entered promiscuous mode
[   78.769507][ T5834] hsr_slave_1: entered promiscuous mode
[   78.780312][ T5828] team0: Port device team_slave_1 added
[   78.816417][ T5827] hsr_slave_0: entered promiscuous mode
[   78.824224][ T5827] hsr_slave_1: entered promiscuous mode
[   78.831077][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   78.837502][ T5827] Cannot create hsr debugfs directory
[   78.873248][ T5825] hsr_slave_0: entered promiscuous mode
[   78.881123][ T5825] hsr_slave_1: entered promiscuous mode
[   78.888232][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   78.894086][ T5825] Cannot create hsr debugfs directory
[   78.917406][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.924735][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.954203][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.990082][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.997470][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.025708][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.039546][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.047954][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.075546][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.109842][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.120479][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.147249][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.418548][ T5826] hsr_slave_0: entered promiscuous mode
[   79.426359][ T5826] hsr_slave_1: entered promiscuous mode
[   79.433859][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   79.440517][ T5826] Cannot create hsr debugfs directory
[   79.458447][ T5828] hsr_slave_0: entered promiscuous mode
[   79.466273][ T5828] hsr_slave_1: entered promiscuous mode
[   79.472972][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   79.479413][ T5828] Cannot create hsr debugfs directory
[   79.953069][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.978182][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.001445][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.013205][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.090525][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.106494][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.123813][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.136617][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.253077][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.283532][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.296154][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.310531][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.385611][   T51] Bluetooth: hci2: command tx timeout
[   80.392069][ T5149] Bluetooth: hci4: command tx timeout
[   80.398366][   T51] Bluetooth: hci0: command tx timeout
[   80.398380][ T5836] Bluetooth: hci1: command tx timeout
[   80.404421][ T5829] Bluetooth: hci3: command tx timeout
[   80.450542][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.463875][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.477816][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.489256][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.558916][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.610433][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.622964][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.635329][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.655705][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.710750][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   80.741947][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.782375][  T765] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.790062][  T765] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.840109][  T765] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.847860][  T765] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.893601][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   80.943358][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.951090][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.020145][  T765] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.027736][  T765] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.111834][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.196545][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.215857][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.244659][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   81.295789][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.303281][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.338396][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   81.362273][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   81.372551][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.380011][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.407156][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.414632][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.439891][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.447373][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.473010][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.480564][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.519554][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.528405][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.558027][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.820013][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.961908][ T5834] veth0_vlan: entered promiscuous mode
[   82.078108][ T5834] veth1_vlan: entered promiscuous mode
[   82.199685][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.279667][ T5826] veth0_vlan: entered promiscuous mode
[   82.299197][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.334611][ T5834] veth0_macvtap: entered promiscuous mode
[   82.364315][ T5834] veth1_macvtap: entered promiscuous mode
[   82.388583][ T5826] veth1_vlan: entered promiscuous mode
[   82.426748][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.465987][   T51] Bluetooth: hci0: command tx timeout
[   82.466845][ T5836] Bluetooth: hci2: command tx timeout
[   82.472454][   T51] Bluetooth: hci1: command tx timeout
[   82.477545][ T5149] Bluetooth: hci4: command tx timeout
[   82.490120][ T5829] Bluetooth: hci3: command tx timeout
[   82.572938][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.583102][ T5827] veth0_vlan: entered promiscuous mode
[   82.603997][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.651536][   T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.663350][   T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.680329][   T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.691001][   T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.710338][ T5825] veth0_vlan: entered promiscuous mode
[   82.746122][ T5827] veth1_vlan: entered promiscuous mode
[   82.766830][ T5826] veth0_macvtap: entered promiscuous mode
[   82.794049][ T5825] veth1_vlan: entered promiscuous mode
[   82.812819][ T5826] veth1_macvtap: entered promiscuous mode
[   82.901769][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.951775][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.961624][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.974467][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.060785][   T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.070194][   T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.088589][ T5827] veth0_macvtap: entered promiscuous mode
[   83.102696][   T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.113309][   T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.141465][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.149677][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.165283][ T5828] veth0_vlan: entered promiscuous mode
[   83.176745][ T5827] veth1_macvtap: entered promiscuous mode
[   83.214016][ T5825] veth0_macvtap: entered promiscuous mode
[   83.237254][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   83.274361][ T5825] veth1_macvtap: entered promiscuous mode
[   83.290088][ T5828] veth1_vlan: entered promiscuous mode
[   83.392680][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.473705][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.530049][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.540976][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.569956][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.592798][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.613649][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.648748][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.658872][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.680497][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.714759][ T5828] veth0_macvtap: entered promiscuous mode
[   83.741716][  T198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.742906][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.755778][  T198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.763316][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.777382][ T5828] veth1_macvtap: entered promiscuous mode
[   83.797732][  T198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.806938][  T198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.937383][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.954283][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.086665][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.109605][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.134992][   T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.172085][   T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.187516][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.205504][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.212139][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.240231][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.397875][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.427695][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.481721][  T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.528447][  T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.548027][   T51] Bluetooth: hci1: command tx timeout
[   84.553698][ T5829] Bluetooth: hci3: command tx timeout
[   84.555599][ T5835] Bluetooth: hci4: command tx timeout
[   84.560503][ T5829] Bluetooth: hci0: command tx timeout
[   84.564919][ T5836] Bluetooth: hci2: command tx timeout
[   84.678571][ T5964] binder: BINDER_SET_CONTEXT_MGR already set
[   84.703869][ T5964] binder: 5963:5964 ioctl 4018620d 200000004a80 returned -16
[   84.717847][ T5964] binder: 5963:5964 ioctl c0306201 200000000100 returned -22
[   84.755268][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.784206][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.969049][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.997877][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.228920][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12'.
