last executing test programs:

3m13.644625995s ago: executing program 4 (id=30):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x8)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept$inet(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20)
sendto(r2, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0)

3m12.624120542s ago: executing program 4 (id=45):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='1024\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0)
write(r1, &(0x7f00000003c0)='64\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r2, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100")

3m12.365572758s ago: executing program 4 (id=48):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0025}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3m11.53756413s ago: executing program 4 (id=57):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
unshare(0x22020600)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)

3m11.384241013s ago: executing program 4 (id=58):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/mycluster/node\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='127.0.0.1', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0)
write(r1, &(0x7f00000003c0)='77', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='0\n', 0x2)

3m11.017385503s ago: executing program 4 (id=59):
pipe2(&(0x7f0000001440), 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500), 0x1, 0xbdb, &(0x7f0000001000)="$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")
unshare(0x20000400)
sigaltstack(&(0x7f0000001040)={0x0, 0x2}, &(0x7f0000001140)={0x0})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)

3m10.614528013s ago: executing program 32 (id=59):
pipe2(&(0x7f0000001440), 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x800)
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500), 0x1, 0xbdb, &(0x7f0000001000)="$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")
unshare(0x20000400)
sigaltstack(&(0x7f0000001040)={0x0, 0x2}, &(0x7f0000001140)={0x0})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)

2m58.205346753s ago: executing program 2 (id=114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008841}, 0x10)

2m57.416876194s ago: executing program 2 (id=115):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x15, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x1}, 0x38)
bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0)

2m56.481331978s ago: executing program 2 (id=118):
sched_setscheduler(0x0, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

2m56.336611362s ago: executing program 2 (id=120):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000100)='?', 0x1)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0x3ffff)
readlink(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x21)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
pipe2$9p(0x0, 0x800)
socket(0x10, 0x80002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

2m55.829260645s ago: executing program 2 (id=123):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0x9, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)

2m55.332398378s ago: executing program 2 (id=127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

2m55.173071642s ago: executing program 33 (id=127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

15.779787553s ago: executing program 0 (id=587):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

14.834973117s ago: executing program 0 (id=589):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x2, 0x3, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x408000, {0x0, 0xea60}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1)

13.861254652s ago: executing program 1 (id=590):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

13.201498329s ago: executing program 0 (id=592):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[], 0x232)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x24044084)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
lseek(r0, 0x9, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x3, 0x0)

12.618765064s ago: executing program 1 (id=595):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, 0x0}, 0x20)
fchdir(0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r4, &(0x7f0000002240)=""/131, 0x83, 0xe5d7)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b4, &(0x7f0000000500)="$eJzs3c1vHHf9B/D3rDd2Nm3zS9KkzQ9VqtVIgIhInFhpMRfCg1AOVVWVA2crcRorTlocF7kVIg6P1x76B5RDLogTEicukQoHLvTWG/IRCYlLOTRcWDSzs+vd9dpZt4kfxOsVzX6fZr7zmc/M7JMVbYD/WVfOpvkgRa6cfXW1bK/fn11avz97q1N/rZlkKslaUlYbSYrP2u32R8nlpOhNUwyVm3ywOPfGJ5+u/73TatZLtX5ju+2G1OutDXWvdfumk0zU5RcwMN/VLzxf0Yv8cpIzdQl77lCS9oAf/eXp3kif1qitD+9KjMCTVXReNzc5lhypb/TyfUD3lbexu9GNb2rM9YbfQQAAAMBBU30Gbm7qHuj5v4d5mNXi6C6GBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfa2sbv/xf10ujWp1N0f/9/su5LXd9fXtzZ6g+eVBwAAAAAAAAA8GTdfqav8eLDPMxqjnbb7aL6m/9LVeNk9fhU3smdLGQ557Ka+axkJcu5kORY30STq/MrK1Pd1snPvlvXNm95cdSWyxcfEXV36tZQGwAAAAAAAAAo/SxXNv7+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+0GRTHSKFPf6uo+l0UxyOMlk2bGWfNytH2QP9joAAAAA2AVTycOs5mi33S5yMslz1XcAh/NObmcli1nJUhZyrfpeoPOpv7F+f3Zp/f7srXLZPO+3/7mjMKoZ0/nuYfSeT1drtHI9i1XPuVzNW1nKtTSqLUun63i6sw7Fda+MqfhW7ZXxIrtWl+WRv1+Xm9zd0cFuZYdfphyrMnKok5GJiczUsZXZON49M6PP0A7PzsCespALafSCPTm0p8nBgxnM+caUje32d6Quy+P51VY53xOdTPyn3bGQi31X33Pb5zz5yh9+98OZur5/Dmk8E3XZrh5bm6+J2b5MPD9OJm4s3b554/qdswctE5vMVJk41Wtfyffzg5zNdF7Pchbz48xnJQuZzveq2nx98ou+W36LTF0eaL3+qEgm6yu0c7J2FtNL1bZHs5jX8lauZSEvV/8u5kJeyaVcylzfGT61/Rmu7vrG5ru+0n5mZPBnvlpXWkl+XZf7Q5nX4928rvVf9TNVvo8P9Gxk6cQYWRrx3JikuVUozS/VlXIfP3/UE+muGs7Ehb5MPLt9Jn5TPa3cWbp9c/nG/Nvj7e7E+3WlvI9+mUzvnyeS8no50TuLUwNXRzn2bG9sMF/l2MneWKN3EXTHTuWPafZ6F7O25Z06Wb+Hq2fq28vFauz5kWOz1djpeuxQbz+D77cA2PeOfO3IZOsfrb+2Pmz9onWj9erh70x9Y+qFyRz606FvNmcmvtx4ofh9PsxPNz7/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn9+dd9+7Ob+0tLA8VGm323c/Hj00ZqX7ezWfc/PhSvdXocZYOdN/e6pcdcTQRNp3txh6UpX/fzrZrX3t38q/2+123VNssc5v/zycqKnsLHXF47rY6t/5a++L1O1RZc+ekoBdcn7l1tvn77z73tcXb82/ufDmwu25S5fmZuYuvTx7/vri0sJM53GvowSehI0X/b2OBAAAAAAAAAAAABjXY/4/A2ujhvb6GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD7crZNB+kyIWZczNle/3+7FK5dOsbazaTNJIUP0mKj5LL6Sw51jddsdV+Plice+OTT9f/1e6o56vWb2y33XjW6iXTSSY65b3HNd/VutxWsd0hFL0jLBN2pps42Gv/DQAA//9Qqg9m")
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0))
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000002e80))
keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'bridge\x00'}, 0x1c, r5)

10.969394437s ago: executing program 1 (id=597):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6360, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

9.191147783s ago: executing program 5 (id=601):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.817273578s ago: executing program 0 (id=605):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
eventfd(0x6)
r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000040)={0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)

7.009564519s ago: executing program 6 (id=606):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

5.972469695s ago: executing program 6 (id=607):
r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

5.81072321s ago: executing program 1 (id=620):
r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0)
ftruncate(r0, 0x1000000)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='/dev/loop0,65536', 0x10)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
nanosleep(0x0, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
ioctl$MEMERASE(0xffffffffffffffff, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000})
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl(r3, 0x40186f40, &(0x7f00000001c0)="000000000100"/23)

5.610084325s ago: executing program 5 (id=610):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r1, &(0x7f0000000240), 0x12)

5.520392417s ago: executing program 5 (id=611):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r1, &(0x7f0000000240), 0x12)

5.477286478s ago: executing program 5 (id=612):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

4.534443112s ago: executing program 3 (id=613):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x200000b0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x8)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000100)={{0x1, 0x3, 0x1, 0xb, 0x8}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000000c0)={&(0x7f0000000500)="2c1b34", 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]})
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000140)=0x8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x302000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.532377243s ago: executing program 6 (id=626):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000cf57179d7a6d860933e6a354b8141bc7ea799bbca98432cfd5af89d81727b2e04b402831c7f4", @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000004,anchor=00000000000000000007,longad,utf8,unhide,undelete,iocharset=utf8,uid=forget,rootdir=00000000000000000006,gid=forget,nostrict,session=00000000000000000000,gid=forget,\x00'], 0x1, 0xc34, &(0x7f0000001bc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
truncate(0x0, 0x8fff5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000280)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x1, 0x2, 0xa, 0x3, 0x80, {0x2, 0x17d, 0xfffffffffffffffd, 0x0, 0x345, 0x8, 0x8, 0x7ffffffd, 0x0, 0x1000, 0x20000004, 0x0, 0x0, 0x3ff, 0x3101}}, {0x0, 0x3}}}, 0xa0)

4.357552607s ago: executing program 3 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)

3.499086739s ago: executing program 0 (id=615):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
waitid(0x1, r0, &(0x7f0000000300), 0x8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180)=0xffffff66, 0x4)
socket(0x18, 0x0, 0x1)

3.498872289s ago: executing program 5 (id=616):
syz_emit_ethernet(0x74, &(0x7f0000000180)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x10, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @remote, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}, @ra={0x94, 0x4}, @generic={0x44, 0x12, "8d01b1fc6291cfc6e89633504a929e9e"}, @ssrr={0x89, 0xf, 0x80, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}, "6616"}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10)

3.293732245s ago: executing program 3 (id=618):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x203, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

3.1133881s ago: executing program 6 (id=619):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\x00', 0x4)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f00000001c0), 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='1:0', 0x3)
write(r2, &(0x7f0000000380)='1:1', 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000600), 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, 0x0, 0x0)

2.504823265s ago: executing program 3 (id=621):
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), 0xffffffffffffffff)

2.460561456s ago: executing program 0 (id=622):
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$pppoe(0x18, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

2.122893085s ago: executing program 6 (id=623):
socket$inet6_tcp(0xa, 0x1, 0x0)
fsopen(&(0x7f0000000040)='fusectl\x00', 0x1)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[], 0x20)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0)

2.070827607s ago: executing program 1 (id=625):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002f0000001801000020786c2500000000002020207b0a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff760000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000001c0)=r5)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC=r2], 0xffdd)

1.877336711s ago: executing program 3 (id=627):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0xa241, 0x44)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x3}, 0x8)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x6}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x3}, 0x8)
connect$inet(r2, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES64=r0], 0xc)

1.876510111s ago: executing program 1 (id=637):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
writev(r2, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000600)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c26", 0xdc}], 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)

339.652911ms ago: executing program 5 (id=628):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

157.852265ms ago: executing program 6 (id=629):
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)

