last executing test programs:

41.686978499s ago: executing program 4 (id=242):
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc10", 0x2a, r2}, 0x68)
prctl$PR_MCE_KILL(0x23, 0x7, 0x7fffffffeffe)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x2a442, 0x0)
truncate(0x0, 0x6)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x210}}], 0x1, 0x20000080)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f00000000c0)=0xc, 0x4)

39.852782524s ago: executing program 4 (id=245):
openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x3010c2, 0x1ff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_setup(0x6, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214c, 0xc000, 0x0, 0x70})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = gettid()
tkill(r1, 0x12)

39.431042945s ago: executing program 4 (id=246):
syz_emit_ethernet(0x76, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff})
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300), 0x0)
close(r3)
socket$inet6(0xa, 0x80003, 0x6)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})

28.58789208s ago: executing program 4 (id=265):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)

27.235890923s ago: executing program 4 (id=267):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0x3, &(0x7f0000000980)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/fscaps', 0x800, 0x82)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setreuid(0x0, 0xee00)
r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
get_robust_list(r3, 0x0, 0x0)
write(r0, &(0x7f0000000240)="6b17422ad06e5f5f8c0ab8c92f7cb28d3b561150a9d24ac0b8bd3959bd749858198c39fdc4c633ec8406851d60f3b96105e5e19e449ffeda11503eb694", 0x3d)
r4 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r4, 0x16, 0x0, @void}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth1_to_bridge\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)

25.384173499s ago: executing program 4 (id=270):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000200))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000004c0)=""/254)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
setxattr$incfs_size(&(0x7f0000000240)='./dev\x00', &(0x7f0000000280), &(0x7f00000005c0)=0x9, 0x8, 0x2)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12)

22.213470666s ago: executing program 32 (id=270):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000200))
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000004c0)=""/254)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
setxattr$incfs_size(&(0x7f0000000240)='./dev\x00', &(0x7f0000000280), &(0x7f00000005c0)=0x9, 0x8, 0x2)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12)

14.003754357s ago: executing program 0 (id=286):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7})
io_setup(0x2, &(0x7f0000000000))
connect(r2, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004)
recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e)
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
unshare(0x20000400)

11.829966501s ago: executing program 1 (id=287):
syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0))
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x122c022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=7'])
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x109e01, 0x0)

9.682369433s ago: executing program 1 (id=288):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1234567', 0x7)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, &(0x7f0000000480), 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
write(r4, 0x0, 0x0)

9.608225395s ago: executing program 0 (id=289):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
openat(0xffffffffffffff9c, 0x0, 0x442, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134014030d9"})

9.532274877s ago: executing program 2 (id=290):
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r4, 0x200a0204)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

8.615911839s ago: executing program 1 (id=291):
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x21)

8.532310681s ago: executing program 0 (id=292):
socket$inet_icmp(0x2, 0x2, 0x1)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
sendfile(r3, r3, 0x0, 0x400000007ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r4, 0x100000000000011, 0x2000, 0x2f93)

8.402304484s ago: executing program 2 (id=293):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}})
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0)
sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0)

7.048174487s ago: executing program 2 (id=295):
syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00')
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/fail_iommufd/probability\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f000026b000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6.95356825s ago: executing program 0 (id=296):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x800)
ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_ublk_setup_io_uring(0x223c, 0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x541b, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)

6.95317042s ago: executing program 1 (id=297):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
unshare(0x400)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$netlink(0x10, 0x3, 0x9)
r4 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x2000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40)
connect$inet(r2, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@typedef={0x5}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xe}}]}, {0x0, [0x61, 0x61, 0x7f]}}, &(0x7f0000000380)=""/173, 0x4d, 0xad, 0x0, 0x3, 0x10000}, 0x28)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
ioprio_set$pid(0x3, 0x0, 0x0)
r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r7, r7, &(0x7f0000000080)=0x2, 0x7f03)

5.70423058s ago: executing program 1 (id=299):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1884000, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES8=0x0], 0x4, 0x296, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_clone(0xa1c68400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
tkill(r4, 0xf)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x5, 0xfffa}, 0x20)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000940)=0x5f)

5.639025442s ago: executing program 3 (id=300):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x0, 0x6, {}, {<r5=>0x0}, 0x5, 0x2})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@multicast1, 0x4e21, 0x5, 0x4e22, 0x0, 0xa, 0x0, 0x90, 0x32, r4, r5}, {0x1, 0x5, 0x80000001, 0x8, 0x1, 0x2, 0xffffffffffffffff, 0x6}, {0x2, 0x5, 0x8a, 0x5}, 0x28, 0x6e6bbb, 0x0, 0x1, 0x5, 0x3}, {{@in6=@empty, 0x4d2, 0x6c}, 0x0, @in6=@mcast1, 0x3500, 0x1, 0x0, 0x0, 0x8, 0x48670d80, 0xd}}, 0xe8)
mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
shutdown(0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f00000017c0)={0x6, 0x46, 0x45, 0xb0e, 0x2, 0xae12})

5.221733422s ago: executing program 3 (id=301):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getpid()
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r3, &(0x7f00000000c0)="800034", 0x3, 0x24004084, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4)
setns(0xffffffffffffffff, 0x24020000)
umount2(0x0, 0x2)
flock(0xffffffffffffffff, 0x2)
r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r4, 0x1)

4.163071408s ago: executing program 3 (id=302):
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r1, 0x1)
flock(r1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000000))
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_getres(0xffffffffffffffed, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8d35)
read$proc_mixer(0xffffffffffffffff, &(0x7f0000000200)=""/211, 0xd3)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r3, &(0x7f000000a400)={0x2020}, 0x2020)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
flock(r0, 0x5)

3.487411954s ago: executing program 1 (id=303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x239)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/current_tracer\x00', 0x2, 0x0)
preadv(r4, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8)
syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00')
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003)
dup2(r5, r5)

3.483901685s ago: executing program 3 (id=304):
r0 = socket(0x10, 0x803, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0xd0ed}})

3.320299319s ago: executing program 0 (id=305):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
close(0x3)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r1, 0xa)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805)
io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f5})
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x766, &(0x7f0000001f40)="$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")
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, 0x0)
rename(0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.306214719s ago: executing program 3 (id=306):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5c}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001840), 0x4)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x408, &(0x7f0000000380)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nodelalloc}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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")
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1, 0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

2.544076008s ago: executing program 2 (id=307):
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380))
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000540)=0x5, 0x4)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="2399", 0x2}], 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400)
sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888)
timer_create(0x3, 0x0, &(0x7f0000044000))
r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5)