[   85.816494][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.066156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.081729][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.092427][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.155566][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.165625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.175427][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   86.255841][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.269103][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.305363][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   90.053648][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.069707][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.097300][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.251509][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.303901][   T81] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.352195][  T805] cfg80211: failed to load regulatory.db
[   92.367195][   T81] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.486401][   T81] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.555306][   T81] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.683110][ T6054] lo speed is unknown, defaulting to 1000
[   92.740203][ T6054] lo speed is unknown, defaulting to 1000
[   92.934781][ T6054] lo speed is unknown, defaulting to 1000
[   93.013961][ T6054] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   93.075937][ T6054] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   93.145208][ T6054] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   93.242908][ T6054] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.302453][ T6050] loop1: detected capacity change from 0 to 32768
[   93.349949][ T6054] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   93.492138][ T6050] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   93.800655][ T6054] lo speed is unknown, defaulting to 1000
[   93.865014][ T6054] lo speed is unknown, defaulting to 1000
[   93.886649][ T6054] lo speed is unknown, defaulting to 1000
[   93.931174][ T6050] XFS (loop1): Ending clean mount
[   93.938418][ T6054] lo speed is unknown, defaulting to 1000
[   93.991044][ T6054] lo speed is unknown, defaulting to 1000
[   94.028432][ T6050] XFS (loop1): Quotacheck needed: Please wait.
[   94.337663][ T6050] XFS (loop1): Quotacheck: Done.
[   95.408048][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.564526][ T5827] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   97.092350][ T6117] Bluetooth: MGMT ver 1.23
[   97.803376][ T6129] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.657895][ T6152] netlink: 'syz.4.57': attribute type 10 has an invalid length.
[   98.739545][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   98.762880][ T6150] vlan2: entered allmulticast mode
[   98.784635][ T6150] dummy0: entered allmulticast mode
[   98.813034][ T6150] bridge0: port 3(vlan2) entered blocking state
[   98.844043][ T6150] bridge0: port 3(vlan2) entered disabled state
[   98.908392][ T6150] vlan2: entered promiscuous mode
[   98.931069][ T6150] dummy0: entered promiscuous mode
[   99.089511][ T6152] bridge0: port 3(vlan2) entered blocking state
[   99.097392][ T6152] bridge0: port 3(vlan2) entered forwarding state
[   99.137123][ T6152] team0: Port device dummy0 added
[   99.305882][ T6149] team0: Port device team_slave_0 removed
[   99.701325][ T6164] process 'syz.2.61' launched './file0' with NULL argv: empty string added
[   99.877137][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'.
[  100.114377][ T6170] 8021q: adding VLAN 0 to HW filter on device team1
[  100.134604][ T6170] Zero length message leads to an empty skb
[  100.333694][   T29] audit: type=1800 audit(2000000003.400:2): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.61" name="/" dev="fuse" ino=9 res=0 errno=0
[  101.503167][ T6209] kvm: emulating exchange as write
[  102.096746][ T6224] syzkaller1: entered promiscuous mode
[  102.104711][ T6224] syzkaller1: entered allmulticast mode
[  102.303989][ T6232] capability: warning: `syz.0.86' uses deprecated v2 capabilities in a way that may be insecure
[  102.699399][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.89'.
[  102.799112][ T6242] unsupported nlmsg_type 40
[  104.785001][ T6276] mac80211_hwsim hwsim3 
: renamed from wlan1 (while UP)
[  105.872258][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'.
[  107.806282][ T6314] netlink: 'syz.3.115': attribute type 11 has an invalid length.
[  107.974014][ T6319] netlink: 'syz.3.115': attribute type 11 has an invalid length.
[  108.132951][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'.
[  108.917101][ T6312] loop4: detected capacity change from 0 to 40427
[  109.018418][ T6312] F2FS-fs (loop4): build fault injection rate: 174
[  109.065777][ T6312] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  109.116545][ T6312] F2FS-fs (loop4): invalid crc value
[  110.163936][ T6312] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.224805][ T6312] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  110.463526][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[  110.505238][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[  110.748066][ T6327] loop0: detected capacity change from 0 to 32768
[  110.816786][ T6355] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.129'.
[  110.912173][ T6327] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  110.942743][ T6352] syz.4.114: attempt to access beyond end of device
[  110.942743][ T6352] loop4: rw=2049, sector=45096, nr_sectors = 968 limit=40427
[  111.208041][ T6327] XFS (loop0): Ending clean mount
[  111.238234][ T6327] XFS (loop0): Quotacheck needed: Please wait.
[  111.346800][ T6327] XFS (loop0): Quotacheck: Done.