0s ago: executing program 3 (id=630):
r0 = syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e00"], 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000"], 0x4c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000040)="07000000010001", 0x7)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x1})

kernel console output (not intermixed with test programs):

e
[   61.243626][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.252064][ T4188] device bridge_slave_0 entered promiscuous mode
[   61.266900][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.274271][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.282753][ T4188] device bridge_slave_1 entered promiscuous mode
[   61.332560][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.339747][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.347966][ T4191] device bridge_slave_0 entered promiscuous mode
[   61.374986][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.382436][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.390370][ T4196] device bridge_slave_0 entered promiscuous mode
[   61.399832][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.408950][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.416940][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.424970][ T4196] device bridge_slave_1 entered promiscuous mode
[   61.432329][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.439672][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.447402][ T4191] device bridge_slave_1 entered promiscuous mode
[   61.454377][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   61.469338][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.528355][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.540702][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.557316][ T4188] team0: Port device team_slave_0 added
[   61.565889][ T4188] team0: Port device team_slave_1 added
[   61.573337][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.591644][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.600959][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.608025][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.615911][ T4186] device bridge_slave_0 entered promiscuous mode
[   61.642695][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.649885][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.657498][ T4186] device bridge_slave_1 entered promiscuous mode
[   61.694408][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.701632][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.727817][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.742420][ T4196] team0: Port device team_slave_0 added
[   61.748943][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.756106][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.782330][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.796293][ T4191] team0: Port device team_slave_0 added
[   61.814619][ T4196] team0: Port device team_slave_1 added
[   61.825992][ T4191] team0: Port device team_slave_1 added
[   61.838640][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.855997][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.884586][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.892131][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.899990][ T4187] device bridge_slave_0 entered promiscuous mode
[   61.913885][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.921102][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.929361][ T4187] device bridge_slave_1 entered promiscuous mode
[   61.952453][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.960068][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.986150][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.006367][ T4186] team0: Port device team_slave_0 added
[   62.016803][ T4188] device hsr_slave_0 entered promiscuous mode
[   62.024153][ T4188] device hsr_slave_1 entered promiscuous mode
[   62.031380][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.038328][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.064713][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.081524][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.088472][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.114811][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.133400][ T4186] team0: Port device team_slave_1 added
[   62.145886][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.153156][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.179250][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.196319][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.233497][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.243467][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.250526][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.276597][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.303201][ T4191] device hsr_slave_0 entered promiscuous mode
[   62.310418][ T4191] device hsr_slave_1 entered promiscuous mode
[   62.317760][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.325748][ T4191] Cannot create hsr debugfs directory
[   62.338091][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.345301][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.371581][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.428567][ T4187] team0: Port device team_slave_0 added
[   62.448425][ T4186] device hsr_slave_0 entered promiscuous mode
[   62.455728][ T4186] device hsr_slave_1 entered promiscuous mode
[   62.462395][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.470092][ T4186] Cannot create hsr debugfs directory
[   62.482497][ T4196] device hsr_slave_0 entered promiscuous mode
[   62.489768][ T4196] device hsr_slave_1 entered promiscuous mode
[   62.496332][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.503955][ T4196] Cannot create hsr debugfs directory
[   62.510795][ T4187] team0: Port device team_slave_1 added
[   62.559497][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.566462][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.592670][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.608217][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.615358][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.641337][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.755085][ T4187] device hsr_slave_0 entered promiscuous mode
[   62.760044][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[   62.767794][ T4187] device hsr_slave_1 entered promiscuous mode
[   62.767803][ T1108] Bluetooth: hci1: command 0x0409 tx timeout
[   62.780634][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.788186][ T4187] Cannot create hsr debugfs directory
[   62.839230][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[   62.839230][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[   62.859420][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   62.965052][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.976374][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.985872][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.001658][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.057477][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.066566][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.077690][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.104055][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.138743][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.148360][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.164975][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.181056][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.201027][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.221449][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.234176][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.246080][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   63.288385][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.307564][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.317389][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.326925][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.334420][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.346074][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.362402][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.385516][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.397235][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.407069][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.430334][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.439895][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.448255][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.455371][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.464245][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.472990][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.483081][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.491861][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.500460][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.509318][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.517863][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.526433][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.534703][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.543059][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.551788][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.568728][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.578558][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.605533][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.615248][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.654423][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.675015][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.694923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.704152][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.726618][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   63.736916][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   63.761980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.770896][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.782827][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.791803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.801273][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.808327][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.822923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.844196][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.853446][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.863716][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.870834][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.881366][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.890877][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.902497][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.909608][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.951373][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.959963][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.968600][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   63.976410][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   63.985444][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.994086][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.003844][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.012859][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.021844][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.030333][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.037456][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.045548][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.054328][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.063058][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.073150][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.086833][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.104475][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.112907][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.121930][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.131478][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.139939][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.148370][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.157368][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.166380][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.191104][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.207966][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   64.225849][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.235632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.244757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.253816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.262309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.287932][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.298479][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.307848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.317274][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.324406][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.332999][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.343515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.352673][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.359893][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.375115][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.383879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.392950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.401593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.411005][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.419593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.427851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.440865][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.462591][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.487823][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   64.515005][ T4188] device veth0_vlan entered promiscuous mode
[   64.530062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.539852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.553886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.567312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.576251][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.586310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.595302][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.604274][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.612561][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.622823][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.632120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.641503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.655451][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.665312][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.674973][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.682089][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.696934][ T4188] device veth1_vlan entered promiscuous mode
[   64.717174][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.735810][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.753630][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   64.769834][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.777925][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.788018][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.796960][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.804497][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.812018][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.820525][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.828699][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.837790][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.839584][ T4230] Bluetooth: hci1: command 0x041b tx timeout
[   64.853180][ T4230] Bluetooth: hci2: command 0x041b tx timeout
[   64.853983][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.866273][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.874820][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.883695][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.895827][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.906383][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.919436][ T4230] Bluetooth: hci4: command 0x041b tx timeout
[   64.925780][ T4230] Bluetooth: hci0: command 0x041b tx timeout
[   64.933143][ T4230] Bluetooth: hci3: command 0x041b tx timeout
[   64.957199][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   64.970469][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.978024][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.987592][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.997553][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.009148][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.017831][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.026522][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.035052][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.043393][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.052240][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.061396][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.077694][ T4188] device veth0_macvtap entered promiscuous mode