1.276054959s ago: executing program 2 (id=308):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
stat(0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r3)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x24ed, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.021344875s ago: executing program 3 (id=309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x100)
shutdown(r1, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019140), 0x8400, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCSETA(r3, 0x80047456, &(0x7f0000000140)={0x10, 0x0, 0x9, 0x1ff, 0x10, "b4ba1c25a953278a"})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000019080)=0x400)
write(r4, &(0x7f0000000100)='e:__group/myevent sched.sched_swit', 0x22)

650.989874ms ago: executing program 0 (id=310):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
syz_emit_ethernet(0x58, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x22, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18}, {0x0, 0x1, "005ff9297d00"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14)

0s ago: executing program 2 (id=311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xc}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x10000000, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts.
[   76.524103][ T4259] cgroup: Unknown subsys name 'net'
[   76.635834][ T4259] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.102792][ T4259] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   79.558538][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.558589][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.567534][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.574810][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.582694][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.592396][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.596295][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.603746][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.613887][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.616570][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.624350][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.629887][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.637585][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.643814][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.650214][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.662202][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.671158][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.679154][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.686260][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   79.693743][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.701159][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   79.708736][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.709968][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   79.751778][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.759717][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.767454][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   79.774750][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.808105][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.815777][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   79.826922][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.161291][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   80.287908][ T4276] chnl_net:caif_netlink_parms(): no params data found
[   80.352621][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.376517][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.388035][ T4272] device bridge_slave_0 entered promiscuous mode
[   80.413205][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.420503][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.428413][ T4276] device bridge_slave_0 entered promiscuous mode
[   80.439311][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.446400][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.455515][ T4272] device bridge_slave_1 entered promiscuous mode
[   80.463220][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.470594][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.478404][ T4276] device bridge_slave_1 entered promiscuous mode
[   80.485584][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   80.505321][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   80.539565][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.548707][ T4273] chnl_net:caif_netlink_parms(): no params data found
[   80.583813][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.624916][ T4272] team0: Port device team_slave_0 added
[   80.636057][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.660295][ T4272] team0: Port device team_slave_1 added
[   80.671086][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.726866][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.734064][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.760323][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.785086][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.792110][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.819095][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.855324][ T4276] team0: Port device team_slave_0 added
[   80.873768][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.881211][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.889097][ T4274] device bridge_slave_0 entered promiscuous mode
[   80.896892][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.904500][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.912741][ T4275] device bridge_slave_0 entered promiscuous mode
[   80.921460][ T4276] team0: Port device team_slave_1 added
[   80.951727][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.959139][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.967111][ T4274] device bridge_slave_1 entered promiscuous mode
[   80.976271][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.983695][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.993058][ T4275] device bridge_slave_1 entered promiscuous mode
[   81.018351][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.025677][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.033624][ T4273] device bridge_slave_0 entered promiscuous mode
[   81.047894][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.055117][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.084618][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.099607][ T4272] device hsr_slave_0 entered promiscuous mode
[   81.106689][ T4272] device hsr_slave_1 entered promiscuous mode
[   81.119493][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.126638][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.135066][ T4273] device bridge_slave_1 entered promiscuous mode
[   81.155373][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.162383][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.188443][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.205167][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.225626][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.257480][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.275607][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.301301][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.313956][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.352343][ T4275] team0: Port device team_slave_0 added
[   81.377188][ T4274] team0: Port device team_slave_0 added
[   81.386540][ T4275] team0: Port device team_slave_1 added
[   81.406243][ T4276] device hsr_slave_0 entered promiscuous mode
[   81.412898][ T4276] device hsr_slave_1 entered promiscuous mode
[   81.419568][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.427680][ T4276] Cannot create hsr debugfs directory
[   81.434360][ T4274] team0: Port device team_slave_1 added
[   81.459622][ T4273] team0: Port device team_slave_0 added
[   81.490525][ T4273] team0: Port device team_slave_1 added
[   81.496704][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.504770][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.531081][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.550664][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.557617][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.588977][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.601509][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.608482][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.634745][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.661666][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.668624][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.695249][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.775934][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.782977][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.809086][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.821699][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.828681][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.854807][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.866548][ T4289] Bluetooth: hci0: command 0x0409 tx timeout
[   81.872839][ T4289] Bluetooth: hci3: command 0x0409 tx timeout
[   81.879107][ T4288] Bluetooth: hci1: command 0x0409 tx timeout
[   81.879663][ T4286] Bluetooth: hci4: command 0x0409 tx timeout
[   81.885344][ T4288] Bluetooth: hci2: command 0x0409 tx timeout
[   81.934546][ T4274] device hsr_slave_0 entered promiscuous mode
[   81.941937][ T4274] device hsr_slave_1 entered promiscuous mode
[   81.949206][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.956790][ T4274] Cannot create hsr debugfs directory
[   82.002990][ T4273] device hsr_slave_0 entered promiscuous mode
[   82.009943][ T4273] device hsr_slave_1 entered promiscuous mode
[   82.016429][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.024157][ T4273] Cannot create hsr debugfs directory
[   82.032976][ T4275] device hsr_slave_0 entered promiscuous mode
[   82.040429][ T4275] device hsr_slave_1 entered promiscuous mode