[  111.386895][ T5828] syz-executor: attempt to access beyond end of device
[  111.386895][ T5828] loop4: rw=2049, sector=46064, nr_sectors = 8 limit=40427
[  111.431451][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  111.431481][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  111.431499][ T5828] Call Trace:
[  111.431510][ T5828]  <TASK>
[  111.431518][ T5828]  dump_stack_lvl+0xe8/0x150
[  111.431547][ T5828]  f2fs_handle_critical_error+0x37c/0x540
[  111.431572][ T5828]  f2fs_write_end_io+0x1274/0x1740
[  111.431609][ T5828]  __submit_merged_bio+0x256/0x700
[  111.431634][ T5828]  __submit_merged_write_cond+0x3c9/0x4e0
[  111.431660][ T5828]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  111.431699][ T5828]  f2fs_write_data_pages+0x287e/0x34f0
[  111.431748][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.431781][ T5828]  ? __pfx_css_rstat_updated+0x10/0x10
[  111.431826][ T5828]  ? arch_stack_walk+0xe3/0x150
[  111.431842][ T5828]  ? unwind_next_frame+0xa5/0x23c0
[  111.431858][ T5828]  ? rcu_is_watching+0x15/0xb0
[  111.431872][ T5828]  ? __bfs+0x153/0x290
[  111.431885][ T5828]  ? __pfx_hlock_conflict+0x10/0x10
[  111.431915][ T5828]  ? lockdep_unlock+0x5d/0xd0
[  111.431935][ T5828]  ? __lock_acquire+0x146e/0x2cf0
[  111.431970][ T5828]  ? is_bpf_text_address+0x292/0x2b0
[  111.432010][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.432033][ T5828]  do_writepages+0x32e/0x550
[  111.432061][ T5828]  ? do_raw_spin_unlock+0xf5/0x210
[  111.432084][ T5828]  filemap_fdatawrite+0x1e9/0x2f0
[  111.432107][ T5828]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  111.432166][ T5828]  ? do_raw_spin_unlock+0xf5/0x210
[  111.432191][ T5828]  f2fs_sync_dirty_inodes+0x30e/0x860
[  111.432228][ T5828]  f2fs_write_checkpoint+0x9df/0x26a0
[  111.432275][ T5828]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  111.432344][ T5828]  kill_f2fs_super+0x314/0x720
[  111.432367][ T5828]  ? __pfx_kill_f2fs_super+0x10/0x10
[  111.432398][ T5828]  ? lockdep_hardirqs_on+0x7a/0x110
[  111.432434][ T5828]  deactivate_locked_super+0xbc/0x130
[  111.432459][ T5828]  cleanup_mnt+0x437/0x4d0
[  111.432482][ T5828]  ? _raw_spin_unlock_irq+0x23/0x50
[  111.432509][ T5828]  task_work_run+0x1d9/0x270
[  111.432535][ T5828]  ? __pfx_task_work_run+0x10/0x10
[  111.432565][ T5828]  exit_to_user_mode_loop+0xed/0x480
[  111.432589][ T5828]  ? rcu_is_watching+0x15/0xb0
[  111.432608][ T5828]  do_syscall_64+0x32d/0xf80
[  111.432621][ T5828]  ? trace_irq_disable+0x3b/0x150
[  111.432638][ T5828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.432655][ T5828]  ? clear_bhb_loop+0x40/0x90
[  111.432689][ T5828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.432706][ T5828] RIP: 0033:0x7fcc21d9d9d7
[  111.432730][ T5828] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  111.432745][ T5828] RSP: 002b:00007ffe64600c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  111.432764][ T5828] RAX: 0000000000000000 RBX: 00007fcc21e32050 RCX: 00007fcc21d9d9d7
[  111.432775][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe64600d10
[  111.432783][ T5828] RBP: 00007ffe64600d10 R08: 00007ffe64601d10 R09: 00000000ffffffff
[  111.432792][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe64601da0
[  111.432800][ T5828] R13: 00007fcc21e32050 R14: 000000000001b16d R15: 00007ffe64601de0
[  111.432823][ T5828]  </TASK>
[  111.434514][ T5828] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  111.828479][ T5825] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  113.250240][ T6384] loop1: detected capacity change from 0 to 32768
[  113.492677][   T29] audit: type=1800 audit(2000000272.553:3): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.137" name="file1" dev="loop1" ino=7 res=0 errno=0
[  115.221127][   T29] audit: type=1800 audit(2000000274.293:4): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.154" name="bus" dev="tmpfs" ino=188 res=0 errno=0
[  116.763375][ T6478] kvm: vcpu 0: requested 2688 ns lapic timer period limited to 200000 ns
[  117.730764][ T6499] loop3: detected capacity change from 0 to 1024
[  117.902824][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.258161][ T6507] evm: overlay not supported
[  118.436530][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.832478][ T6523] loop2: detected capacity change from 0 to 32768
[  120.089140][ T6523] JBD2: Ignoring recovery information on journal
[  120.203474][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  120.278107][ T6548] netlink: 44 bytes leftover after parsing attributes in process `syz.4.186'.
[  120.371209][ T6523] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  120.748752][   T29] audit: type=1804 audit(2000000535.813:5): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.179" name="/newroot/30/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[  120.833094][   T29] audit: type=1804 audit(2000000535.853:6): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.179" name="/newroot/30/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[  121.083411][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'.