[   65.092329][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.104409][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.115512][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.124525][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.133723][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.146376][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.158420][ T4188] device veth1_macvtap entered promiscuous mode
[   65.179610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.188357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.227185][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.248133][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.258742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.277049][ T4196] device veth0_vlan entered promiscuous mode
[   65.298180][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.308337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.319979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.328364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.336399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.344144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.353216][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.362842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.371018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.382676][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.412856][ T4196] device veth1_vlan entered promiscuous mode
[   65.426128][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.449348][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.458102][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.473367][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.506616][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.525235][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.536776][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.551304][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.584807][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.593168][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.605887][ T4186] device veth0_vlan entered promiscuous mode
[   65.623753][ T4196] device veth0_macvtap entered promiscuous mode
[   65.635531][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.645065][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.654295][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.663572][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.672448][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.680574][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.688278][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.701126][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.710648][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.722315][ T4186] device veth1_vlan entered promiscuous mode
[   65.745637][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.787110][ T4196] device veth1_macvtap entered promiscuous mode
[   65.812860][ T4191] device veth0_vlan entered promiscuous mode
[   65.822602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.833533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.841691][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.850998][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.859770][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.868153][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.877258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.888638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.897198][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.906553][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.915473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.938991][ T4191] device veth1_vlan entered promiscuous mode
[   65.952984][ T4186] device veth0_macvtap entered promiscuous mode
[   65.973392][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.984738][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.996244][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.014273][ T4187] device veth0_vlan entered promiscuous mode
[   66.027707][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.037322][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.045852][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.056276][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.065263][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.074214][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.082674][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.091880][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.100040][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.116975][ T4187] device veth1_vlan entered promiscuous mode
[   66.131840][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.136468][ T4186] device veth1_macvtap entered promiscuous mode
[   66.146326][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.159193][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.173948][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.185604][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.195631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.204512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.214254][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.222905][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.232053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.240594][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.249748][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.290772][ T4191] device veth0_macvtap entered promiscuous mode
[   66.299692][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.308417][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.319183][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.327895][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.341654][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.351696][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.363154][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.363713][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.382665][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.393324][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.404293][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.415243][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.426336][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.436703][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.449688][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.461148][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.477678][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.486368][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.494577][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.503321][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.512026][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.522300][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.533413][ T4191] device veth1_macvtap entered promiscuous mode
[   66.553542][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.562567][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.571631][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.580632][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.613929][ T4187] device veth0_macvtap entered promiscuous mode
[   66.636427][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.648315][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.661320][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.672424][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.683586][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.694833][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.706635][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.715604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.725339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.734119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.743437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.752608][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.772668][ T4187] device veth1_macvtap entered promiscuous mode
[   66.817193][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.837968][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.858035][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.874744][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.885259][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.896191][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.907400][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.919636][ T4264] Bluetooth: hci2: command 0x040f tx timeout
[   66.922516][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.938276][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.947973][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.956819][ T4264] Bluetooth: hci1: command 0x040f tx timeout
[   66.967563][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.010849][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.015694][    T7] Bluetooth: hci3: command 0x040f tx timeout
[   67.022238][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.034621][    T7] Bluetooth: hci0: command 0x040f tx timeout
[   67.036936][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.053254][    T7] Bluetooth: hci4: command 0x040f tx timeout
[   67.069511][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.083602][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.091992][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.100845][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.111589][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.122111][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.131968][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.143473][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.155770][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.167195][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.181518][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.199404][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.208058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.217160][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.233423][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.247110][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.257599][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.268386][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.278490][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.289365][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.300585][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.311301][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.322965][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.353026][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.363769][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.398649][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.408997][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.423527][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.432585][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.454466][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.463914][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.469732][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.487836][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.501735][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.510609][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.525026][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.535060][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.543270][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.618389][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.633204][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.661456][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.704911][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.717908][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.721264][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.742565][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.750970][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   67.776369][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.801929][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.817390][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.839277][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.865741][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.938781][   T26] audit: type=1800 audit(1786055222.892:2): pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="zoned" dev="configfs" ino=33352 res=0 errno=0
[   68.014822][   T26] audit: type=1800 audit(1786055222.942:3): pid=4282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="power" dev="configfs" ino=33353 res=0 errno=0
[   68.060767][ T4284] zonefs (nullb0) ERROR: Not a zoned block device
[   68.608516][ T4308] syz.4.13 uses obsolete (PF_INET,SOCK_PACKET)
[   68.662170][ T4278] loop1: detected capacity change from 0 to 32768
[   68.706691][ T4311] device syzkaller0 entered promiscuous mode
[   68.725419][ T4278] =======================================================
[   68.725419][ T4278] WARNING: The mand mount option has been deprecated and
[   68.725419][ T4278]          and is ignored by this kernel. Remove the mand
[   68.725419][ T4278]          option from the mount to silence this warning.
[   68.725419][ T4278] =======================================================
[   68.760101][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   68.818324][ T4278] (syz.1.2,4278,0):ocfs2_verify_heartbeat:836 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[   68.842314][ T4278] (syz.1.2,4278,0):ocfs2_fill_super:1177 ERROR: status = -22
[   68.999676][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   69.006776][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   69.013212][ T4234] usb 3-1: Using ep0 maxpacket: 32
[   69.070853][ T4322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   69.080291][ T4231] Bluetooth: hci4: command 0x0419 tx timeout
[   69.097175][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[   69.112681][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   69.116045][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   69.130017][ T4234] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[   69.138394][ T4234] usb 3-1: config 0 has no interface number 0
[   69.148770][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   69.150446][ T4234] usb 3-1: config 0 interface 12 has no altsetting 0
[   69.176828][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   69.236922][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   69.281339][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   69.307849][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   69.320370][ T4234] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[   69.338504][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   69.346865][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.362357][ T4234] usb 3-1: Product: syz
[   69.366560][ T4234] usb 3-1: Manufacturer: syz
[   69.375428][ T4234] usb 3-1: SerialNumber: syz
[   69.436183][ T4234] usb 3-1: config 0 descriptor??
[   70.103285][ T4325] loop4: detected capacity change from 0 to 16
[   70.332260][ T4325] erofs: (device loop4): mounted with root inode @ nid 36.
[   70.541419][ T4332] loop0: detected capacity change from 0 to 2048
[   70.603388][ T4334] loop3: detected capacity change from 0 to 128
[   70.660988][ T4332] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   70.789972][ T4334] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   70.797758][ T4322] syz.1.17 (4322) used greatest stack depth: 20240 bytes left
[   70.816894][ T4332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.026762][ T4334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.208464][ T4340] loop4: detected capacity change from 0 to 2048
[   71.240583][ T4341] block device autoloading is deprecated and will be removed.
[   71.326174][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.334907][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.482874][ T4340] loop4: detected capacity change from 0 to 4096
[   71.493277][   T26] audit: type=1326 audit(1786055226.452:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.0.26" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb18aa1c0d9 code=0x0
[   71.547562][ T4340] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   71.589221][ T4347] TC_ACT_REPEAT abuse ?
[   71.781157][ T4191] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[   71.868802][ T4360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   71.910656][ T4362] tipc: Started in network mode