[   82.047079][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.054731][ T4275] Cannot create hsr debugfs directory
[   82.251573][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.262594][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.290985][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.300393][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.394756][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.404364][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.426033][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.441743][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.523122][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.553757][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.560977][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.570801][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.581128][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.611873][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   82.625647][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.635187][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.647357][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.657403][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.668151][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.695833][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.724621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.734634][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.743909][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.751227][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.763632][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.789426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.814148][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.823944][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.835359][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   82.863853][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.874385][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.885932][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.893096][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.918362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.928433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.937746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.947542][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.954671][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.968139][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.001797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.010143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.019951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.032649][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.039842][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.048160][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.057150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.066578][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.075331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.084982][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.094139][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.103189][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.113407][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.124637][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.147738][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.157124][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.167992][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.177549][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.186242][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.195327][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.204091][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.214992][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.246328][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.262857][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.273875][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.291747][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.299605][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.307891][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.317370][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.325962][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.334913][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.353327][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.365681][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.379473][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.391619][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.442461][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   83.467977][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.493107][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.523229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.541047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.564388][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   83.594289][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.608208][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.624883][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.632083][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.646993][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.657064][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.666679][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.673840][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.705036][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.714183][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.726436][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.739366][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.748562][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.764755][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.771926][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.788198][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.797660][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.806742][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.813899][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.822942][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.860344][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.868603][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.887450][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.904188][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.915738][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.930675][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.939240][ T4288] Bluetooth: hci2: command 0x041b tx timeout
[   83.945272][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[   83.951672][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[   83.951689][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[   83.957703][ T4286] Bluetooth: hci0: command 0x041b tx timeout
[   83.979308][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.988174][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.021842][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.035108][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.046361][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.062204][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.074560][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.086235][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.095001][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.104754][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.113566][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.123213][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.138185][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.157403][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.186328][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.195103][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.214540][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.233132][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   84.249839][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   84.268075][ T4273] 8021q: adding VLAN 0 to HW filter on device team0
[   84.300911][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.308387][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.325995][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.335164][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.351878][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.376965][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.386839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.399701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.439330][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.446477][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.480253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.507621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.542718][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.549901][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.572925][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.584219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.638471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.651100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   84.661871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.677769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.687467][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.700951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.710034][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.726438][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.741774][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.783222][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   84.794420][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.820602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.829204][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.850077][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.883159][ T4272] device veth0_vlan entered promiscuous mode