[  121.127580][ T5826] ocfs2: Unmounting device (7,2) on (node local)
[  121.954817][ T6573] loop3: detected capacity change from 0 to 128
[  122.254251][ T6573] syz.3.195: attempt to access beyond end of device
[  122.254251][ T6573] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[  122.896902][ T6585] lo speed is unknown, defaulting to 1000
[  123.061965][ T6575] loop4: detected capacity change from 0 to 40427
[  123.107191][ T6575] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  123.131324][ T6575] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  123.472810][ T6575] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  123.499894][ T6581] loop2: detected capacity change from 0 to 32768
[  123.538290][ T6575] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  123.576216][ T6575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  123.588326][ T6581] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  123.695450][ T6581] XFS (loop2): Ending clean mount
[  123.802857][ T6581] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  123.893473][ T5826] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.010079][ T6605] delete_channel: no stack
[  124.381591][ T6619] cgroup: fork rejected by pids controller in /syz1
[  125.949307][ T6000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.283508][ T6000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.656458][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.682447][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.694671][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.707626][ T6000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.729539][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.746293][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.156510][ T6000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.078401][ T6656] lo speed is unknown, defaulting to 1000
[  128.101828][ T6662] loop2: detected capacity change from 0 to 40427
[  128.134933][ T6662] F2FS-fs (loop2): invalid crc value
[  128.239472][ T6675] Invalid ELF header magic: != ELF
[  128.248023][   T29] audit: type=1800 audit(2000000543.313:7): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.225" name="/newroot/43/bus" dev="tmpfs" ino=244 res=0 errno=0
[  128.468173][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.536996][ T6662] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  128.552307][ T6686] loop0: detected capacity change from 0 to 4096
[  128.560612][ T6662] F2FS-fs (loop2): Start checkpoint disabled!
[  128.569935][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.598911][ T6686] EXT4-fs (loop0): Test dummy encryption mode enabled
[  128.609584][ T6662] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  128.618937][ T6662] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  128.639285][ T6686] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  128.681793][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.686223][ T6686] System zones: 0-5
[  128.788515][ T5836] Bluetooth: hci3: command tx timeout
[  128.804601][ T6686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.890467][ T5826] syz-executor: attempt to access beyond end of device
[  128.890467][ T5826] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  128.921626][ T6000] bridge_slave_1: left allmulticast mode
[  128.945607][ T6000] bridge_slave_1: left promiscuous mode
[  128.957398][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.969693][ T5826] syz-executor: attempt to access beyond end of device
[  128.969693][ T5826] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  129.016447][ T6000] bridge_slave_0: left allmulticast mode
[  129.035970][ T6000] bridge_slave_0: left promiscuous mode
[  129.039392][   T81] kworker/u8:5: attempt to access beyond end of device
[  129.039392][   T81] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  129.046679][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.070957][   T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  129.070990][   T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  129.071003][   T81] Workqueue: writeback wb_workfn (flush-7:2)
[  129.071042][   T81] Call Trace:
[  129.071051][   T81]  <TASK>
[  129.071060][   T81]  dump_stack_lvl+0xe8/0x150
[  129.071091][   T81]  f2fs_handle_critical_error+0x37c/0x540
[  129.071124][   T81]  f2fs_write_end_io+0x1274/0x1740
[  129.071170][   T81]  __submit_merged_bio+0x256/0x700
[  129.071207][   T81]  __submit_merged_write_cond+0x3c9/0x4e0
[  129.071237][   T81]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  129.071282][   T81]  f2fs_write_data_pages+0x287e/0x34f0
[  129.071344][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.071389][   T81]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.071450][   T81]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.071495][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  129.071537][   T81]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  129.071558][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.071582][   T81]  do_writepages+0x32e/0x550
[  129.071610][   T81]  ? reacquire_held_locks+0x104/0x190
[  129.071628][   T81]  ? writeback_sb_inodes+0x477/0x1a20
[  129.071656][   T81]  __writeback_single_inode+0x133/0x11a0
[  129.071680][   T81]  ? do_raw_spin_unlock+0xf5/0x210
[  129.071706][   T81]  writeback_sb_inodes+0x992/0x1a20
[  129.071757][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.071777][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.071840][   T81]  ? rcu_is_watching+0x15/0xb0
[  129.071868][   T81]  wb_writeback+0x456/0xb70
[  129.071893][   T81]  ? queue_io+0x1d1/0x4a0
[  129.071922][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  129.071941][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.071980][   T81]  wb_workfn+0x414/0xf50
[  129.072009][   T81]  ? look_up_lock_class+0x57/0x110
[  129.072051][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  129.072082][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.072103][   T81]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  129.072140][   T81]  ? process_one_work+0x8b2/0x1760
[  129.072162][   T81]  process_one_work+0x9a5/0x1760
[  129.072217][   T81]  ? __pfx_process_one_work+0x10/0x10
[  129.072241][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.072280][   T81]  worker_thread+0xb49/0x1140
[  129.072322][   T81]  kthread+0x388/0x470