[   71.917956][ T4362] tipc: Node identity 4, cluster identity 4711
[   71.925425][ T4362] tipc: Node number set to 4
[   72.010076][ T4234] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[   72.020458][ T4234] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[   72.027791][ T4234] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   72.036699][ T4234] f81534: probe of 3-1:0.12 failed with error -71
[   72.057280][ T4234] usb 3-1: USB disconnect, device number 2
[   72.145413][ T4366] Zero length message leads to an empty skb
[   72.296296][ T4370] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   72.417004][ T4377] netlink: 'syz.1.39': attribute type 10 has an invalid length.
[   72.459581][ T4377] device syz_tun entered promiscuous mode
[   72.491179][ T4375] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   72.514959][ T4377] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   72.816108][   T26] audit: type=1800 audit(1786055227.772:5): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.45" name="size" dev="configfs" ino=33801 res=0 errno=0
[   72.844852][   T26] audit: type=1800 audit(1786055227.802:6): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.45" name="zone_size" dev="configfs" ino=33802 res=0 errno=0
[   72.850447][ T4395] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(9)
[   73.024627][ T4401] device syzkaller0 entered promiscuous mode
[   73.297265][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805f4ec400: rx timeout, send abort
[   73.655379][ T4416] loop0: detected capacity change from 0 to 1024
[   73.698888][ T4416] EXT4-fs (loop0): Ignoring removed bh option
[   73.727572][ T4416] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   73.758261][ T4416] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block
[   73.758261][ T4416] 
[   73.797320][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805f4edc00: rx timeout, send abort
[   73.806511][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805f4ec400: abort rx timeout. Force session deactivation
[   74.305715][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805f4edc00: abort rx timeout. Force session deactivation
[   74.514257][ T4330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.553423][ T4426] loop1: detected capacity change from 0 to 32768
[   74.704586][ T4426] XFS (loop1): Mounting V5 Filesystem
[   74.775672][ T4330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.803602][ T4426] XFS (loop1): Ending clean mount
[   74.887415][ T4437] device bridge0 entered promiscuous mode
[   74.931032][ T4437] device vlan2 entered promiscuous mode
[   74.994652][ T4426] overlayfs: conflicting lowerdir path
[   75.008537][ T4330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.055700][ T4439] device syzkaller0 entered promiscuous mode
[   75.117507][ T4330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.220456][ T4186] XFS (loop1): Unmounting Filesystem
[   75.356215][ T4452] binder: BINDER_SET_CONTEXT_MGR already set
[   75.369300][ T4452] binder: 4451:4452 ioctl 4018620d 200000004a80 returned -16
[   75.380753][ T4452] binder: 4451:4452 ioctl c018620c 200000000240 returned -1
[   75.750384][ T4464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'.
[   75.893629][ T4444] chnl_net:caif_netlink_parms(): no params data found
[   76.000493][ T4465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   76.243563][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.253198][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.265292][ T4444] device bridge_slave_0 entered promiscuous mode
[   76.275249][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.283186][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.291560][ T4444] device bridge_slave_1 entered promiscuous mode
[   76.358315][ T4444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.436989][ T4444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.479205][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   76.636319][ T4444] team0: Port device team_slave_0 added
[   76.693121][ T4444] team0: Port device team_slave_1 added
[   76.745148][ T4503] pit: kvm: requested 108114 ns i8254 timer period limited to 200000 ns
[   76.830049][ T4503] pit: kvm: requested 86323 ns i8254 timer period limited to 200000 ns
[   76.866145][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.873273][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.902203][ T4444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.906946][ T4503] pit: kvm: requested 177676 ns i8254 timer period limited to 200000 ns
[   76.937805][ T4508] device syzkaller0 entered promiscuous mode
[   76.970085][ T4503] pit: kvm: requested 113142 ns i8254 timer period limited to 200000 ns
[   76.999439][ T4503] pit: kvm: requested 170971 ns i8254 timer period limited to 200000 ns
[   77.012317][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.021710][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.027942][ T4503] pit: kvm: requested 153371 ns i8254 timer period limited to 200000 ns
[   77.054648][ T4444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.059055][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.084238][ T4234] usb 3-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00
[   77.094517][ T4503] pit: kvm: requested 144152 ns i8254 timer period limited to 200000 ns
[   77.120380][ T4503] pit: kvm: requested 62857 ns i8254 timer period limited to 200000 ns
[   77.128771][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.150556][ T4234] usb 3-1: Product: syz
[   77.150568][ T4503] pit: kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[   77.209071][ T4234] usb 3-1: Manufacturer: syz
[   77.215197][ T4234] usb 3-1: SerialNumber: syz
[   77.265169][ T4231] Bluetooth: hci2: command 0x0409 tx timeout
[   77.282292][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   77.306053][ T4234] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[   77.309087][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   77.509436][ T4234] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[   77.605948][ T4523] loop3: detected capacity change from 0 to 256
[   77.616608][ T4234] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   77.661364][ T4234] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[   77.677523][ T4234] usb 3-1: media controller created
[   77.716190][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   78.575206][ T4444] device hsr_slave_0 entered promiscuous mode
[   78.594712][ T4444] device hsr_slave_1 entered promiscuous mode
[   78.624760][ T4444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.655728][ T4444] Cannot create hsr debugfs directory
[   78.752739][ T4532] device syzkaller0 entered promiscuous mode
[   78.883055][ T4330] device hsr_slave_0 left promiscuous mode
[   78.891771][ T4330] device hsr_slave_1 left promiscuous mode
[   78.916612][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.944470][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.982063][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.007425][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.031886][ T4330] device bridge_slave_1 left promiscuous mode
[   79.039750][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.058122][ T4330] device bridge_slave_0 left promiscuous mode
[   79.067075][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.108340][ T4330] device veth1_macvtap left promiscuous mode
[   79.114938][ T4330] device veth0_macvtap left promiscuous mode
[   79.319337][ T1108] Bluetooth: hci2: command 0x041b tx timeout
[   79.358295][ T4330] device veth1_vlan left promiscuous mode
[   79.441317][ T4330] device veth0_vlan left promiscuous mode
[   79.583616][ T4234] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[   79.784102][ T4234] usb 3-1: USB disconnect, device number 3
[   80.031422][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   80.127263][ T4330] team0 (unregistering): Port device team_slave_1 removed
[   80.145815][ T4330] team0 (unregistering): Port device team_slave_0 removed
[   80.192408][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.235149][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.376888][ T4330] bond0 (unregistering): Released all slaves
[   80.863973][ T4444] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   80.902771][ T4444] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   80.929999][ T4444] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   80.971415][ T4444] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   80.982443][ T4585] binder: 4584:4585 unknown command 0
[   81.008757][ T4585] binder: 4584:4585 ioctl c0306201 2000000004c0 returned -22
[   81.077373][ T4585] binder: 4584:4585 ioctl c0306201 200000000180 returned -14
[   81.129902][ T4591] device syzkaller0 entered promiscuous mode
[   81.351805][ T4444] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.393326][ T4444] 8021q: adding VLAN 0 to HW filter on device team0
[   81.413907][ T4600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.98'.
[   81.436096][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.452510][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.478892][ T4600] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   81.517689][ T4234] Bluetooth: hci2: command 0x040f tx timeout
[   81.557935][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.569750][ T1111] cfg80211: failed to load regulatory.db
[   81.721472][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.748016][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.755202][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.784161][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.921430][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.015665][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.022846][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.164965][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.293033][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.362040][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.760007][ T1245] Bluetooth: Error in BCSP hdr checksum
[   82.877586][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.959312][ T4624] Bluetooth: Error in BCSP hdr checksum
[   82.981690][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.067752][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.104954][ T4622] device syzkaller0 entered promiscuous mode
[   83.189773][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.319382][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.407321][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   83.569437][ T1108] Bluetooth: hci2: command 0x0419 tx timeout
[   83.645474][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.724529][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.083111][ T4444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.136129][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.162010][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.182023][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.309227][ T4232] usb 3-1: New USB device found, idVendor=1d19, idProduct=6108, bcdDevice= 0.00
[   84.336485][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.407367][ T4232] cx231xx 3-1:1.1: New device   @ 480 Mbps (1d19:6108) with 3 interfaces
[   84.519165][   T21] Bluetooth: hci5: command 0x1003 tx timeout
[   84.525389][ T4197] Bluetooth: hci5: sending frame failed (-49)
[   84.559167][ T4232] cx231xx 3-1:1.1: Failed to read PCB config
[   84.574386][ T4232] cx231xx: probe of 3-1:1.1 failed with error -110
[   84.940946][ T4444] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.989875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.997812][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.054625][ T4659] overlayfs: failed to resolve './bus': -2
[   85.408924][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.431907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.488193][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.512824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.533324][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.544956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.562379][ T4444] device veth0_vlan entered promiscuous mode
[   85.604702][ T4444] device veth1_vlan entered promiscuous mode
[   85.668461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.696948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.748675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.777780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.803640][ T4444] device veth0_macvtap entered promiscuous mode
[   85.826722][ T4680] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   85.856431][ T4444] device veth1_macvtap entered promiscuous mode
[   85.887807][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.916911][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.944325][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.971266][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.019186][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.037595][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.076979][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.106831][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.132147][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.165059][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.180004][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.190292][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.214449][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.235741][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.249447][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.270769][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.297166][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.359157][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.379199][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.392525][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.406671][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.426893][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.435293][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.447256][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.474368][ T4444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.501147][ T4444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.510310][ T4444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.519305][ T4444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.599804][   T21] Bluetooth: hci5: command 0x1001 tx timeout
[   86.605908][ T4197] Bluetooth: hci5: sending frame failed (-49)
[   86.694383][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.720495][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.764399][ T4702] loop0: detected capacity change from 0 to 1024
[   86.765573][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.800409][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.810892][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.844985][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.019912][ T4230] usb 3-1: USB disconnect, device number 4
[   87.100705][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   87.169097][   T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.419451][   T21] usb 1-1: Using ep0 maxpacket: 16
[   87.539733][   T21] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[   87.577798][   T21] usb 1-1: config 0 has no interface number 0
[   87.674512][   T21] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x8B has an invalid bInterval 79, changing to 10
[   87.839793][   T21] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x8B has invalid maxpacket 58951, setting to 1024
[   88.037059][ T4728] device syzkaller1 entered promiscuous mode
[   88.741837][ T4232] Bluetooth: hci5: command 0x1009 tx timeout
[   88.789070][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   88.809058][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   88.818331][   T21] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[   88.847003][   T21] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[   88.892786][   T21] usb 1-1: Manufacturer: syz
[   88.905540][   T21] usb 1-1: SerialNumber: syz
[   88.936394][   T21] usb 1-1: config 0 descriptor??
[   88.971895][ T4702] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   89.077404][ T4740] loop2: detected capacity change from 0 to 256
[   89.127750][ T4740] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[   89.239864][   T21] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71
[   89.258689][   T21] usbtouchscreen: probe of 1-1:0.214 failed with error -71
[   89.268728][ T4746] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   89.300334][   T21] usb 1-1: USB disconnect, device number 2
[   89.342246][ T4746] exFAT-fs (loop2): Filesystem has been set read-only
[   89.396378][ T4747] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   89.538921][ T4196] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   89.576943][ T4196] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f)