[   84.917808][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.950577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.971047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.999413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.028293][ T4272] device veth1_vlan entered promiscuous mode
[   85.054146][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.087641][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.111845][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.137066][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.169271][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.177511][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.191502][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.225491][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.251872][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.266959][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.295284][ T4272] device veth0_macvtap entered promiscuous mode
[   85.329827][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.365866][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.375389][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.392418][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.403824][ T4272] device veth1_macvtap entered promiscuous mode
[   85.422064][ T4274] device veth0_vlan entered promiscuous mode
[   85.440039][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.449805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.457620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.479157][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.499388][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.513706][ T4274] device veth1_vlan entered promiscuous mode
[   85.563473][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.572661][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.585820][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.593704][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.606161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.614648][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.623935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.635261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.645272][ T4275] device veth0_vlan entered promiscuous mode
[   85.659087][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.695747][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.705777][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.715144][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.724484][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.735496][ T4275] device veth1_vlan entered promiscuous mode
[   85.747250][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.761886][ T4276] device veth0_vlan entered promiscuous mode
[   85.771084][ T4274] device veth0_macvtap entered promiscuous mode
[   85.778504][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.787895][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.797210][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.806639][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.815235][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.824277][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.841999][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.859840][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.869371][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.877977][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.889476][ T4274] device veth1_macvtap entered promiscuous mode
[   85.901138][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.914226][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.923766][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.933664][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.972834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.998130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.007723][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.019101][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[   86.025117][ T4286] Bluetooth: hci3: command 0x040f tx timeout
[   86.029133][ T4290] Bluetooth: hci4: command 0x040f tx timeout
[   86.033781][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[   86.037094][ T4290] Bluetooth: hci0: command 0x040f tx timeout
[   86.053029][ T4276] device veth1_vlan entered promiscuous mode
[   86.068278][ T4273] device veth0_vlan entered promiscuous mode
[   86.077512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.086637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.096201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.105506][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.114470][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.125413][ T4275] device veth0_macvtap entered promiscuous mode
[   86.133775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.143749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.151949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.165360][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.177284][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.193560][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.204249][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.215277][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.226832][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.250373][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.262649][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.272349][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.284697][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.296909][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   86.305712][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.314959][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.323876][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.332651][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.349755][ T4275] device veth1_macvtap entered promiscuous mode
[   86.374302][ T4273] device veth1_vlan entered promiscuous mode
[   86.384963][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.397267][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   86.443442][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.454882][ T1200] cfg80211: failed to load regulatory.db
[   86.484678][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.502034][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.515032][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.527404][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.537920][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.549769][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.558530][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.570265][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.590275][ T4276] device veth0_macvtap entered promiscuous mode
[   86.607800][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.627741][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.638253][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.654358][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.666650][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.677999][ T4276] device veth1_macvtap entered promiscuous mode
[   86.718018][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.729708][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.741582][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.750508][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.759996][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.769516][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.781931][ T4273] device veth0_macvtap entered promiscuous mode
[   86.792905][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.802545][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.811656][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.821449][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.860655][ T4273] device veth1_macvtap entered promiscuous mode
[   86.932786][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.944375][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.957097][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.969550][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.980201][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.994950][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.006981][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.027497][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.046138][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.056518][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.075787][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.086207][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.096993][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.107368][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.118226][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.133707][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.145451][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.157212][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.175196][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.194554][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.207578][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.217483][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.232570][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.247455][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.259961][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.271441][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.279504][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.285065][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.308487][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.324040][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.334909][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.351883][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.365867][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.383477][