[  129.072345][   T81]  ? __pfx_worker_thread+0x10/0x10
[  129.072360][   T81]  ? __pfx_kthread+0x10/0x10
[  129.072382][   T81]  ret_from_fork+0x51e/0xb90
[  129.072411][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  129.072435][   T81]  ? __switch_to+0xc7d/0x1450
[  129.072462][   T81]  ? __pfx_kthread+0x10/0x10
[  129.072485][   T81]  ret_from_fork_asm+0x1a/0x30
[  129.072521][   T81]  </TASK>
[  129.073475][   T81] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  129.087709][ T6686] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  129.097054][   T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  129.097080][   T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  129.097091][   T81] Workqueue: writeback wb_workfn (flush-7:2)
[  129.097129][   T81] Call Trace:
[  129.097136][   T81]  <TASK>
[  129.097144][   T81]  dump_stack_lvl+0xe8/0x150
[  129.097174][   T81]  f2fs_handle_critical_error+0x37c/0x540
[  129.097232][   T81]  f2fs_write_end_io+0x1274/0x1740
[  129.097278][   T81]  __submit_merged_bio+0x256/0x700
[  129.097306][   T81]  __submit_merged_write_cond+0x3c9/0x4e0
[  129.097336][   T81]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  129.097385][   T81]  f2fs_write_data_pages+0x287e/0x34f0
[  129.097443][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.097482][   T81]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.097542][   T81]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.097588][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  129.097629][   T81]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  129.097649][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.097674][   T81]  do_writepages+0x32e/0x550
[  129.097702][   T81]  ? reacquire_held_locks+0x104/0x190
[  129.097721][   T81]  ? writeback_sb_inodes+0x477/0x1a20
[  129.097748][   T81]  __writeback_single_inode+0x133/0x11a0
[  129.097771][   T81]  ? do_raw_spin_unlock+0xf5/0x210
[  129.097799][   T81]  writeback_sb_inodes+0x992/0x1a20
[  129.097848][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.097866][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.097930][   T81]  ? rcu_is_watching+0x15/0xb0
[  129.097961][   T81]  wb_writeback+0x456/0xb70
[  129.097987][   T81]  ? queue_io+0x1d1/0x4a0
[  129.098016][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  129.098035][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.098073][   T81]  wb_workfn+0x414/0xf50
[  129.098121][   T81]  ? look_up_lock_class+0x57/0x110
[  129.098162][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  129.098201][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.098226][   T81]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  129.098271][   T81]  ? process_one_work+0x8b2/0x1760
[  129.098296][   T81]  process_one_work+0x9a5/0x1760
[  129.098346][   T81]  ? __pfx_process_one_work+0x10/0x10
[  129.098368][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.098402][   T81]  worker_thread+0xb49/0x1140
[  129.098446][   T81]  kthread+0x388/0x470
[  129.098468][   T81]  ? __pfx_worker_thread+0x10/0x10
[  129.098483][   T81]  ? __pfx_kthread+0x10/0x10
[  129.098506][   T81]  ret_from_fork+0x51e/0xb90
[  129.098534][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  129.098564][   T81]  ? __switch_to+0xc7d/0x1450
[  129.098591][   T81]  ? __pfx_kthread+0x10/0x10
[  129.098614][   T81]  ret_from_fork_asm+0x1a/0x30
[  129.098650][   T81]  </TASK>
[  129.098714][   T81] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  129.140220][ T6695] loop4: detected capacity change from 0 to 512
[  129.153500][   T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  129.153526][   T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  129.153538][   T81] Workqueue: writeback wb_workfn (flush-7:2)
[  129.153574][   T81] Call Trace:
[  129.153581][   T81]  <TASK>
[  129.153588][   T81]  dump_stack_lvl+0xe8/0x150
[  129.153618][   T81]  f2fs_handle_critical_error+0x37c/0x540
[  129.153647][   T81]  f2fs_write_end_io+0x1274/0x1740
[  129.153692][   T81]  __submit_merged_bio+0x256/0x700
[  129.153720][   T81]  __submit_merged_write_cond+0x3c9/0x4e0
[  129.153750][   T81]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  129.153793][   T81]  f2fs_write_data_pages+0x287e/0x34f0
[  129.153849][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.153885][   T81]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.153944][   T81]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.153987][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  129.154028][   T81]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  129.154048][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.154073][   T81]  do_writepages+0x32e/0x550
[  129.154101][   T81]  ? reacquire_held_locks+0x104/0x190
[  129.154128][   T81]  ? writeback_sb_inodes+0x477/0x1a20
[  129.154156][   T81]  __writeback_single_inode+0x133/0x11a0
[  129.154180][   T81]  ? do_raw_spin_unlock+0xf5/0x210
[  129.154206][   T81]  writeback_sb_inodes+0x992/0x1a20
[  129.154255][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.154276][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.154334][   T81]  ? rcu_is_watching+0x15/0xb0
[  129.154362][   T81]  wb_writeback+0x456/0xb70
[  129.154387][   T81]  ? queue_io+0x1d1/0x4a0
[  129.154415][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  129.154434][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.154472][   T81]  wb_workfn+0x414/0xf50
[  129.154501][   T81]  ? look_up_lock_class+0x57/0x110
[  129.154540][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  129.154571][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.154596][   T81]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  129.154644][   T81]  ? process_one_work+0x8b2/0x1760
[  129.154670][   T81]  process_one_work+0x9a5/0x1760
[  129.154716][   T81]  ? __pfx_process_one_work+0x10/0x10
[  129.154740][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  129.154779][   T81]  worker_thread+0xb49/0x1140
[  129.154821][   T81]  kthread+0x388/0x470
[  129.154842][   T81]  ? __pfx_worker_thread+0x10/0x10
[  129.154858][   T81]  ? __pfx_kthread+0x10/0x10
[  129.154885][   T81]  ret_from_fork+0x51e/0xb90
[  129.154913][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  129.154938][   T81]  ? __switch_to+0xc7d/0x1450
[  129.154965][   T81]  ? __pfx_kthread+0x10/0x10
[  129.154988][   T81]  ret_from_fork_asm+0x1a/0x30