[   89.826727][ T4762] netlink: 84 bytes leftover after parsing attributes in process `syz.5.119'.
[   90.024069][ T4545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.132558][ T4545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.227474][ T4545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.357902][ T4545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.010135][ T4800] chnl_net:caif_netlink_parms(): no params data found
[   92.302252][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.320048][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.328120][ T4800] device bridge_slave_0 entered promiscuous mode
[   92.357388][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.367236][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.420266][ T4800] device bridge_slave_1 entered promiscuous mode
[   92.471229][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.134'.
[   92.472969][ T4800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.496862][ T4800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.559245][ T4607] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   92.578159][ T4800] team0: Port device team_slave_0 added
[   92.599366][ T4800] team0: Port device team_slave_1 added
[   92.627438][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.634912][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.677597][ T4800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.713944][ T4545] device hsr_slave_0 left promiscuous mode
[   92.731585][ T4545] device hsr_slave_1 left promiscuous mode
[   92.741770][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.777052][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.786687][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.795237][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.804061][ T4545] device bridge_slave_1 left promiscuous mode
[   92.810878][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.820429][ T4545] device bridge_slave_0 left promiscuous mode
[   92.826815][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.845047][ T4545] device veth1_macvtap left promiscuous mode
[   92.852118][ T4545] device veth0_macvtap left promiscuous mode
[   92.859891][ T4545] device veth1_vlan left promiscuous mode
[   92.865707][ T4545] device veth0_vlan left promiscuous mode
[   92.929535][ T4607] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.967600][ T4607] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[   93.159471][ T4607] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08
[   93.168546][ T4607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.200439][ T4607] usb 1-1: Product: syz
[   93.207847][ T4607] usb 1-1: Manufacturer: syz
[   93.215342][ T4607] usb 1-1: SerialNumber: syz
[   93.262799][ T4545] team0 (unregistering): Port device team_slave_1 removed
[   93.278809][ T4545] team0 (unregistering): Port device team_slave_0 removed
[   93.294516][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.308129][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.377311][ T4545] bond0 (unregistering): Released all slaves
[   93.434682][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.441833][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.477898][ T4800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.601303][ T4800] device hsr_slave_0 entered promiscuous mode
[   93.608148][ T4800] device hsr_slave_1 entered promiscuous mode
[   93.615280][ T4800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.626618][ T4800] Cannot create hsr debugfs directory
[   93.639993][ T4863] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   93.653788][ T4264] Bluetooth: hci4: command 0x0409 tx timeout
[   93.709502][ T4607] ath6kl: Failed to read usb control message: -71
[   93.713844][ T4863] netlink: 76 bytes leftover after parsing attributes in process `syz.3.138'.
[   93.716705][ T4607] ath6kl: Unable to read the bmi data from the device: -71
[   93.751727][ T4607] ath6kl: Unable to recv target info: -71
[   93.761594][ T4607] ath6kl: Failed to init ath6kl core: -71
[   93.776793][ T4607] ath6kl_usb: probe of 1-1:1.0 failed with error -71
[   93.789484][ T4607] usb 1-1: USB disconnect, device number 3
[   94.170774][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   94.690934][ T4874] netlink: 'syz.1.141': attribute type 12 has an invalid length.
[   94.701848][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'.
[   94.815352][ T4885] team0: Device xfrm0 is of different type
[   94.985969][ T4888] tipc: Started in network mode
[   94.992100][ T4888] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   95.013905][ T4888] tipc: Enabled bearer <eth:team0>, priority 0
[   95.065114][ T4885] syz.5.143 (4885) used greatest stack depth: 20048 bytes left
[   95.139392][ T4800] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   95.189469][ T4800] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   95.260997][ T4800] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   95.291628][ T4800] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   95.369334][ T4899] netlink: 'syz.3.144': attribute type 1 has an invalid length.
[   95.583705][ T4907] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   95.604486][ T4907] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   95.686970][ T4800] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.719622][ T4607] Bluetooth: hci4: command 0x041b tx timeout
[   95.733653][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   95.854177][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.007180][ T4800] 8021q: adding VLAN 0 to HW filter on device team0
[   96.156811][ T4234] tipc: Node number set to 11578026
[   96.329400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   96.438332][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   96.619459][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.626573][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.667877][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   96.728843][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   96.774097][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   96.814761][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.821946][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.286943][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   97.368268][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   97.580380][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   97.718796][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.829623][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   97.846665][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.926018][ T4607] Bluetooth: hci4: command 0x040f tx timeout
[   98.709056][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   98.729043][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   98.739039][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   98.749041][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   98.752917][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.767222][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.775804][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.784348][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.792895][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.805101][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.607560][ T4953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.615326][ T4953] IPv6: NLM_F_CREATE should be set when creating new route
[   99.624222][ T4945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.973223][ T4607] Bluetooth: hci4: command 0x0419 tx timeout
[  100.327185][ T4953] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.335912][ T4953] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.755444][ T4953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.790350][ T4953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.135680][ T4953] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.144698][ T4953] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.153669][ T4953] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.166673][ T4953] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.240880][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  101.256303][ T4945] device syzkaller0 entered promiscuous mode
[  101.268933][ T4948] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  101.316930][ T4968] tipc: Resetting bearer <eth:syzkaller0>
[  101.328157][ T4944] tipc: Resetting bearer <eth:syzkaller0>
[  101.349474][ T4944] tipc: Disabling bearer <eth:syzkaller0>
[  101.421884][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.439921][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.486664][ T4800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.557675][ T5002] loop0: detected capacity change from 0 to 512
[  101.631871][ T5005] device syzkaller0 entered promiscuous mode
[  101.708812][ T5002] EXT4-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value
[  101.773933][ T5009] device syzkaller0 entered promiscuous mode
[  101.998046][ T5018] device syzkaller0 entered promiscuous mode
[  102.069843][ T5018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.099615][ T5017] tipc: Resetting bearer <eth:syzkaller0>
[  102.161621][ T5017] tipc: Disabling bearer <eth:syzkaller0>
[  102.200582][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.218026][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.307096][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  102.332413][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.357140][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.366318][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.378258][ T4800] device veth0_vlan entered promiscuous mode
[  102.398375][ T5041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.405411][ T4264] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  102.427060][ T4800] device veth1_vlan entered promiscuous mode
[  102.448434][ T5038] device syzkaller0 entered promiscuous mode
[  102.516170][ T5038] tipc: Resetting bearer <eth:syzkaller0>
[  102.538097][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  102.592035][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  102.604910][ T5037] tipc: Resetting bearer <eth:syzkaller0>
[  102.625668][ T5037] tipc: Disabling bearer <eth:syzkaller0>
[  102.639598][ T4800] device veth0_macvtap entered promiscuous mode
[  102.660476][ T4800] device veth1_macvtap entered promiscuous mode
[  102.704884][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.746232][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.771767][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.784452][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.794512][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.805339][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.816996][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.853791][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  102.870157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  102.885971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  102.912647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  102.941108][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.971646][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.987502][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.989268][ T4264] usb 1-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00
[  102.998165][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.029547][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.035506][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.046065][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.066985][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.068821][ T4264] usb 1-1: Product: syz
[  103.089932][ T5054] device syzkaller0 entered promiscuous mode
[  103.098006][ T4264] usb 1-1: Manufacturer: syz
[  103.104664][ T4264] usb 1-1: SerialNumber: syz
[  103.105928][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  103.133550][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.160121][ T4800] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.172029][ T4264] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  103.179628][ T4800] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.188469][ T4800] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.204895][ T4800] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.338384][ T5061] loop5: detected capacity change from 0 to 64
[  103.369217][ T4536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.382177][ T4264] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  103.398510][ T4536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.435315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  103.435859][ T4264] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  103.493197][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.504906][ T4264] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  103.525851][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.533492][ T4264] usb 1-1: media controller created
[  103.553619][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  103.578347][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  103.772972][ T5068] device syzkaller0 entered promiscuous mode
[  104.513774][ T5074] loop1: detected capacity change from 0 to 32768
[  104.613153][ T5103] device syzkaller0 entered promiscuous mode
[  104.681341][ T5074] XFS (loop1): Mounting V5 Filesystem
[  104.700351][ T4264] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  104.823169][ T5113] bridge0: port 3(vxlan0) entered blocking state
[  104.859246][ T5113] bridge0: port 3(vxlan0) entered disabled state
[  104.876254][ T4264] usb 1-1: USB disconnect, device number 4
[  104.882495][ T5074] XFS (loop1): Ending clean mount
[  104.906785][ T5113] device vxlan0 entered promiscuous mode
[  104.919841][   T26] audit: type=1800 audit(1786055259.882:7): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  104.964639][ T5074] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  105.360323][ T5129] XFS (loop1): User initiated shutdown received.
[  105.387500][ T5129] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  105.464649][ T5129] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  105.530389][ T5074] syz.1.176 (5074) used greatest stack depth: 19920 bytes left
[  105.667306][ T4186] XFS (loop1): Unmounting Filesystem
[  107.007717][ T5158] kvm [5156]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000008b
[  107.027801][ T5158] kvm [5156]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  107.082518][ T5158] kvm [5156]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100002785
[  107.145642][ T5158] kvm [5156]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  107.231252][ T5158] kvm [5156]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x3a39
[  107.303345][ T5158] kvm [5156]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  107.315004][ T5158] kvm [5156]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xdcf9
[  107.324467][ T5158] kvm [5156]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  107.345034][ T5158] kvm [5156]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xd639, nop
[  107.982569][ T5206] device syzkaller0 entered promiscuous mode
[  108.243617][ T5216] md: personality for level  is not loaded!
[  108.250177][ T5215] binder: 5213:5215 ioctl c0306201 200000002580 returned -14
[  108.310992][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  108.898879][ T5234] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.378749][ T5248] device syzkaller0 entered promiscuous mode
[  110.017203][ T5268] CacheFiles: Failed to register: -95
[  110.182035][ T5241] syz.1.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  110.194067][ T5241] CPU: 1 PID: 5241 Comm: syz.1.209 Not tainted syzkaller #0
[  110.201389][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.211480][ T5241] Call Trace:
[  110.214775][ T5241]  <TASK>
[  110.217738][ T5241]  dump_stack_lvl+0x188/0x250
[  110.222429][ T5241]  ? show_regs_print_info+0x20/0x20
[  110.227641][ T5241]  ? load_image+0x410/0x410
[  110.232142][ T5241]  ? local_lock_release+0x170/0x170
[  110.237326][ T5241]  ? __rwlock_init+0x140/0x140
[  110.242078][ T5241]  dump_header+0xd9/0x780
[  110.246396][ T5241]  oom_kill_process+0x20e/0x3d0
[  110.251241][ T5241]  out_of_memory+0xdb2/0x1190
[  110.255932][ T5241]  ? mem_cgroup_out_of_memory+0xbd/0x3b0
[  110.261585][ T5241]  ? mutex_lock_io_nested+0x60/0x60
[  110.266812][ T5241]  ? unregister_oom_notifier+0x20/0x20
[  110.272313][ T5241]  mem_cgroup_out_of_memory+0x2b9/0x3b0
[  110.277889][ T5241]  ? mem_cgroup_oom_trylock+0x210/0x210
[  110.283474][ T5241]  ? do_raw_spin_unlock+0x11d/0x230
[  110.288663][ T5241]  try_charge_memcg+0x1075/0x15b0
[  110.293685][ T5241]  ? get_mem_cgroup_from_objcg+0x120/0x120
[  110.299491][ T5241]  ? __alloc_pages+0x480/0x480