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.417692][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.430167][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.439957][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.455511][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.485577][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.495610][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.506133][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.516127][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.526743][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.536684][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.548319][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.563218][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.575750][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.587871][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.596647][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.605540][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.619984][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.636269][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.649663][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.658402][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.668669][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.677587][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.711939][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.730299][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.738178][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.750027][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.757677][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.767398][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.801927][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.844192][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.869892][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.884799][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.936021][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.978742][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.020757][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.035854][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.044152][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.069091][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.100152][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[   88.103195][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.106302][ T4290] Bluetooth: hci2: command 0x0419 tx timeout
[   88.124189][ T4288] Bluetooth: hci4: command 0x0419 tx timeout
[   88.124210][ T4286] Bluetooth: hci3: command 0x0419 tx timeout
[   88.131742][ T4288] Bluetooth: hci1: command 0x0419 tx timeout
[   88.157418][ T4362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.165474][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   88.298125][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.337621][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.365555][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.397607][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.420415][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.457915][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   89.463516][ T4385] batman_adv: batadv0: Adding interface: veth0
[   89.493042][ T4385] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.612045][ T4389] loop0: detected capacity change from 0 to 2048
[   89.630406][ T4385] batman_adv: batadv0: Interface activated: veth0
[   89.653822][ T4385] batman_adv: batadv0: Interface deactivated: veth0
[   89.667361][ T4385] batman_adv: batadv0: Removing interface: veth0
[   89.717101][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.737990][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.773019][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.794046][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.825402][ T4389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   89.972977][   T27] audit: type=1800 audit(1791265094.858:2): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10" name="no_out_endpoint" dev="configfs" ino=34194 res=0 errno=0
[   90.011566][ T4405] EXT4-fs error (device loop0): xattr_find_entry:297: inode #12: comm syz.0.9: corrupted xattr entries
[   90.188627][ T4272] EXT4-fs (loop0): unmounting filesystem.
[   90.300122][ T4413] loop3: detected capacity change from 0 to 8
[   91.526066][ T4432] loop3: detected capacity change from 0 to 128
[   91.579971][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   91.743664][ T4432] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.408117][ T4432] fscrypt: Error allocating hmac(sha512): -2
[   92.486316][ T4275] EXT4-fs (loop3): unmounting filesystem.
[   92.880003][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   93.419048][    T7] usb 3-1: Using ep0 maxpacket: 8
[   93.435122][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.446394][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.459564][    T7] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40
[   93.469520][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.477816][    T7] usb 3-1: Product: syz
[   93.482785][    T7] usb 3-1: Manufacturer: syz
[   93.487506][    T7] usb 3-1: SerialNumber: syz
[   94.241523][ T4467] loop1: detected capacity change from 0 to 2048
[   94.515082][ T4467] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   94.772962][ T4467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.774251][    T7] usb 3-1: unit 0 not found!
[   94.810206][    T7] usb 3-1: USB disconnect, device number 2
[   94.848869][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   94.977559][ T4475] netlink: 'syz.2.27': attribute type 4 has an invalid length.
[   95.089394][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.605900][ T4494] Bluetooth: MGMT ver 1.22
[   98.767025][ T4515] svc: failed to register lockdv1 RPC service (errno 111).
[   98.780182][ T4515] lockd_up: makesock failed, error=-111
[   98.818537][ T4509] md/raid:md0: device ram1 operational as raid disk 1
[   98.842596][ T4509] md/raid:md0: device ram0 operational as raid disk 0
[   98.886460][ T4509] md/raid:md0: raid level 5 active with 2 out of 3 devices, algorithm 2
[   98.913340][ T4509] md0: detected capacity change from 0 to 16384
[   98.941853][ T4513] md: md0 still in use.
[   99.148856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   99.168856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   99.178843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   99.188819][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   99.198833][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   99.208826][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   99.218829][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   99.228827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   99.238818][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  101.420026][ T4540] =======================================================
[  101.420026][ T4540] WARNING: The mand mount option has been deprecated and
[  101.420026][ T4540]          and is ignored by this kernel. Remove the mand
[  101.420026][ T4540]          option from the mount to silence this warning.
[  101.420026][ T4540] =======================================================
[  101.456318][ T4540] 9pnet_virtio: no channels available for device 127.0.0.1
[  102.418793][    C0] sched: RT throttling activated
[  104.154618][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'.
[  105.552648][ T4564] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in;
[  105.552648][ T4564]    program syz.2.55 not setting count and/or reply_len properly
[  106.816452][ T4581] netlink: 'syz.0.50': attribute type 4 has an invalid length.
[  106.979054][   T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  107.168891][   T26] usb 3-1: Using ep0 maxpacket: 32
[  108.577725][   T26] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  108.589294][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[  108.596042][   T26] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  108.606318][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.616554][   T26] usb 3-1: config 0 descriptor??
[  108.658124][ T4597] ip_tables: iptables: counters copy to user failed while replacing table
[  109.325814][ T4573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.371280][ T4573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.660491][   T26] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[  109.908053][ T4615] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  109.994182][ T4615] loop4: detected capacity change from 0 to 128
[  110.404570][   T26] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -71
[  110.813861][   T26] usb 3-1: USB disconnect, device number 3
[  113.433076][ T4635] loop3: detected capacity change from 0 to 512
[  114.769583][ T4625] fido_id[4625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  114.958047][ T4651] loop2: detected capacity change from 0 to 2048
[  115.329439][ T4651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  115.443066][ T4651] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.808283][ T4657] loop3: detected capacity change from 0 to 2048
[  115.907157][ T4657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.965277][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  116.179086][ T4663] netlink: 'syz.2.80': attribute type 10 has an invalid length.
[  116.306840][ T4663] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  116.360725][ T4666] device syzkaller0 entered promiscuous mode
[  116.672147][ T4674] loop3: detected capacity change from 0 to 16
[  116.712989][ T4674] erofs: (device loop3): mounted with root inode @ nid 36.
[  117.632610][ T4680] device syzkaller0 entered promiscuous mode
[  119.194155][ T4288] Bluetooth: hci4: command 0x0411 tx timeout
[  123.011247][ T4710] Zero length message leads to an empty skb
[  123.124213][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'.