[  129.155022][   T81]  </TASK>
[  129.187318][ T6686] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  129.194949][ T6695] EXT4-fs: Ignoring removed mblk_io_submit option
[  129.199245][   T81] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  129.207987][ T6695] EXT4-fs: inline encryption not supported
[  130.156830][ T6695] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.197520][ T6695] EXT4-fs (loop4): Test dummy encryption mode enabled
[  130.212010][ T6695] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  130.241221][ T6695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  130.241958][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.296491][ T6695] EXT4-fs (loop4): 1 truncate cleaned up
[  130.304450][ T6695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.875920][ T5836] Bluetooth: hci3: command tx timeout
[  130.917938][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.984058][ T6720] loop0: detected capacity change from 0 to 1024
[  131.077898][ T6720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.150880][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.179717][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.219587][ T6000] bond0 (unregistering): Released all slaves
[  131.234142][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.647204][ T6731] loop0: detected capacity change from 0 to 262144
[  132.678098][ T6731] F2FS-fs (loop0): invalid crc value
[  132.800681][ T6731] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.814804][ T6731] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  132.945384][ T5836] Bluetooth: hci3: command tx timeout
[  132.962066][   T29] audit: type=1800 audit(2000000548.033:8): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=7 res=0 errno=0
[  133.138115][   T29] audit: type=1800 audit(2000000548.173:9): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=7 res=0 errno=0
[  133.295551][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  133.810704][ T6656] chnl_net:caif_netlink_parms(): no params data found
[  134.586026][ T6000] hsr_slave_0: left promiscuous mode
[  134.612584][ T6000] hsr_slave_1: left promiscuous mode
[  134.670640][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.692675][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.705995][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.722534][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.742135][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.754346][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.776492][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.796150][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.816783][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.025765][ T5836] Bluetooth: hci3: command tx timeout
[  135.037913][ T6000] veth1_macvtap: left promiscuous mode
[  135.056054][ T6000] veth0_macvtap: left promiscuous mode
[  135.063343][ T6000] veth1_vlan: left promiscuous mode
[  135.070367][ T6000] veth0_vlan: left promiscuous mode
[  135.215837][ T6769] openvswitch: netlink: Missing valid actions attribute.
[  135.224856][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.239036][ T6769] openvswitch: netlink: Missing valid actions attribute.
[  135.250100][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.261622][ T6769] openvswitch: netlink: Missing valid actions attribute.
[  135.270583][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.299811][ T6769] openvswitch: netlink: Missing valid actions attribute.
[  135.309560][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.320648][ T6769] openvswitch: netlink: Missing valid actions attribute.
[  135.329128][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.702571][ T6000] team0 (unregistering): Port device team_slave_1 removed
[  135.808432][ T6773] loop4: detected capacity change from 0 to 256
[  135.828213][ T6773] exfat: Deprecated parameter 'namecase'
[  135.866191][ T6773] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  136.156629][ T6777] binder: BINDER_SET_CONTEXT_MGR already set
[  136.186472][ T6777] binder: 6776:6777 ioctl 4018620d 200000004a80 returned -16
[  136.245770][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.254076][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.264226][ T6656] bridge_slave_0: entered allmulticast mode
[  136.285434][ T6656] bridge_slave_0: entered promiscuous mode
[  136.324181][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.350534][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.372325][ T6656] bridge_slave_1: entered allmulticast mode
[  136.394784][ T6656] bridge_slave_1: entered promiscuous mode
[  136.658696][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.721118][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.782045][ T6762] lo speed is unknown, defaulting to 1000
[  136.866936][ T5836] Bluetooth: hci1: command tx timeout
[  136.988339][ T6656] team0: Port device team_slave_0 added
[  137.043177][ T6656] team0: Port device team_slave_1 added
[  137.499276][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.538463][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.641333][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.780339][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.789706][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  137.823296][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.879919][ T6808] xt_hashlimit: size too large, truncated to 1048576
[  138.760913][ T6656] hsr_slave_0: entered promiscuous mode
[  138.770291][ T6656] hsr_slave_1: entered promiscuous mode
[  138.782029][ T6656] debugfs: 'hsr0' already exists in 'hsr'
[  138.789068][ T6656] Cannot create hsr debugfs directory
[  138.941343][ T6762] chnl_net:caif_netlink_parms(): no params data found
[  138.948881][ T5836] Bluetooth: hci1: command tx timeout
[  139.812035][ T6847] syz.4.263 uses obsolete (PF_INET,SOCK_PACKET)
[  139.844133][ T6834] syzkaller0: entered promiscuous mode
[  139.857233][ T6834] syzkaller0: entered allmulticast mode
[  139.976744][ T6832] tipc: Started in network mode
[  140.003201][ T6832] tipc: Node identity 3ea70161500a, cluster identity 4711
[  140.028993][ T6832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.200671][   T48] tipc: Resetting bearer <eth:syzkaller0>
[  140.272900][ T6830] tipc: Resetting bearer <eth:syzkaller0>
[  140.382171][ T6868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer.