[  110.304285][ T5241]  ? rcu_lock_acquire+0x30/0x30
[  110.309157][ T5241]  charge_memcg+0x100/0x300
[  110.313736][ T5241]  ? __mem_cgroup_charge+0x80/0x80
[  110.318845][ T5241]  __mem_cgroup_charge+0x21/0x80
[  110.323785][ T5241]  wp_page_copy+0x4cc/0x2090
[  110.328370][ T5241]  ? __lock_acquire+0x7b50/0x7b50
[  110.333389][ T5241]  ? insert_page_into_pte_locked+0x470/0x470
[  110.339355][ T5241]  ? _raw_spin_unlock+0x24/0x40
[  110.344222][ T5241]  ? do_wp_page+0x965/0xb30
[  110.348712][ T5241]  handle_mm_fault+0x1fbd/0x4440
[  110.353641][ T5241]  ? get_page+0xe0/0xe0
[  110.357789][ T5241]  ? vmacache_find+0x53c/0x590
[  110.362575][ T5241]  ? vmacache_update+0xa0/0x100
[  110.367525][ T5241]  ? find_vma+0x1df/0x230
[  110.371843][ T5241]  do_user_addr_fault+0x494/0xc90
[  110.376877][ T5241]  exc_page_fault+0x60/0x100
[  110.381509][ T5241]  ? clear_bhb_loop+0x30/0x80
[  110.386210][ T5241]  asm_exc_page_fault+0x22/0x30
[  110.391084][ T5241] RIP: 0033:0x7f3f8e5d0ec5
[  110.395501][ T5241] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00
[  110.415134][ T5241] RSP: 002b:00007f3f8c867de0 EFLAGS: 00010293
[  110.421214][ T5241] RAX: 0000000000000008 RBX: 00007f3f8f3cae20 RCX: 0000000000000000
[  110.429176][ T5241] RDX: 0000000000000000 RSI: 00007f3f8e6c5561 RDI: 00007f3f8f3cae20
[  110.437135][ T5241] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005
[  110.445095][ T5241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3f8e6c53ef
[  110.453059][ T5241] R13: ffffffffffffffe8 R14: 0000000000000002 R15: 00007f3f8e6c5561
[  110.461049][ T5241]  </TASK>
[  110.483411][ T5241] memory: usage 8kB, limit 8kB, failcnt 45
[  110.508445][ T5241] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0
[  110.543778][ T5241] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0
[  110.597798][ T5241] Memory cgroup stats for /syz1/test:
[  110.602098][ T5241] anon 4096
[  110.602098][ T5241] file 0
[  110.602098][ T5241] kernel_stack 0
[  110.602098][ T5241] pagetables 0
[  110.602098][ T5241] percpu 0
[  110.602098][ T5241] sock 0
[  110.602098][ T5241] shmem 0
[  110.602098][ T5241] file_mapped 0
[  110.602098][ T5241] file_dirty 0
[  110.602098][ T5241] file_writeback 0
[  110.602098][ T5241] swapcached 0
[  110.602098][ T5241] anon_thp 0
[  110.602098][ T5241] file_thp 0
[  110.602098][ T5241] shmem_thp 0
[  110.602098][ T5241] inactive_anon 4096
[  110.602098][ T5241] active_anon 0
[  110.602098][ T5241] inactive_file 0
[  110.602098][ T5241] active_file 0
[  110.602098][ T5241] unevictable 0
[  110.602098][ T5241] slab_reclaimable 1928
[  110.602098][ T5241] slab_unreclaimable 648
[  110.602098][ T5241] slab 2576
[  110.602098][ T5241] workingset_refault_anon 0
[  110.602098][ T5241] workingset_refault_file 0
[  110.602098][ T5241] workingset_activate_anon 0
[  110.602098][ T5241] workingset_activate_file 0
[  110.696466][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.759039][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  111.649344][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  112.052051][ T5241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.209,pid=5240,uid=0
[  112.079771][ T5241] Memory cgroup out of memory: Killed process 5241 (syz.1.209) total-vm:102376kB, anon-rss:1424kB, file-rss:22860kB, shmem-rss:11348kB, UID:0 pgtables:152kB oom_score_adj:1000
[  113.223777][ T5295] device syzkaller0 entered promiscuous mode
[  113.290304][ T5292] device syzkaller0 entered promiscuous mode
[  114.619842][ T5310] device syzkaller0 entered promiscuous mode
[  114.839435][ T5331] tipc: Trying to set illegal importance in message
[  115.381117][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  115.608872][ T5333] loop5: detected capacity change from 0 to 2048
[  115.763569][ T5335] device syzkaller0 entered promiscuous mode
[  115.780080][ T5333] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  115.807048][ T5333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.920414][   T26] audit: type=1800 audit(1786055270.882:8): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.227" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  116.721128][ T5348] loop0: detected capacity change from 0 to 32768
[  116.974319][ T5351] device syzkaller0 entered promiscuous mode
[  117.240223][ T5365] netlink: 'syz.5.232': attribute type 10 has an invalid length.
[  117.248080][ T5365] netlink: 40 bytes leftover after parsing attributes in process `syz.5.232'.
[  117.941058][ T5365] team0: Port device geneve0 added
[  117.977242][ T5348] ftl_cs: FTL header not found.
[  118.268704][ T5371] device syzkaller0 entered promiscuous mode
[  119.207129][ T5348] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536]
[  120.535491][ T5405] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.809341][ T4233] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  120.847646][ T5405] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.974853][ T5405] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.199228][ T4233] usb 7-1: config 0 has no interfaces?
[  122.006631][ T5405] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.039271][ T4233] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  122.077762][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  122.106690][ T4233] usb 7-1: Product: syz
[  122.113583][ T4233] usb 7-1: Manufacturer: syz
[  122.131556][ T4233] usb 7-1: SerialNumber: syz
[  122.157617][ T4233] usb 7-1: config 0 descriptor??
[  122.162952][ T5427] netlink: 'syz.3.245': attribute type 10 has an invalid length.
[  122.170854][ T5427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.245'.
[  122.180879][ T5427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.190154][ T5427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.198862][ T5427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.207672][ T5427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.220793][ T5427] team0: Port device geneve0 added
[  122.451230][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  122.588369][ T5405] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.699633][ T5405] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.841438][ T5405] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.816916][ T5405] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.007405][ T4264] usb 7-1: USB disconnect, device number 2
[  124.174309][ T5457] loop6: detected capacity change from 0 to 32768
[  124.250043][ T5457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.251 (5457)
[  124.293183][ T5457] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  124.302285][ T5457] BTRFS info (device loop6): turning on sync discard
[  124.309425][ T5457] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  124.319297][ T5457] BTRFS info (device loop6): use zstd compression, level 3
[  124.326551][ T5457] BTRFS info (device loop6): turning on async discard
[  124.333631][ T5457] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  124.344735][ T5457] BTRFS info (device loop6): trying to use backup root at mount time
[  124.352910][ T5457] BTRFS info (device loop6): enabling auto defrag
[  124.359470][ T5457] BTRFS info (device loop6): using free space tree
[  124.365959][ T5457] BTRFS info (device loop6): has skinny extents
[  126.047361][    T9] BTRFS warning (device loop6): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  126.116645][ T5457] BTRFS warning (device loop6): failed to read root (objectid=2): -5
[  126.125271][ T4330] BTRFS warning (device loop6): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  126.194213][ T5457] BTRFS warning (device loop6): couldn't read tree root
[  126.209649][ T5457] BTRFS error (device loop6): parent transid verify failed on 5255168 wanted 5 found 7
[  126.219928][ T5457] BTRFS warning (device loop6): couldn't read tree root
[  126.315064][ T5457] BTRFS info (device loop6): enabling ssd optimizations
[  126.323228][ T5457] BTRFS info (device loop6): clearing free space tree
[  126.330705][ T5457] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  126.340952][ T5457] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  126.649000][    C0] sched: RT throttling activated
[  126.998361][ T5457] BTRFS info (device loop6): creating free space tree
[  127.010472][ T5457] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  127.020118][ T5457] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  127.059147][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  127.239050][ T5516] device syzkaller0 entered promiscuous mode
[  127.344150][ T5516] 0: reclassify loop, rule prio 0, protocol 800
[  127.380174][   T26] audit: type=1800 audit(1786055282.332:9): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="zoned" dev="configfs" ino=40067 res=0 errno=0
[  127.479292][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.539629][   T26] audit: type=1800 audit(1786055282.332:10): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="zone_nr_conv" dev="configfs" ino=40068 res=0 errno=0
[  127.610620][ T4231] usb 6-1: string descriptor 0 read error: -71
[  127.640480][ T4231] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  127.686378][   T26] audit: type=1800 audit(1786055282.342:11): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="power" dev="configfs" ino=40069 res=0 errno=0
[  127.711492][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.839386][ T4231] usb 6-1: can't set config #1, error -71
[  127.868453][ T4231] usb 6-1: USB disconnect, device number 2
[  127.917944][   T26] audit: type=1800 audit(1786055282.542:12): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="zoned" dev="configfs" ino=40144 res=0 errno=0
[  127.957961][ T5530] device-mapper: table: 248:0: thi: unknown target type
[  127.966423][ T5530] device-mapper: ioctl: error adding target to table
[  128.009134][   T26] audit: type=1800 audit(1786055282.572:13): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.261" name="power" dev="configfs" ino=39049 res=0 errno=0
[  128.385079][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'.
[  128.553397][ T5554] device syzkaller0 entered promiscuous mode
[  128.797785][   T26] audit: type=1800 audit(1786055283.752:14): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.269" name="local" dev="configfs" ino=39082 res=0 errno=0
[  128.874280][ T5557] kvm [5556]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x10000cf00
[  128.917824][   T26] audit: type=1800 audit(1786055283.752:15): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.269" name="scan_secs" dev="configfs" ino=39084 res=0 errno=0
[  130.384413][ T5590] device syzkaller0 entered promiscuous mode
[  130.498873][ T5595] binder_alloc: 5594: pid 5594 spamming oneway? 2 buffers allocated for a total size of 5120
[  130.529828][ T5591] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  130.625249][ T5603] device syzkaller0 entered promiscuous mode
[  130.762340][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'.
[  132.213429][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.221907][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.230327][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.238668][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.247045][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.255418][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.263805][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.272179][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.280543][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.288876][ T5620] tc action pedit unable to extract header offset for header type (0x4)
[  132.297268][ T5620] 0: reclassify loop, rule prio 0, protocol 800
[  133.083567][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  133.089964][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.111100][ T5634] autofs4:pid:5634:autofs_fill_super: called with bogus options
[  133.890935][ T5638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.285'.
[  135.939287][ T5673] device syzkaller0 entered promiscuous mode
[  137.930771][ T5709] tc action pedit offset 1024 out of bounds
[  137.936731][ T5709] tc action pedit offset 1024 out of bounds
[  137.942706][ T5709] tc action pedit offset 1024 out of bounds
[  137.948594][ T5709] tc action pedit offset 1024 out of bounds
[  137.954485][ T5709] tc action pedit offset 1024 out of bounds
[  137.960397][ T5709] tc action pedit offset 1024 out of bounds
[  137.966360][ T5709] tc action pedit offset 1024 out of bounds
[  137.972775][ T5709] tc action pedit offset 1024 out of bounds
[  137.978646][ T5709] tc action pedit offset 1024 out of bounds
[  137.984762][ T5709] tc action pedit offset 1024 out of bounds
[  137.990688][ T5709] TC_ACT_REPEAT abuse ?
[  138.805288][ T5727] netlink: 'syz.0.305': attribute type 10 has an invalid length.
[  138.871894][ T5727] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  139.313866][ T5745] loop5: detected capacity change from 0 to 256
[  140.048184][ T5745] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  140.527981][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  140.708693][ T5745] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.744953][ T5771] dlm: dev_write: no op 0 74000000000000
[  144.146245][ T5801] device syzkaller0 entered promiscuous mode
[  144.243187][ T5804] tipc: Started in network mode
[  145.000439][ T5804] tipc: Node identity 92abaa6bd85a, cluster identity 4711
[  145.008047][ T5804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.088817][ T5804] tipc: Resetting bearer <eth:syzkaller0>
[  146.750774][ T5804] tipc: Disabling bearer <eth:syzkaller0>
[  146.799276][ T4233] tipc: Node number set to 1257351787
[  146.858610][ T5829] jffs2: notice: (5829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  150.199998][ T5834] overlayfs: failed to resolve './bus': -2
[  150.404695][ T5847] kvm [5846]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  151.741699][ T5875] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  151.808950][ T5875] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  152.372802][ T5895] device syzkaller0 entered promiscuous mode
[  153.139376][ T5921] md: personality for level 0 is not loaded!
[  153.851005][ T4233] Bluetooth: hci4: command 0x0405 tx timeout
[  154.672034][ T5959] loop1: detected capacity change from 0 to 128
[  155.326523][ T5949] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  155.372831][ T5959] EXT4-fs (loop1): Invalid want_extra_isize 2147483647
[  157.446997][ T5994] loop6: detected capacity change from 0 to 512
[  157.600796][ T5994] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.353: iget: bad i_size value: 38620345925642
[  157.659455][ T5994] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.353: couldn't read orphan inode 15 (err -117)
[  157.731019][ T5994] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.876025][ T6034] syz.5.360 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  160.224571][ T6058] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  160.478165][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'.
[  160.489709][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'.
[  160.498849][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'.
[  160.508815][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'.
[  160.517866][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'.
[  162.665022][ T6092] using random self ethernet address
[  162.716664][ T6092] using random host ethernet address
[  162.967475][ T6101] tc action pedit 'at' offset 1235 out of bounds
[  165.819641][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.381'.
[  168.918573][ T6180] xt_SECMARK: invalid mode: 2
[  169.518702][ T6181] loop1: detected capacity change from 0 to 256
[  169.703493][ T6181] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d)
[  170.619250][ T6194] ODEBUG: Out of memory. ODEBUG disabled
[  171.097832][ T6201] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  171.184213][ T6201] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  172.738796][ T6219] loop3: detected capacity change from 0 to 1024
[  172.850413][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  173.655308][ T6219] EXT4-fs (loop3): Ignoring removed bh option
[  174.479738][ T6237] loop5: detected capacity change from 0 to 64
[  175.116064][ T6219] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  175.584612][ T6237] attempt to access beyond end of device
[  175.584612][ T6237] loop5: rw=2049, want=164, limit=64
[  175.596956][ T6237] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  175.606370][ T6237] attempt to access beyond end of device
[  175.606370][ T6237] loop5: rw=2049, want=168, limit=64
[  175.617687][ T6237] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  175.626896][ T6237] attempt to access beyond end of device
[  175.626896][ T6237] loop5: rw=2049, want=170, limit=64
[  175.637986][ T6237] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  175.647522][ T6237] attempt to access beyond end of device