[  123.818930][   T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  124.401111][   T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.434152][   T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.463332][   T26] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  124.511556][   T26] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  124.549370][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  124.579980][   T26] usb 2-1: Product: syz
[  124.587584][   T26] usb 2-1: Manufacturer: syz
[  124.631225][   T26] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected
[  124.655943][   T26] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  124.697105][   T26] garmin_gps: probe of ttyUSB0 failed with error -8
[  124.857015][   T26] usb 2-1: USB disconnect, device number 2
[  124.887812][   T26] garmin_gps 2-1:1.0: device disconnected
[  125.900346][    C1] net_ratelimit: 31 callbacks suppressed
[  126.278982][ T4737] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4737]
[  127.499123][ T4742] 9pnet_virtio: no channels available for device 127.0.0.1
[  129.113822][ T4747] device syzkaller0 entered promiscuous mode
[  129.218928][ T4324] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  129.420361][ T4324] usb 1-1: not running at top speed; connect to a high speed hub
[  129.438984][ T4324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.481957][ T4324] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  129.498449][ T4324] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  129.524630][ T4324] usb 1-1: Product: syz
[  129.539414][ T4324] usb 1-1: Manufacturer: syz
[  129.564324][ T4324] usb 1-1: Found UVC 1.00 device syz (225a:e1d4)
[  129.581828][ T4324] usb 1-1: No streaming interface found for terminal 2.
[  129.776422][ T4325] usb 1-1: USB disconnect, device number 2
[  130.979234][    C1] net_ratelimit: 43 callbacks suppressed
[  131.402867][ T4778] loop1: detected capacity change from 0 to 512
[  131.421157][ T4778] EXT4-fs: Ignoring removed nobh option
[  131.481651][ T4778] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.111: invalid indirect mapped block 256 (level 2)
[  131.514013][ T4778] EXT4-fs (loop1): 2 truncates cleaned up
[  131.521436][ T4778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  132.580752][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  132.587514][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  132.900710][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  136.178914][    C1] net_ratelimit: 45 callbacks suppressed
[  136.829946][   T27] audit: type=1800 audit(1791265141.718:3): pid=4765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.105" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  136.830574][ T4765] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  136.830599][ T4765] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  136.830614][ T4765] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  136.979239][ T4765] syz.2.105 (4765) used greatest stack depth: 20128 bytes left
[  137.318420][ T4818] loop2: detected capacity change from 0 to 32768
[  137.389737][ T4823] loop1: detected capacity change from 0 to 32768
[  137.419339][ T4818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.118 (4818)
[  137.475669][ T4818] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.486355][ T4818] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  137.495189][ T4818] BTRFS info (device loop2): use zlib compression, level 3
[  137.503033][ T4818] BTRFS info (device loop2): turning on sync discard
[  137.509817][ T4818] BTRFS info (device loop2): using free space tree
[  137.653889][ T4823] capability: warning: `syz.1.119' uses deprecated v2 capabilities in a way that may be insecure
[  138.193201][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  138.203513][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:6 Not tainted syzkaller #0
[  138.211100][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  138.221223][ T4288] Workqueue: hci4 hci_rx_work
[  138.225986][ T4288] Call Trace:
[  138.229293][ T4288]  <TASK>
[  138.232250][ T4288]  dump_stack_lvl+0x188/0x24e
[  138.236957][ T4288]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  138.242625][ T4288]  ? show_regs_print_info+0x12/0x12
[  138.247875][ T4288]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  138.253545][ T4288]  sysfs_create_dir_ns+0x26a/0x290
[  138.258710][ T4288]  ? sysfs_warn_dup+0xa0/0xa0
[  138.263430][ T4288]  ? do_raw_spin_unlock+0x11d/0x230
[  138.268665][ T4288]  kobject_add_internal+0x617/0xca0
[  138.273895][ T4288]  kobject_add+0x160/0x230
[  138.278362][ T4288]  ? kobject_init+0x1c0/0x1c0
[  138.283075][ T4288]  ? __raw_spin_lock_init+0x41/0x100
[  138.288390][ T4288]  ? klist_children_get+0x50/0x50
[  138.293474][ T4288]  ? get_device_parent+0x121/0x3e0
[  138.298630][ T4288]  device_add+0x470/0x1050
[  138.303086][ T4288]  hci_conn_add_sysfs+0xd1/0x1e0
[  138.308058][ T4288]  le_conn_complete_evt+0xf93/0x15c0
[  138.313386][ T4288]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  138.319657][ T4288]  ? param_get_dyndbg_classes+0x160/0x160
[  138.325419][ T4288]  ? mutex_unlock+0x10/0x10
[  138.329972][ T4288]  hci_le_conn_complete_evt+0x183/0x440
[  138.335563][ T4288]  ? hci_remote_host_features_evt+0x230/0x230
[  138.341677][ T4288]  hci_event_packet+0x7b3/0x1290
[  138.346654][ T4288]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  138.352331][ T4288]  ? bis_list+0x280/0x280
[  138.356700][ T4288]  ? kcov_remote_start+0x1b3/0x810
[  138.361859][ T4288]  ? hci_send_to_monitor+0x9c/0x4a0
[  138.367087][ T4288]  hci_rx_work+0x3eb/0xd40
[  138.371541][ T4288]  ? _raw_spin_unlock+0x40/0x40
[  138.376432][ T4288]  ? process_one_work+0x7b4/0x1160
[  138.381570][ T4288]  process_one_work+0x8ab/0x1160
[  138.386548][ T4288]  ? worker_detach_from_pool+0x240/0x240
[  138.392214][ T4288]  ? _raw_spin_lock_irq+0xb7/0xf0
[  138.397296][ T4288]  ? _raw_spin_lock_irqsave+0x100/0x100
[  138.402891][ T4288]  ? wq_worker_running+0x97/0x190
[  138.407946][ T4288]  worker_thread+0xaf5/0x12a0
[  138.412694][ T4288]  kthread+0x29d/0x330
[  138.416794][ T4288]  ? worker_clr_flags+0x1a0/0x1a0
[  138.421857][ T4288]  ? kthread_blkcg+0xd0/0xd0
[  138.426475][ T4288]  ret_from_fork+0x1f/0x30
[  138.430943][ T4288]  </TASK>
[  138.463079][ T4288] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  138.477601][ T4288] Bluetooth: hci4: failed to register connection device
[  138.959610][ T4818] BTRFS info (device loop2): enabling ssd optimizations
[  139.376658][   T27] audit: type=1800 audit(1791265144.248:4): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.118" name="file1" dev="loop2" ino=260 res=0 errno=0
[  141.259934][    C0] net_ratelimit: 30 callbacks suppressed
[  141.321399][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.558020][   T27] audit: type=1326 audit(1791265404.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.129" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f316d99e199 code=0x0
[  146.488323][ T4397] net_ratelimit: 45 callbacks suppressed
[  147.524369][ T4932] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  147.798540][ T4357] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  148.562400][ T4357] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.306176][ T4357] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  149.315406][ T4357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.333037][ T4357] usb 1-1: config 0 descriptor??
[  149.342834][ T4357] pwc: Askey VC010 type 2 USB webcam detected.
[  149.820613][ T4357] pwc: recv_control_msg error -32 req 02 val 2b00
[  150.340674][ T4357] pwc: recv_control_msg error -32 req 02 val 2700
[  150.348401][ T4357] pwc: recv_control_msg error -32 req 02 val 2c00
[  150.355503][ T4357] pwc: recv_control_msg error -32 req 04 val 1000
[  150.362740][ T4357] pwc: recv_control_msg error -32 req 04 val 1300
[  150.370348][ T4357] pwc: recv_control_msg error -32 req 04 val 1400
[  150.377582][ T4357] pwc: recv_control_msg error -32 req 02 val 2000
[  150.385625][ T4357] pwc: recv_control_msg error -32 req 02 val 2100
[  150.393344][ T4357] pwc: recv_control_msg error -32 req 04 val 1500
[  150.401083][ T4357] pwc: recv_control_msg error -32 req 02 val 2500
[  150.408504][ T4357] pwc: recv_control_msg error -32 req 02 val 2400
[  150.415969][ T4357] pwc: recv_control_msg error -32 req 02 val 2600
[  150.425519][ T4357] pwc: recv_control_msg error -32 req 02 val 2900
[  150.432883][ T4357] pwc: recv_control_msg error -32 req 02 val 2800
[  150.644158][ T4357] pwc: recv_control_msg error -71 req 04 val 1200
[  150.703105][ T4357] pwc: Registered as video103.
[  150.751352][ T4357] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[  150.852199][ T4357] usb 1-1: USB disconnect, device number 3
[  150.994162][ T4950] syz.3.145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  151.073309][ T4950] loop3: detected capacity change from 0 to 512
[  151.159243][ T4950] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  151.182709][ T4950] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.145: corrupted in-inode xattr
[  151.265725][ T4950] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.145: couldn't read orphan inode 15 (err -117)
[  151.538187][    C0] net_ratelimit: 38 callbacks suppressed
[  151.779013][ T4950] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  152.006361][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  156.737312][    C0] net_ratelimit: 37 callbacks suppressed
[  161.936658][    C1] net_ratelimit: 50 callbacks suppressed
[  167.587456][    C0] net_ratelimit: 41 callbacks suppressed
[  168.946941][ T5055] loop2: detected capacity change from 0 to 512
[  169.024103][ T5055] EXT4-fs: Mount option(s) incompatible with ext2
[  170.639296][ T5063] usb usb7: usbfs: process 5063 (syz.2.168) did not claim interface 0 before use
[  173.538436][    C0] net_ratelimit: 41 callbacks suppressed
[  178.929660][    C1] net_ratelimit: 47 callbacks suppressed
[  184.795695][    C0] net_ratelimit: 40 callbacks suppressed