[  140.752216][ T6877] loop4: detected capacity change from 0 to 256
[  141.034244][ T5836] Bluetooth: hci1: command tx timeout
[  141.445741][ T5836] Bluetooth: hci2: unexpected event for opcode 0x2028
[  143.116352][ T5835] Bluetooth: hci1: command tx timeout
[  143.262845][ T6830] tipc: Disabling bearer <eth:syzkaller0>
[  143.305436][ T6000] bridge_slave_1: left allmulticast mode
[  143.311588][ T6000] bridge_slave_1: left promiscuous mode
[  143.317772][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.328475][ T6000] bridge_slave_0: left allmulticast mode
[  143.334334][ T6000] bridge_slave_0: left promiscuous mode
[  143.341802][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.613988][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.626663][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.648113][ T6000] bond0 (unregistering): Released all slaves
[  143.667383][ T5911] tipc: Node number set to 1856831841
[  143.873368][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.891640][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.902278][ T6762] bridge_slave_0: entered allmulticast mode
[  143.916694][ T6893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  143.920203][ T6762] bridge_slave_0: entered promiscuous mode
[  143.978259][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.993052][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.019492][ T6762] bridge_slave_1: entered allmulticast mode
[  144.052140][ T6762] bridge_slave_1: entered promiscuous mode
[  144.255754][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.263846][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.530584][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.604180][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.181562][  T765] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.249015][ T6762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.408042][  T765] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.447990][  T765] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.493104][ T6762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.647711][  T765] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.787924][ T6000] hsr_slave_0: left promiscuous mode
[  145.871760][ T6000] hsr_slave_1: left promiscuous mode
[  145.936038][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.074430][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.859720][ T6000] team0 (unregistering): Port device team_slave_1 removed
[  147.915248][ T6000] team0 (unregistering): Port device team_slave_0 removed
[  148.409949][ T6762] team0: Port device team_slave_0 added
[  148.621559][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.656404][ T6944] 8021q: adding VLAN 0 to HW filter on device team0
[  148.699722][ T6944] net_ratelimit: 78 callbacks suppressed
[  148.699732][ T6944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.732207][ T6949] syzkaller0: tun_chr_ioctl cmd 1074025677
[  148.746952][ T6949] syzkaller0: linktype set to 805
[  148.784225][ T6762] team0: Port device team_slave_1 added
[  149.239520][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.260535][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.335192][ T6762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.387799][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.415931][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.476697][ T6762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.780731][ T6762] hsr_slave_0: entered promiscuous mode
[  149.801897][ T6762] hsr_slave_1: entered promiscuous mode
[  149.824634][ T6762] debugfs: 'hsr0' already exists in 'hsr'
[  149.841229][ T6762] Cannot create hsr debugfs directory
[  150.522466][ T6656] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.598202][ T6656] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.723907][ T6656] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.762195][ T6656] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  151.806312][   T29] audit: type=1804 audit(2000000566.873:10): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.297" name="/newroot/71/file0" dev="tmpfs" ino=405 res=1 errno=0
[  151.827047][ T7006] ref_ctr increment failed for inode: 0x195 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880764872c0
[  151.940982][ T7005] uprobe: syz.0.297:7005 failed to unregister, leaking uprobe
[  152.051127][ T6762] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  152.117647][ T6762] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  152.180786][ T6762] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  152.282742][ T7011] bond1: entered promiscuous mode
[  152.303236][ T6762] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  152.399912][ T7015] ip6gretap1: entered promiscuous mode
[  152.408923][ T7015] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  152.427948][ T7017] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  152.456129][ T7017] ip6gretap1: left promiscuous mode
[  152.480823][ T7017] bond1 (unregistering): Released all slaves
[  152.640741][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.756633][ T6656] 8021q: adding VLAN 0 to HW filter on device team0
[  152.797018][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.798938][ T7035] =======================================================
[  152.798938][ T7035] WARNING: The mand mount option has been deprecated and
[  152.798938][ T7035]          and is ignored by this kernel. Remove the mand
[  152.798938][ T7035]          option from the mount to silence this warning.
[  152.798938][ T7035] =======================================================
[  152.804804][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.978041][  T765] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.985998][  T765] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.094300][ T6762] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.110099][   T29] audit: type=1804 audit(2000000568.183:11): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.305" name="/newroot/74/file0" dev="tmpfs" ino=422 res=1 errno=0
[  153.183659][ T7043] lo speed is unknown, defaulting to 1000
[  153.246345][ T6762] 8021q: adding VLAN 0 to HW filter on device team0
[  153.462267][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.469544][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.651523][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.660048][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.319177][   T29] audit: type=1326 audit(2000000569.383:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.384416][   T29] audit: type=1326 audit(2000000569.423:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.455634][   T29] audit: type=1326 audit(2000000569.423:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.523076][   T29] audit: type=1326 audit(2000000569.423:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.594464][   T29] audit: type=1326 audit(2000000569.423:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.598108][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.686427][   T29] audit: type=1326 audit(2000000569.423:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.720757][   T29] audit: type=1326 audit(2000000569.423:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.817812][   T29] audit: type=1326 audit(2000000569.423:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f98c8b9c799 code=0x7ffc0000
[  154.897804][ T7060] loop3: detected capacity change from 0 to 40427
[  154.922427][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'.