[  175.647522][ T6237] loop5: rw=2049, want=172, limit=64
[  175.658709][ T6237] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  175.669623][ T6237] attempt to access beyond end of device
[  175.669623][ T6237] loop5: rw=2049, want=173, limit=64
[  175.680957][ T6237] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  175.692070][ T6237] attempt to access beyond end of device
[  175.692070][ T6237] loop5: rw=2049, want=174, limit=64
[  176.150614][ T6237] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  176.177856][ T6237] attempt to access beyond end of device
[  176.177856][ T6237] loop5: rw=2049, want=175, limit=64
[  176.926699][ T6237] Buffer I/O error on dev loop5, logical block 174, lost async page write
[  177.841557][ T6237] attempt to access beyond end of device
[  177.841557][ T6237] loop5: rw=2049, want=176, limit=64
[  177.852768][ T6237] Buffer I/O error on dev loop5, logical block 175, lost async page write
[  177.862136][ T6237] attempt to access beyond end of device
[  177.862136][ T6237] loop5: rw=2049, want=177, limit=64
[  177.873292][ T6237] Buffer I/O error on dev loop5, logical block 176, lost async page write
[  177.882152][ T6237] attempt to access beyond end of device
[  177.882152][ T6237] loop5: rw=2049, want=178, limit=64
[  177.893288][ T6237] Buffer I/O error on dev loop5, logical block 177, lost async page write
[  178.208247][   T26] audit: type=1800 audit(1786055333.162:16): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="addr_trtype" dev="configfs" ino=43049 res=0 errno=0
[  178.228923][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.631708][ T6277] nvmet_tcp: malformed ip/port passed: :4420
[  178.666040][   T26] audit: type=1800 audit(1786055333.392:17): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="addr_adrfam" dev="configfs" ino=42496 res=0 errno=0
[  179.062788][ T6294] loop6: detected capacity change from 0 to 128
[  179.163444][   T26] audit: type=1800 audit(1786055333.592:18): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="addr_trsvcid" dev="configfs" ino=43050 res=0 errno=0
[  179.357985][   T26] audit: type=1800 audit(1786055333.602:19): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="addr_traddr" dev="configfs" ino=42497 res=0 errno=0
[  179.813500][ T6306] trusted_key: encrypted_key: insufficient parameters specified
[  180.568289][ T6299] loop3: detected capacity change from 0 to 4096
[  180.604934][ T6312] loop5: detected capacity change from 0 to 128
[  180.669648][ T6312] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  183.017958][ T6317] Bluetooth: hci0: unsupported parameter 255
[  183.089098][ T6317] Bluetooth: hci0: unsupported parameter 255
[  183.743438][ T6345] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  183.817918][ T6345] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  183.830859][ T6345] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  183.882978][ T6345] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  183.941860][ T6350] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  184.049617][ T6345] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  184.099672][ T6354] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  184.581106][ T6368] loop6: detected capacity change from 0 to 128
[  184.722365][ T6365] loop3: detected capacity change from 0 to 1024
[  185.299172][ T6365] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature
[  187.769082][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.431'.
[  187.863674][ T4264] Bluetooth: hci3: command 0x0406 tx timeout
[  187.893225][ T4264] Bluetooth: hci1: command 0x0406 tx timeout
[  187.904325][ T4264] Bluetooth: hci0: command 0x0406 tx timeout
[  188.107432][ T6395] fuse: Bad value for 'fd'
[  190.668043][ T6399] block device autoloading is deprecated and will be removed.
[  191.086752][ T6412] device syzkaller0 entered promiscuous mode
[  191.344093][ T6412] tipc: Started in network mode
[  191.370802][ T6412] tipc: Node identity 7e0775b4eb9, cluster identity 4711
[  191.422175][ T6412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.438731][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'.
[  192.265400][ T6422] tipc: Resetting bearer <eth:syzkaller0>
[  192.300889][ T6422] tipc: Disabling bearer <eth:syzkaller0>
[  192.927921][ T6452] loop1: detected capacity change from 0 to 1024
[  193.016796][ T6452] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  193.304344][ T6465] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  194.221466][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.228911][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.861875][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.5.451'.
[  194.871866][ T6473] netlink: 'syz.5.451': attribute type 12 has an invalid length.
[  196.118260][ T6497] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  198.895049][ T6527] ip6t_srh: unknown srh match flags  FF3F
[  200.373904][ T6536] loop1: detected capacity change from 0 to 512
[  200.577241][ T6536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  201.444977][ T6536] EXT4-fs (loop1): 1 orphan inode deleted
[  201.567750][ T4264] Bluetooth: hci2: command 0x0406 tx timeout
[  202.630598][ T6536] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  202.707194][ T6536] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.739813][ T6576] capability: warning: `syz.3.475' uses 32-bit capabilities (legacy support in use)
[  205.173248][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  207.033340][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.040541][ T6605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.827991][ T6594] tipc: Started in network mode
[  207.910214][ T6594] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  207.964615][ T6594] tipc: Enabled bearer <eth:team0>, priority 0
[  208.938796][ T6615] loop5: detected capacity change from 0 to 512
[  208.969157][ T4231] tipc: Node number set to 11578026
[  209.900810][ T6615] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback.
[  209.944577][ T6615] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.251113][ T6636] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  210.264248][ T6636] qnx6: wrong signature (magic) in superblock #1.
[  210.270826][ T6636] qnx6: unable to read the first superblock
[  211.747855][ T6651] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  212.802161][ T6662] autofs4:pid:6662:autofs_fill_super: called with bogus options
[  213.717370][ T6661] team0: Device xfrm0 is of different type
[  213.804703][ T6662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  213.813293][ T6662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.820837][ T6662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.919985][ T6663] tipc: Enabled bearer <eth:team0>, priority 0
[  216.773279][ T4607] Bluetooth: hci4: command 0x0406 tx timeout
[  216.834889][ T6684] loop5: detected capacity change from 0 to 512
[  217.046975][ T6684] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.502: invalid indirect mapped block 4294967295 (level 1)
[  217.194898][ T6684] EXT4-fs (loop5): Remounting filesystem read-only
[  217.234926][ T6684] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.502: invalid indirect mapped block 4294967295 (level 1)
[  217.304969][ T6684] EXT4-fs (loop5): Remounting filesystem read-only
[  217.329469][ T6684] EXT4-fs (loop5): 2 truncates cleaned up
[  217.366245][ T6684] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,resuid=0x0000000000000000,. Quota mode: writeback.
[  217.705400][ T6694] loop3: detected capacity change from 0 to 16
[  218.714626][ T6694] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  221.273452][ T6725] loop3: detected capacity change from 0 to 64
[  222.232640][ T6733] capability: warning: `syz.3.512' uses deprecated v2 capabilities in a way that may be insecure
[  227.376974][ T6789] overlayfs: conflicting lowerdir path
[  229.304431][ T6807] Device name cannot be null; rc = [-22]
[  229.318229][ T6807] overlayfs: overlapping lowerdir path
[  229.326397][ T6807] overlayfs: overlapping lowerdir path
[  229.399042][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.6.534'.
[  229.411981][ T6813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  229.419259][ T6813] IPv6: NLM_F_CREATE should be set when creating new route
[  229.427056][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.6.534'.
[  229.533920][ T6816] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  229.565153][ T6809] netlink: 'syz.5.533': attribute type 10 has an invalid length.
[  229.574595][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.5.533'.
[  229.747166][ T6821] configfs-gadget gadget: Error: no playback and capture channels
[  229.763352][ T6821] udc usbip-vudc.0: failed to start g_uac2: -22
[  231.749431][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  231.760084][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  231.767658][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  231.777736][ T4200] Workqueue: hci3 hci_rx_work
[  231.782459][ T4200] Call Trace:
[  231.785749][ T4200]  <TASK>
[  231.788692][ T4200]  dump_stack_lvl+0x188/0x250
[  231.793394][ T4200]  ? show_regs_print_info+0x20/0x20
[  231.798621][ T4200]  ? load_image+0x410/0x410
[  231.803212][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  231.808349][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  231.813080][ T4200]  ? kthread+0x42e/0x520
[  231.817346][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  231.822577][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  231.827807][ T4200]  kobject_add+0x160/0x230
[  231.832349][ T4200]  ? kobject_init+0x1c0/0x1c0
[  231.837053][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  231.842366][ T4200]  ? klist_children_get+0x50/0x50
[  231.847452][ T4200]  ? get_device_parent+0x121/0x3e0
[  231.852618][ T4200]  device_add+0x470/0x1050
[  231.857054][ T4200]  ? device_initialize+0x2a5/0x4d0
[  231.862182][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  231.867139][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[  231.872453][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  231.877590][ T4200]  ? __mutex_trylock_common+0x15c/0x260
[  231.883163][ T4200]  hci_le_meta_evt+0x285/0x3ca0
[  231.888037][ T4200]  ? hci_event_packet+0x363/0x1310
[  231.893316][ T4200]  ? __lock_acquire+0x7b50/0x7b50
[  231.898402][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  231.904601][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  231.910260][ T4200]  ? mark_lock+0x94/0x320
[  231.914610][ T4200]  ? mutex_unlock+0x10/0x10
[  231.919135][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  231.925139][ T4200]  ? lock_chain_count+0x20/0x20
[  231.930018][ T4200]  ? __rwlock_init+0x140/0x140
[  231.934837][ T4200]  hci_event_packet+0xe0b/0x1310
[  231.939800][ T4200]  ? _raw_spin_unlock+0x40/0x40
[  231.944657][ T4200]  ? rcu_lock_release+0x20/0x20
[  231.949523][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  231.954728][ T4200]  hci_rx_work+0x255/0xa10
[  231.959165][ T4200]  process_one_work+0x867/0xff0
[  231.964039][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  231.969677][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  231.974980][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  231.980012][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  231.985601][ T4200]  ? wq_worker_running+0x97/0x170
[  231.990635][ T4200]  worker_thread+0xad7/0x12a0
[  231.995347][ T4200]  kthread+0x42e/0x520
[  231.999422][ T4200]  ? rcu_lock_release+0x20/0x20
[  232.004274][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  232.008869][ T4200]  ret_from_fork+0x1f/0x30
[  232.013316][ T4200]  </TASK>
[  232.016353][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.543977][ T6842] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  232.559915][ T6842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  232.653499][ T6843] netlink: 'syz.0.539': attribute type 2 has an invalid length.
[  232.660082][ T4200] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  232.687899][ T4200] Bluetooth: hci3: failed to register connection device
[  233.544277][ T6850] loop5: detected capacity change from 0 to 128
[  234.237229][ T6859] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4444] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6859]
[  234.281378][ T6859] netlink: 260 bytes leftover after parsing attributes in process `syz.5.544'.
[  234.293324][ T6859] netlink: 104 bytes leftover after parsing attributes in process `syz.5.544'.
[  234.302925][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.544'.
[  234.338617][ T4200] Bluetooth: Wrong link type (-22)
[  235.873358][ T6868] xt_hashlimit: max too large, truncated to 1048576
[  237.213436][ T6874] loop5: detected capacity change from 0 to 1024
[  237.496034][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  238.104708][ T6895] 9pnet_virtio: no channels available for device syz
[  238.736291][   T26] audit: type=1800 audit(1786055393.312:20): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.552" name="file0" dev="loop5" ino=18 res=0 errno=0
[  239.178887][ T4985] Bluetooth: hci3: command 0x0406 tx timeout
[  240.302060][   T26] audit: type=1800 audit(1786055395.262:21): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.559" name="ipv4_address" dev="configfs" ino=45568 res=0 errno=0
[  240.410363][   T26] audit: type=1800 audit(1786055395.262:22): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.559" name="ipv4_port" dev="configfs" ino=45569 res=0 errno=0
[  240.459027][   T26] audit: type=1800 audit(1786055395.262:23): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.559" name="num" dev="configfs" ino=45570 res=0 errno=0
[  240.525362][   T26] audit: type=1800 audit(1786055395.262:24): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.559" name="block_bytes" dev="configfs" ino=45577 res=0 errno=0
[  240.569026][   T26] audit: type=1800 audit(1786055395.272:25): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.559" name="dev" dev="configfs" ino=45578 res=0 errno=0
[  240.766949][ T6923] netlink: 'syz.5.563': attribute type 10 has an invalid length.
[  240.775103][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.5.563'.
[  242.041290][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.050101][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.181848][ T6928] tipc: Resetting bearer <eth:team0>
[  248.116039][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.162626][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.593694][ T6928] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.607313][ T6928] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.616516][ T6928] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.625531][ T6928] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.887040][ T6944] netlink: 'syz.6.578': attribute type 10 has an invalid length.
[  248.895069][ T6944] netlink: 40 bytes leftover after parsing attributes in process `syz.6.578'.
[  248.930384][ T6944] team0: Port device geneve0 added
[  248.940896][ T6983] device syzkaller0 entered promiscuous mode
[  249.455070][ T7012] CacheFiles: Failed to register: -95
[  249.629432][ T7018] device syzkaller0 entered promiscuous mode
[  254.927723][ T7069] netlink: 'syz.3.599': attribute type 10 has an invalid length.
[  254.935772][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.599'.
[  255.015709][ T7069] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.025034][ T7069] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.034228][ T7069] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.043399][ T7069] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.651740][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.658291][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  258.570856][ T7107] device syzkaller0 entered promiscuous mode
[  260.226407][ T7127] device syzkaller0 entered promiscuous mode
[  260.942715][ T7136] loop6: detected capacity change from 0 to 2048
[  261.169441][ T7136] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  261.218320][ T7136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.309790][   T26] audit: type=1800 audit(1786055416.272:26): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.626" name="file1" dev="loop6" ino=1346 res=0 errno=0
[  262.167126][ T7154] tipc: Trying to set illegal importance in message
[  262.379282][ T4985] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  262.879367][ T4985] usb 6-1: config 0 has no interfaces?
[  263.039369][ T4985] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  263.049076][ T4985] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  263.057396][ T4985] usb 6-1: Product: syz
[  263.079749][ T4985] usb 6-1: Manufacturer: syz
[  263.089644][ T7123] block2mtd: error: cannot open device /dev/loop0
[  263.097089][ T4985] usb 6-1: SerialNumber: syz
[  263.103931][ T7159] md: could not open device unknown-block(1,0).
[  263.120036][ T4985] usb 6-1: config 0 descriptor??