[  185.990914][ T5126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.296973][ T5145] loop3: detected capacity change from 0 to 131072
[  188.791140][ T5145] F2FS-fs (loop3): invalid crc_offset: 266236
[  188.813206][ T5145] F2FS-fs (loop3): Found nat_bits in checkpoint
[  188.853947][ T5145] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  188.905490][ T5145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  189.933312][    C0] net_ratelimit: 47 callbacks suppressed
[  191.404716][ T5171] loop2: detected capacity change from 0 to 1024
[  191.434132][ T5171] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  191.633092][ T5171] EXT4-fs (loop2): unsupported descriptor size 30438
[  193.043047][ T4876] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  193.293048][ T4876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.303950][ T4876] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  193.358296][ T4876] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  193.377786][ T4876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.436752][ T4876] usb 4-1: Product: syz
[  193.473338][ T4876] usb 4-1: Manufacturer: syz
[  193.478050][ T4876] usb 4-1: SerialNumber: syz
[  193.534339][ T4876] usb 4-1: config 0 descriptor??
[  193.937416][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  193.945361][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  194.515638][ T5199] syz.3.201 uses obsolete (PF_INET,SOCK_PACKET)
[  194.726460][ T5201] device syzkaller0 entered promiscuous mode
[  194.764862][ T5201] tipc: Started in network mode
[  194.786879][ T5201] tipc: Node identity ee228351fbd9, cluster identity 4711
[  194.977977][ T5201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.142625][    C0] net_ratelimit: 48 callbacks suppressed
[  195.860856][ T5201] tipc: Resetting bearer <eth:syzkaller0>
[  196.008159][ T5200] tipc: Resetting bearer <eth:syzkaller0>
[  196.037826][ T4326] usb 4-1: USB disconnect, device number 2
[  196.174065][ T5200] tipc: Disabling bearer <eth:syzkaller0>
[  196.218208][ T4325] tipc: Node number set to 368804689
[  197.343260][ T5221] kvm_msr_ignored_check: 10 callbacks suppressed
[  197.434131][ T5225] loop2: detected capacity change from 0 to 512
[  197.446793][ T5225] EXT4-fs: Ignoring removed nobh option
[  197.803093][ T5225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  197.812677][ T5225] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  197.829272][ T5225] EXT4-fs (loop2): shut down requested (2)
[  199.465345][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  200.332035][ T4417] net_ratelimit: 43 callbacks suppressed
[  200.716750][ T5244] loop1: detected capacity change from 0 to 64
[  200.857461][ T5246] loop2: detected capacity change from 0 to 512
[  200.922182][ T5246] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  201.490242][ T5255] __vm_enough_memory: pid: 5255, comm: syz.2.218, no enough memory for the allocation
[  203.773577][ T5266] CIFS mount error: No usable UNC path provided in device string!
[  203.773577][ T5266] 
[  203.783962][ T5266] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  205.433650][ T5274] xt_hashlimit: size too large, truncated to 1048576
[  205.440597][ T5274] xt_hashlimit: max too large, truncated to 1048576
[  205.546133][    C1] net_ratelimit: 34 callbacks suppressed
[  206.608802][ T4289] Bluetooth: hci3: command 0x0406 tx timeout
[  206.608835][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  206.620883][ T4288] Bluetooth: hci1: command 0x0406 tx timeout
[  206.620897][ T4289] Bluetooth: hci0: command 0x0406 tx timeout
[  209.679948][ T5295] tty tty23: ldisc open failed (-12), clearing slot 22
[  210.557308][ T4437] net_ratelimit: 48 callbacks suppressed
[  213.883366][ T5322] netlink: 'syz.0.230': attribute type 5 has an invalid length.
[  215.690582][ T4301] net_ratelimit: 53 callbacks suppressed
[  216.086793][ T5345] Bluetooth: MGMT ver 1.22
[  217.465630][ T5350] loop4: detected capacity change from 0 to 256
[  217.504558][ T5350] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.950131][ T4324] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  218.170027][ T4324] usb 1-1: Using ep0 maxpacket: 16
[  218.177335][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  218.213051][ T4324] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  218.252657][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.275802][ T4324] usb 1-1: Product: syz
[  218.290524][ T4324] usb 1-1: Manufacturer: syz
[  218.306175][ T4324] usb 1-1: SerialNumber: syz
[  218.332945][ T4324] usb 1-1: config 0 descriptor??
[  218.364928][ T4324] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  218.404567][ T4324] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  218.632700][ T4324] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  219.430703][ T4324] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  219.439177][ T4324] em28xx 1-1:0.0: board has no eeprom
[  219.534882][ T4324] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  219.547771][ T4324] em28xx 1-1:0.0: dvb set to bulk mode.
[  219.559396][    T7] em28xx 1-1:0.0: Binding DVB extension
[  219.603936][ T4324] usb 1-1: USB disconnect, device number 4
[  219.631946][ T4324] em28xx 1-1:0.0: Disconnecting em28xx
[  220.966801][    C1] net_ratelimit: 33 callbacks suppressed
[  220.979493][   T27] audit: type=1326 audit(1791265481.014:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.2.244" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f316d99e199 code=0x0
[  221.165167][ T4322] nvmet: connect request for invalid subsystem t!
[  221.191557][ T5370] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[  221.245042][    T7] em28xx 1-1:0.0: Registering input extension
[  221.262522][ T4324] em28xx 1-1:0.0: Closing input extension
[  221.364279][ T4324] em28xx 1-1:0.0: Freeing device
[  223.155403][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[  225.163844][ T5405] loop3: detected capacity change from 0 to 1024
[  225.217758][ T5405] hfsplus: creator requires a 4 character value
[  225.389311][ T5405] hfsplus: unable to parse mount options
[  225.977417][    C1] net_ratelimit: 62 callbacks suppressed
[  225.999058][ T5410] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  227.414089][ T5421] loop3: detected capacity change from 0 to 512
[  227.559604][ T5421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  227.567804][ T5421] System zones: 1-12
[  227.567883][ T5421] 
[  227.601734][ T5421] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.261: missing EA_INODE flag
[  227.644274][ T5421] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.261: error while reading EA inode 12 err=-117
[  229.081919][ T5421] EXT4-fs (loop3): 1 orphan inode deleted
[  229.088381][ T5421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  231.048479][ T4349] net_ratelimit: 57 callbacks suppressed
[  232.422921][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  234.958954][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  234.974468][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  234.983310][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.087729][    C1] net_ratelimit: 49 callbacks suppressed
[  236.538464][ T5472] using random self ethernet address
[  236.544262][ T5472] using random host ethernet address
[  239.142251][ T5485] loop1: detected capacity change from 0 to 32768
[  239.846218][ T5485] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  239.857136][ T5485] XFS (loop1): Mounting V5 Filesystem
[  240.157348][ T5485] XFS (loop1): Ending clean mount
[  240.172155][ T5485] XFS (loop1): Quotacheck needed: Please wait.
[  241.127052][    C1] net_ratelimit: 39 callbacks suppressed
[  243.283481][ T5485] XFS (loop1): Quotacheck: Done.
[  243.345341][ T4273] XFS (loop1): Unmounting Filesystem
[  243.432152][ T5525] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  243.459226][ T5525] CIFS mount error: No usable UNC path provided in device string!
[  243.459226][ T5525] 
[  243.469421][ T5525] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  243.678577][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  243.709464][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  243.718416][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  243.727614][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  243.736002][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  243.743830][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.075386][ T5532] loop3: detected capacity change from 0 to 512
[  244.214292][ T5532] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.285: bg 0: block 385: padding at end of block bitmap is not set
[  244.236962][ T5532] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  244.319235][ T5532] EXT4-fs (loop3): 2 truncates cleaned up
[  244.325132][ T5532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  244.741125][ T5527] EXT4-fs (loop3): unmounting filesystem.
[  244.993849][ T5541] Failed to get privilege flags for destination (handle=0x2:0x0)
[  245.846785][ T4289] Bluetooth: hci4: command 0x0409 tx timeout
[  245.958669][ T5523] chnl_net:caif_netlink_parms(): no params data found
[  246.406781][    C1] net_ratelimit: 45 callbacks suppressed
[  247.316741][ T5550] tmpfs: Too small a size for current use
[  247.989678][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[  248.785837][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.793185][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.801887][ T5523] device bridge_slave_0 entered promiscuous mode
[  248.810999][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.818560][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.827205][ T5523] device bridge_slave_1 entered promiscuous mode
[  248.907673][ T5563] using random self ethernet address
[  248.913154][ T5563] using random host ethernet address
[  248.943391][ T5523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.955995][ T5523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.023210][ T5523] team0: Port device team_slave_0 added
[  249.048877][ T5523] team0: Port device team_slave_1 added