[  154.928046][ T7060] F2FS-fs: heap/no_heap options were deprecated
[  155.004828][ T7060] F2FS-fs (loop3): build fault injection rate: 19
[  155.034418][ T7060] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  155.078378][ T7060] F2FS-fs (loop3): invalid crc value
[  155.087460][ T7094] bridge1: port 1(veth0_to_bond) entered blocking state
[  155.144039][ T7094] bridge1: port 1(veth0_to_bond) entered disabled state
[  155.159069][ T7060] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  155.173511][ T7094] veth0_to_bond: entered allmulticast mode
[  155.232910][ T7094] veth0_to_bond: entered promiscuous mode
[  155.290001][ T7060] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  155.301596][ T6656] veth0_vlan: entered promiscuous mode
[  155.348567][ T7060] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.373867][ T6656] veth1_vlan: entered promiscuous mode
[  155.393584][ T7060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  155.528463][ T6762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.633485][ T7060] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060
[  155.682792][ T6656] veth0_macvtap: entered promiscuous mode
[  155.726518][ T7109] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  155.774619][ T6656] veth1_macvtap: entered promiscuous mode
[  155.907581][ T5834] syz-executor: attempt to access beyond end of device
[  155.907581][ T5834] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.943562][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.963062][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  155.963090][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  155.963101][ T5834] Call Trace:
[  155.963108][ T5834]  <TASK>
[  155.963117][ T5834]  dump_stack_lvl+0xe8/0x150
[  155.963149][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  155.963178][ T5834]  f2fs_write_end_io+0x1274/0x1740
[  155.963223][ T5834]  __submit_merged_bio+0x256/0x700
[  155.963254][ T5834]  __submit_merged_write_cond+0x3c9/0x4e0
[  155.963285][ T5834]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  155.963333][ T5834]  f2fs_write_data_pages+0x287e/0x34f0
[  155.963356][ T5834]  ? is_bpf_text_address+0x26/0x2b0
[  155.963421][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.963462][ T5834]  ? do_raw_spin_lock+0x12b/0x2f0
[  155.963517][ T5834]  ? do_raw_spin_unlock+0xf5/0x210
[  155.963547][ T5834]  ? __lock_acquire+0x6b5/0x2cf0
[  155.963592][ T5834]  ? __lock_acquire+0x6b5/0x2cf0
[  155.963804][ T5834]  ? do_raw_spin_lock+0x12b/0x2f0
[  155.963839][ T5834]  ? do_raw_spin_unlock+0xf5/0x210
[  155.963861][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.963884][ T5834]  do_writepages+0x32e/0x550
[  155.963917][ T5834]  ? do_raw_spin_unlock+0xf5/0x210
[  155.963944][ T5834]  filemap_fdatawrite+0x1e9/0x2f0
[  155.963970][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  155.964046][ T5834]  ? do_raw_spin_unlock+0xf5/0x210
[  155.964073][ T5834]  f2fs_sync_dirty_inodes+0x30e/0x860
[  155.964109][ T5834]  f2fs_write_checkpoint+0x9df/0x26a0
[  155.964159][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  155.964230][ T5834]  kill_f2fs_super+0x314/0x720
[  155.964262][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  155.964299][ T5834]  ? lockdep_hardirqs_on+0x7a/0x110
[  155.964340][ T5834]  deactivate_locked_super+0xbc/0x130
[  155.964366][ T5834]  cleanup_mnt+0x437/0x4d0
[  155.964389][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.964416][ T5834]  task_work_run+0x1d9/0x270
[  155.964439][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  155.964469][ T5834]  exit_to_user_mode_loop+0xed/0x480
[  155.964491][ T5834]  ? rcu_is_watching+0x15/0xb0
[  155.964512][ T5834]  do_syscall_64+0x32d/0xf80
[  155.964526][ T5834]  ? trace_irq_disable+0x3b/0x150
[  155.964545][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.964562][ T5834]  ? clear_bhb_loop+0x40/0x90
[  155.964581][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.964597][ T5834] RIP: 0033:0x7f180db9d9d7
[  155.964639][ T5834] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  155.964652][ T5834] RSP: 002b:00007ffe4dcbb078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  155.964670][ T5834] RAX: 0000000000000000 RBX: 00007f180dc32050 RCX: 00007f180db9d9d7
[  155.964680][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4dcbb130
[  155.964690][ T5834] RBP: 00007ffe4dcbb130 R08: 00007ffe4dcbc130 R09: 00000000ffffffff
[  155.964701][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4dcbc1c0
[  155.964711][ T5834] R13: 00007f180dc32050 R14: 000000000002605d R15: 00007ffe4dcbc200
[  155.964738][ T5834]  </TASK>
[  156.000230][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.215184][ T5834] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  156.401651][ T6001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.460442][ T6001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.480529][ T6001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.506197][ T6001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.281573][ T6762] veth0_vlan: entered promiscuous mode
[  157.330281][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.381203][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.420544][ T6762] veth1_vlan: entered promiscuous mode
[  157.497606][ T7145] loop3: detected capacity change from 0 to 256
[  157.566697][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.603715][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.614196][ T7145] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  157.780992][ T6762] veth0_macvtap: entered promiscuous mode
[  157.849265][ T6762] veth1_macvtap: entered promiscuous mode
[  157.990945][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.062662][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.131992][   T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.173806][   T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.194690][   T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.232106][   T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.887716][ T7168] pimreg: entered allmulticast mode
[  158.979636][ T7165] pimreg: left allmulticast mode
[  159.248789][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.287096][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.478030][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.493735][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.782833][    C0] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0
[  160.046007][ T5978] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  160.297875][ T5978] usb 2-1: Using ep0 maxpacket: 8
[  160.342737][ T5978] usb 2-1: config 0 has no interfaces?
[  160.364192][ T5978] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  160.394812][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.520150][ T5978] usb 2-1: config 0 descriptor??
[  160.993342][ T6907] usb 2-1: USB disconnect, device number 2