[  263.435488][ T4264] usb 6-1: USB disconnect, device number 3
[  266.087494][ T7189] program syz.3.630 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.909016][ T4232] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  267.239398][    C1] ==================================================================
[  267.247952][    C1] BUG: KASAN: use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  267.256902][    C1] Read of size 1 at addr ffff88801d993010 by task kworker/1:1H/150
[  267.264777][    C1] 
[  267.267090][    C1] CPU: 1 PID: 150 Comm: kworker/1:1H Not tainted syzkaller #0
[  267.274543][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  267.284596][    C1] Workqueue: events_highpri snd_vmidi_output_work
[  267.291009][    C1] Call Trace:
[  267.294286][    C1]  <IRQ>
[  267.297115][    C1]  dump_stack_lvl+0x188/0x250
[  267.301792][    C1]  ? show_regs_print_info+0x20/0x20
[  267.306995][    C1]  ? load_image+0x410/0x410
[  267.311478][    C1]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  267.316937][    C1]  print_address_description+0x60/0x2d0
[  267.322557][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  267.329143][    C1]  kasan_report+0xdf/0x130
[  267.333548][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  267.340141][    C1]  llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  267.346546][    C1]  llc_conn_state_process+0x506/0x12b0
[  267.351994][    C1]  llc_conn_tmr_common_cb+0x336/0x7e0
[  267.357350][    C1]  ? llc_conn_busy_tmr_cb+0x20/0x20
[  267.362545][    C1]  call_timer_fn+0x17b/0x540
[  267.367121][    C1]  ? llc_conn_busy_tmr_cb+0x20/0x20
[  267.372337][    C1]  ? __run_timers+0x810/0x810
[  267.377014][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  267.382202][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  267.387394][    C1]  ? llc_conn_busy_tmr_cb+0x20/0x20
[  267.392578][    C1]  __run_timers+0x56c/0x810
[  267.397085][    C1]  ? detach_timer+0x2b0/0x2b0
[  267.401753][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  267.407743][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  267.412598][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  267.418841][    C1]  run_timer_softirq+0x63/0xf0
[  267.423611][    C1]  handle_softirqs+0x336/0x830
[  267.428376][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  267.433205][    C1]  ? do_softirq+0x210/0x210
[  267.437709][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[  267.442806][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  267.447987][    C1]  __irq_exit_rcu+0x13b/0x230
[  267.452653][    C1]  ? irq_exit_rcu+0x20/0x20
[  267.457185][    C1]  irq_exit_rcu+0x5/0x20
[  267.461429][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  267.467073][    C1]  </IRQ>
[  267.469986][    C1]  <TASK>
[  267.472898][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  267.478866][    C1] RIP: 0010:finish_lock_switch+0x12f/0x290
[  267.484666][    C1] Code: 83 c7 18 be ff ff ff ff e8 6e cb 6b 08 85 c0 74 46 4d 85 ff 75 62 e9 06 01 00 00 48 89 df e8 98 3a 75 08 e8 43 d7 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c
[  267.504277][    C1] RSP: 0018:ffffc9000169f6d8 EFLAGS: 00000286
[  267.510355][    C1] RAX: ee8ddabbbf835900 RBX: ffff88802c2fd940 RCX: ee8ddabbbf835900
[  267.518327][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200
[  267.526280][    C1] RBP: 1ffff11017227613 R08: ffffffff901ee1ef R09: 1ffffffff203dc3d
[  267.534228][    C1] R10: dffffc0000000000 R11: fffffbfff203dc3e R12: ffff8880b913b088
[  267.542193][    C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000
[  267.550192][    C1]  finish_task_switch+0x12f/0x650
[  267.555237][    C1]  __schedule+0x11cb/0x4350
[  267.559779][    C1]  ? release_firmware_map_entry+0x190/0x190
[  267.565692][    C1]  ? preempt_schedule+0xbc/0xd0
[  267.570554][    C1]  preempt_schedule_common+0x82/0xd0
[  267.575851][    C1]  preempt_schedule+0xbc/0xd0
[  267.580537][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  267.586246][    C1]  ? lock_chain_count+0x20/0x20
[  267.591167][    C1]  ? __wake_up+0x11c/0x180
[  267.595566][    C1]  preempt_schedule_thunk+0x16/0x18
[  267.600750][    C1]  _raw_spin_unlock_irqrestore+0x10d/0x120
[  267.606537][    C1]  ? _raw_spin_unlock+0x40/0x40
[  267.611363][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  267.617258][    C1]  ? __snd_rawmidi_transmit_ack+0x230/0x2b0
[  267.623138][    C1]  snd_rawmidi_transmit+0x349/0x400
[  267.628409][    C1]  snd_vmidi_output_work+0x1a2/0x3e0
[  267.633694][    C1]  ? snd_virmidi_output_trigger+0xf0/0xf0
[  267.639409][    C1]  ? __schedule+0x11cb/0x4350
[  267.644067][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  267.649249][    C1]  process_one_work+0x867/0xff0
[  267.654267][    C1]  ? worker_detach_from_pool+0x240/0x240
[  267.659880][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  267.665152][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  267.670167][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  267.675690][    C1]  ? wq_worker_running+0x97/0x170
[  267.680708][    C1]  worker_thread+0xad7/0x12a0
[  267.685371][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  267.691246][    C1]  kthread+0x42e/0x520
[  267.695297][    C1]  ? rcu_lock_release+0x20/0x20
[  267.700127][    C1]  ? kthread_blkcg+0xd0/0xd0
[  267.704698][    C1]  ret_from_fork+0x1f/0x30
[  267.709104][    C1]  </TASK>
[  267.712103][    C1] 
[  267.714416][    C1] Allocated by task 7169:
[  267.718740][    C1]  __kasan_kmalloc+0xaf/0xe0
[  267.723343][    C1]  llc_sap_open+0xda/0x330
[  267.727750][    C1]  llc_ui_autobind+0x1fa/0x4b0
[  267.732497][    C1]  llc_ui_connect+0x1c5/0xc70
[  267.737164][    C1]  __sys_connect+0x3cb/0x450
[  267.741734][    C1]  __x64_sys_connect+0x76/0x80
[  267.746558][    C1]  do_syscall_64+0x4c/0xa0
[  267.750980][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  267.756869][    C1] 
[  267.759177][    C1] Freed by task 4228:
[  267.763144][    C1]  kasan_set_track+0x4b/0x70
[  267.767720][    C1]  kasan_set_free_info+0x1f/0x40
[  267.772643][    C1]  ____kasan_slab_free+0xd5/0x110
[  267.777782][    C1]  slab_free_freelist_hook+0xec/0x170
[  267.783149][    C1]  kmem_cache_free_bulk+0x38b/0x490
[  267.788335][    C1]  kfree_rcu_work+0x311/0x900
[  267.793004][    C1]  process_one_work+0x867/0xff0
[  267.797836][    C1]  worker_thread+0xad7/0x12a0
[  267.802535][    C1]  kthread+0x42e/0x520
[  267.806584][    C1]  ret_from_fork+0x1f/0x30
[  267.810977][    C1] 
[  267.813289][    C1] Last potentially related work creation:
[  267.819055][    C1]  kasan_save_stack+0x35/0x60
[  267.823712][    C1]  kasan_record_aux_stack+0xb8/0x100
[  267.828978][    C1]  kvfree_call_rcu+0x105/0x7f0
[  267.833745][    C1]  llc_ui_release+0x212/0x450
[  267.838428][    C1]  sock_close+0xbf/0x210
[  267.842692][    C1]  __fput+0x212/0x8c0
[  267.846707][    C1]  task_work_run+0x125/0x1a0
[  267.851291][    C1]  get_signal+0x123e/0x12e0
[  267.855781][    C1]  arch_do_signal_or_restart+0xe6/0x12a0
[  267.861420][    C1]  exit_to_user_mode_loop+0x9e/0x130
[  267.866688][    C1]  exit_to_user_mode_prepare+0xee/0x180
[  267.872288][    C1]  syscall_exit_to_user_mode+0x16/0x40
[  267.877768][    C1]  do_syscall_64+0x58/0xa0
[  267.882176][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  267.888082][    C1] 
[  267.890387][    C1] Second to last potentially related work creation:
[  267.896950][    C1]  kasan_save_stack+0x35/0x60
[  267.901609][    C1]  kasan_record_aux_stack+0xb8/0x100
[  267.906878][    C1]  call_rcu+0x189/0x900
[  267.911021][    C1]  netlink_release+0x134c/0x1790
[  267.915942][    C1]  sock_close+0xbf/0x210
[  267.920201][    C1]  __fput+0x212/0x8c0
[  267.924165][    C1]  task_work_run+0x125/0x1a0
[  267.928744][    C1]  exit_to_user_mode_loop+0x10f/0x130
[  267.934109][    C1]  exit_to_user_mode_prepare+0xee/0x180
[  267.939647][    C1]  syscall_exit_to_user_mode+0x16/0x40
[  267.945096][    C1]  do_syscall_64+0x58/0xa0
[  267.949494][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  267.955373][    C1] 
[  267.957677][    C1] The buggy address belongs to the object at ffff88801d993000
[  267.957677][    C1]  which belongs to the cache kmalloc-2k of size 2048
[  267.971717][    C1] The buggy address is located 16 bytes inside of
[  267.971717][    C1]  2048-byte region [ffff88801d993000, ffff88801d993800)
[  267.984972][    C1] The buggy address belongs to the page:
[  267.990721][    C1] page:ffffea0000766400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d990
[  268.000865][    C1] head:ffffea0000766400 order:3 compound_mapcount:0 compound_pincount:0
[  268.009262][    C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  268.017252][    C1] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42000
[  268.025813][    C1] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[  268.034375][    C1] page dumped because: kasan: bad access detected
[  268.040874][    C1] page_owner tracks the page as allocated
[  268.046566][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4186, ts 67578897582, free_ts 67563566426
[  268.067045][    C1]  get_page_from_freelist+0x24f6/0x2670
[  268.072584][    C1]  __alloc_pages+0x1ee/0x480
[  268.077160][    C1]  new_slab+0xc0/0x4b0
[  268.081206][    C1]  ___slab_alloc+0x807/0xdd0
[  268.085773][    C1]  kmem_cache_alloc_trace+0xf9/0x290
[  268.091033][    C1]  ipv6_add_dev+0xce/0x11a0
[  268.095513][    C1]  addrconf_notify+0x66f/0xf20
[  268.100253][    C1]  raw_notifier_call_chain+0xcb/0x160
[  268.105603][    C1]  register_netdevice+0x12a8/0x1720
[  268.110826][    C1]  cfg80211_register_netdevice+0x155/0x2f0
[  268.116620][    C1]  ieee80211_if_add+0x1002/0x1e00
[  268.121626][    C1]  ieee80211_register_hw+0x2b39/0x3a60
[  268.127059][    C1]  mac80211_hwsim_new_radio+0x209d/0x4050
[  268.132840][    C1]  hwsim_new_radio_nl+0xa7d/0xc50
[  268.137838][    C1]  genl_rcv_msg+0xd0b/0xfa0
[  268.142316][    C1]  netlink_rcv_skb+0x1e9/0x430
[  268.147058][    C1] page last free stack trace:
[  268.151974][    C1]  free_unref_page_prepare+0x637/0x6c0
[  268.157417][    C1]  free_unref_page+0x8f/0x2a0
[  268.162069][    C1]  __unfreeze_partials+0x188/0x1e0
[  268.167168][    C1]  put_cpu_partial+0x12d/0x190
[  268.171932][    C1]  qlist_free_all+0x35/0x90
[  268.176437][    C1]  kasan_quarantine_reduce+0x150/0x160
[  268.181874][    C1]  __kasan_slab_alloc+0x2f/0xc0
[  268.186699][    C1]  slab_post_alloc_hook+0x4c/0x380
[  268.191790][    C1]  __kmalloc_node+0x1ae/0x3a0
[  268.196440][    C1]  memcg_alloc_page_obj_cgroups+0x7d/0x120
[  268.202222][    C1]  new_slab+0x100/0x4b0
[  268.206359][    C1]  ___slab_alloc+0x807/0xdd0
[  268.210938][    C1]  kmem_cache_alloc+0xf0/0x280
[  268.215692][    C1]  new_inode_pseudo+0x77/0x210
[  268.220437][    C1]  new_inode+0x25/0x1d0
[  268.224590][    C1]  __debugfs_create_file+0x147/0x500
[  268.229875][    C1] 
[  268.232180][    C1] Memory state around the buggy address:
[  268.237807][    C1]  ffff88801d992f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  268.245843][    C1]  ffff88801d992f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  268.254060][    C1] >ffff88801d993000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  268.262126][    C1]                          ^
[  268.266714][    C1]  ffff88801d993080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  268.275183][    C1]  ffff88801d993100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  268.283230][    C1] ==================================================================
[  268.291275][    C1] Disabling lock debugging due to kernel taint
[  268.300057][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  268.307336][    C1] CPU: 1 PID: 150 Comm: kworker/1:1H Tainted: G    B             syzkaller #0
[  268.316188][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  268.326228][    C1] Workqueue: events_highpri snd_vmidi_output_work
[  268.332653][    C1] Call Trace:
[  268.335912][    C1]  <IRQ>
[  268.338733][    C1]  dump_stack_lvl+0x188/0x250
[  268.343405][    C1]  ? show_regs_print_info+0x20/0x20
[  268.348580][    C1]  ? load_image+0x410/0x410
[  268.353081][    C1]  panic+0x2f8/0x850
[  268.356954][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  268.361431][    C1]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  268.367313][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  268.373185][    C1]  ? _raw_spin_unlock+0x40/0x40
[  268.378012][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  268.384594][    C1]  check_panic_on_warn+0x80/0xa0
[  268.389519][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  268.396091][    C1]  end_report+0x6d/0xf0
[  268.400229][    C1]  kasan_report+0x102/0x130
[  268.404710][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  268.411278][    C1]  llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0
[  268.417773][    C1]  llc_conn_state_process+0x506/0x12b0
[  268.423212][    C1]  llc_conn_tmr_common_cb+0x336/0x7e0
[  268.428573][    C1]  ? llc_conn_busy_tmr_cb+0x20/0x20
[  268.433745][    C1]  call_timer_fn+0x17b/0x540
[  268.438406][    C1]  ? llc_conn_busy_tmr_cb+0x20/0x20
[  268.443592][    C1]  ? __run_timers+0x810/0x810
[  268.448294][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  268.453471][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  268.458647][    C1]  ? llc_conn_busy_tmr_cb+0x20/0x20
[  268.463827][    C1]  __run_timers+0x56c/0x810
[  268.468359][    C1]  ? detach_timer+0x2b0/0x2b0
[  268.473011][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  268.478996][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  268.483946][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  268.490168][    C1]  run_timer_softirq+0x63/0xf0
[  268.494912][    C1]  handle_softirqs+0x336/0x830
[  268.499673][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  268.504516][    C1]  ? do_softirq+0x210/0x210
[  268.508997][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[  268.514089][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  268.519356][    C1]  __irq_exit_rcu+0x13b/0x230
[  268.524030][    C1]  ? irq_exit_rcu+0x20/0x20
[  268.528512][    C1]  irq_exit_rcu+0x5/0x20
[  268.532728][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  268.538339][    C1]  </IRQ>
[  268.541248][    C1]  <TASK>
[  268.544157][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  268.550192][    C1] RIP: 0010:finish_lock_switch+0x12f/0x290
[  268.556077][    C1] Code: 83 c7 18 be ff ff ff ff e8 6e cb 6b 08 85 c0 74 46 4d 85 ff 75 62 e9 06 01 00 00 48 89 df e8 98 3a 75 08 e8 43 d7 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c
[  268.575674][    C1] RSP: 0018:ffffc9000169f6d8 EFLAGS: 00000286
[  268.581744][    C1] RAX: ee8ddabbbf835900 RBX: ffff88802c2fd940 RCX: ee8ddabbbf835900
[  268.589724][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200
[  268.597687][    C1] RBP: 1ffff11017227613 R08: ffffffff901ee1ef R09: 1ffffffff203dc3d
[  268.605640][    C1] R10: dffffc0000000000 R11: fffffbfff203dc3e R12: ffff8880b913b088
[  268.613607][    C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000
[  268.621581][    C1]  finish_task_switch+0x12f/0x650
[  268.626606][    C1]  __schedule+0x11cb/0x4350
[  268.631100][    C1]  ? release_firmware_map_entry+0x190/0x190
[  268.636973][    C1]  ? preempt_schedule+0xbc/0xd0
[  268.641815][    C1]  preempt_schedule_common+0x82/0xd0
[  268.647167][    C1]  preempt_schedule+0xbc/0xd0
[  268.651826][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  268.657596][    C1]  ? lock_chain_count+0x20/0x20
[  268.662441][    C1]  ? __wake_up+0x11c/0x180
[  268.666937][    C1]  preempt_schedule_thunk+0x16/0x18
[  268.672122][    C1]  _raw_spin_unlock_irqrestore+0x10d/0x120
[  268.678037][    C1]  ? _raw_spin_unlock+0x40/0x40
[  268.682904][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  268.688819][    C1]  ? __snd_rawmidi_transmit_ack+0x230/0x2b0
[  268.694807][    C1]  snd_rawmidi_transmit+0x349/0x400
[  268.700016][    C1]  snd_vmidi_output_work+0x1a2/0x3e0
[  268.705294][    C1]  ? snd_virmidi_output_trigger+0xf0/0xf0
[  268.711040][    C1]  ? __schedule+0x11cb/0x4350
[  268.715709][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  268.720885][    C1]  process_one_work+0x867/0xff0
[  268.725720][    C1]  ? worker_detach_from_pool+0x240/0x240
[  268.731343][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  268.736621][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  268.741634][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  268.747159][    C1]  ? wq_worker_running+0x97/0x170
[  268.752177][    C1]  worker_thread+0xad7/0x12a0
[  268.756838][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  268.762712][    C1]  kthread+0x42e/0x520
[  268.766769][    C1]  ? rcu_lock_release+0x20/0x20
[  268.771591][    C1]  ? kthread_blkcg+0xd0/0xd0
[  268.776155][    C1]  ret_from_fork+0x1f/0x30
[  268.780554][    C1]  </TASK>
[  268.783794][    C1] Kernel Offset: disabled
[  268.788113][    C1] Rebooting in 86400 seconds..