[  249.331595][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.339871][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.375571][ T5523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.399541][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.406556][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.484515][   T27] audit: type=1800 audit(1791265509.353:7): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.292" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  249.553372][ T5523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.594725][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[  250.822393][ T5523] device hsr_slave_0 entered promiscuous mode
[  250.963765][ T5523] device hsr_slave_1 entered promiscuous mode
[  250.998374][ T5523] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.009196][ T5523] Cannot create hsr debugfs directory
[  251.606674][    C1] net_ratelimit: 38 callbacks suppressed
[  252.149395][ T5597] loop1: detected capacity change from 0 to 128
[  252.749475][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[  254.656280][ T5628] loop0: detected capacity change from 0 to 2048
[  254.663655][ T5628] EXT4-fs: Ignoring removed i_version option
[  254.705968][ T5628] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  254.714689][ T5628] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.220844][ T5636] netlink: 'syz.3.306': attribute type 16 has an invalid length.
[  255.369192][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  255.375752][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  256.293718][ T5644] CIFS mount error: No usable UNC path provided in device string!
[  256.293718][ T5644] 
[  256.303900][ T5644] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  256.585827][ T5523] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  256.727907][ T4507] net_ratelimit: 65 callbacks suppressed
[  257.031986][ T5523] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  257.228636][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  257.523899][ T5523] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  257.718063][ T5523] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  257.795259][ T5654] ==================================================================
[  257.795270][ T5654] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0
[  257.795299][ T5654] Write of size 4 at addr ffffc90004809360 by task syz.0.310/5654
[  257.795316][ T5654] 
[  257.795322][ T5654] CPU: 1 PID: 5654 Comm: syz.0.310 Not tainted syzkaller #0
[  257.795342][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  257.795354][ T5654] Call Trace:
[  257.795360][ T5654]  <TASK>
[  257.795368][ T5654]  dump_stack_lvl+0x188/0x24e
[  257.795392][ T5654]  ? sys_imageblit+0x1ba8/0x25d0
[  257.795415][ T5654]  ? show_regs_print_info+0x12/0x12
[  257.795437][ T5654]  ? load_image+0x410/0x410
[  257.795464][ T5654]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  257.795494][ T5654]  ? __lock_acquire+0x7ea0/0x7ea0
[  257.795520][ T5654]  ? __virt_addr_valid+0xbf/0x540
[  257.795548][ T5654]  ? sys_imageblit+0x1ba8/0x25d0
[  257.795568][ T5654]  print_report+0xa8/0x210
[  257.795587][ T5654]  kasan_report+0x10b/0x140
[  257.795622][ T5654]  ? sys_imageblit+0x1ba8/0x25d0
[  257.795646][ T5654]  sys_imageblit+0x1ba8/0x25d0
[  257.795673][ T5654]  ? sys_copyarea+0x2530/0x2530
[  257.795695][ T5654]  ? __flush_work+0x109/0xac0
[  257.795713][ T5654]  ? __flush_work+0x9aa/0xac0
[  257.795731][ T5654]  ? __flush_work+0x109/0xac0
[  257.795750][ T5654]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  257.795779][ T5654]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  257.795800][ T5654]  soft_cursor+0x9fd/0xc30
[  257.795823][ T5654]  bit_cursor+0x16b5/0x1f40
[  257.795851][ T5654]  ? bit_clear_margins+0x550/0x550
[  257.795874][ T5654]  ? bit_clear_margins+0x550/0x550
[  257.795895][ T5654]  ? add_softcursor+0x28c/0x440
[  257.795919][ T5654]  con_flush_chars+0x1f6/0x270
[  257.795944][ T5654]  con_write+0x29/0x40
[  257.795966][ T5654]  n_tty_write+0xd61/0x11e0
[  257.796000][ T5654]  ? n_tty_read+0x1360/0x1360
[  257.796024][ T5654]  ? wait_woken+0x1c0/0x1c0
[  257.796050][ T5654]  ? __virt_addr_valid+0x467/0x540
[  257.796076][ T5654]  ? __check_object_size+0x4f6/0xa70
[  257.796098][ T5654]  file_tty_write+0x4c7/0x840
[  257.796121][ T5654]  ? n_tty_read+0x1360/0x1360
[  257.796147][ T5654]  vfs_write+0x482/0x9a0
[  257.796176][ T5654]  ? file_end_write+0x250/0x250
[  257.796206][ T5654]  ? __fget_files+0x3fc/0x460
[  257.796236][ T5654]  ? __fdget_pos+0x1d4/0x360
[  257.796262][ T5654]  ? ksys_write+0x70/0x260
[  257.796289][ T5654]  ksys_write+0x14d/0x260
[  257.796317][ T5654]  ? __ia32_sys_read+0x80/0x80
[  257.796345][ T5654]  ? lockdep_hardirqs_on+0x94/0x140
[  257.796373][ T5654]  do_syscall_64+0x4c/0xa0
[  257.796394][ T5654]  ? clear_bhb_loop+0x60/0xb0
[  257.796415][ T5654]  ? clear_bhb_loop+0x60/0xb0
[  257.796437][ T5654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.796466][ T5654] RIP: 0033:0x7fab6199e199
[  257.796488][ T5654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.796505][ T5654] RSP: 002b:00007fab5fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  257.796526][ T5654] RAX: ffffffffffffffda RBX: 00007fab61c25fa0 RCX: 00007fab6199e199
[  257.796541][ T5654] RDX: 0000000000001006 RSI: 0000200000002b40 RDI: 0000000000000004
[  257.796554][ T5654] RBP: 00007fab61a358e0 R08: 0000000000000000 R09: 0000000000000000
[  257.796567][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.796582][ T5654] R13: 00007fab61c26038 R14: 00007fab61c25fa0 R15: 00007ffe8d3d8598
[  257.796601][ T5654]  </TASK>
[  257.796608][ T5654] 
[  257.796618][ T5654] The buggy address belongs to a vmalloc virtual mapping
[  257.796631][ T5654] Memory state around the buggy address:
[  257.796641][ T5654]  ffffc90004809200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  257.796655][ T5654]  ffffc90004809280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  257.796668][ T5654] >ffffc90004809300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  257.796677][ T5654]                                                        ^
[  257.796688][ T5654]  ffffc90004809380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  257.796700][ T5654]  ffffc90004809400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  257.796709][ T5654] ==================================================================
[  257.808059][ T5661] kcov: kcov_start: t = ffff888025673c00, size = 524288, area = ffffc9000eed9000
[  257.808605][ T5654] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  257.808624][ T5654] CPU: 1 PID: 5654 Comm: syz.0.310 Not tainted syzkaller #0
[  257.808643][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  257.808655][ T5654] Call Trace:
[  257.808661][ T5654]  <TASK>
[  257.808668][ T5654]  dump_stack_lvl+0x188/0x24e
[  257.808694][ T5654]  ? memcpy+0x3c/0x60
[  257.808712][ T5654]  ? show_regs_print_info+0x12/0x12
[  257.808733][ T5654]  ? load_image+0x410/0x410
[  257.808765][ T5654]  panic+0x2d3/0x710
[  257.808793][ T5654]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  257.808817][ T5654]  ? bpf_jit_dump+0xd0/0xd0
[  257.808843][ T5654]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  257.808861][ T5654]  ? _raw_spin_unlock+0x40/0x40
[  257.808879][ T5654]  check_panic_on_warn+0x80/0xa0
[  257.808900][ T5654]  ? sys_imageblit+0x1ba8/0x25d0
[  257.808921][ T5654]  end_report+0x66/0x110
[  257.808946][ T5654]  kasan_report+0x118/0x140
[  257.808973][ T5654]  ? sys_imageblit+0x1ba8/0x25d0
[  257.808996][ T5654]  sys_imageblit+0x1ba8/0x25d0
[  257.809023][ T5654]  ? sys_copyarea+0x2530/0x2530
[  257.809045][ T5654]  ? __flush_work+0x109/0xac0
[  257.809062][ T5654]  ? __flush_work+0x9aa/0xac0
[  257.809079][ T5654]  ? __flush_work+0x109/0xac0
[  257.809098][ T5654]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  257.809126][ T5654]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  257.809145][ T5654]  soft_cursor+0x9fd/0xc30
[  257.809168][ T5654]  bit_cursor+0x16b5/0x1f40
[  257.809194][ T5654]  ? bit_clear_margins+0x550/0x550
[  257.809216][ T5654]  ? bit_clear_margins+0x550/0x550
[  257.809236][ T5654]  ? add_softcursor+0x28c/0x440
[  257.809258][ T5654]  con_flush_chars+0x1f6/0x270
[  257.809282][ T5654]  con_write+0x29/0x40
[  257.809304][ T5654]  n_tty_write+0xd61/0x11e0
[  257.809336][ T5654]  ? n_tty_read+0x1360/0x1360
[  257.809360][ T5654]  ? wait_woken+0x1c0/0x1c0
[  257.809385][ T5654]  ? __virt_addr_valid+0x467/0x540
[  257.809410][ T5654]  ? __check_object_size+0x4f6/0xa70
[  257.809431][ T5654]  file_tty_write+0x4c7/0x840
[  257.809454][ T5654]  ? n_tty_read+0x1360/0x1360
[  257.809478][ T5654]  vfs_write+0x482/0x9a0
[  257.809506][ T5654]  ? file_end_write+0x250/0x250
[  257.809534][ T5654]  ? __fget_files+0x3fc/0x460
[  257.809562][ T5654]  ? __fdget_pos+0x1d4/0x360
[  257.809586][ T5654]  ? ksys_write+0x70/0x260
[  257.809619][ T5654]  ksys_write+0x14d/0x260
[  257.809646][ T5654]  ? __ia32_sys_read+0x80/0x80
[  257.809674][ T5654]  ? lockdep_hardirqs_on+0x94/0x140
[  257.809700][ T5654]  do_syscall_64+0x4c/0xa0
[  257.809721][ T5654]  ? clear_bhb_loop+0x60/0xb0
[  257.809740][ T5654]  ? clear_bhb_loop+0x60/0xb0
[  257.809761][ T5654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.809781][ T5654] RIP: 0033:0x7fab6199e199
[  257.809796][ T5654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.809811][ T5654] RSP: 002b:00007fab5fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  257.809831][ T5654] RAX: ffffffffffffffda RBX: 00007fab61c25fa0 RCX: 00007fab6199e199
[  257.809846][ T5654] RDX: 0000000000001006 RSI: 0000200000002b40 RDI: 0000000000000004
[  257.809858][ T5654] RBP: 00007fab61a358e0 R08: 0000000000000000 R09: 0000000000000000
[  257.809870][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.809882][ T5654] R13: 00007fab61c26038 R14: 00007fab61c25fa0 R15: 00007ffe8d3d8598
[  257.809901][ T5654]  </TASK>
[  257.810474][ T5654] Kernel Offset: disabled
[  258.560192][ T5654] Rebooting in 86400 seconds..