last executing test programs:

1m13.515987764s ago: executing program 1 (id=101):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f0000000240)={0x800, 0x0, 0x1ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x4, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1m13.100616885s ago: executing program 1 (id=105):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

1m12.776668555s ago: executing program 1 (id=109):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df25", 0x84}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1m12.661799048s ago: executing program 1 (id=111):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000640)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x0, 0x0, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "0410b1617b6228917d76322c2e9e13be3626f4e25310f5db74161ccef2c5cf5e", [0x3, 0x80000800]})
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
getdents(r0, 0x0, 0x0)

1m10.831390828s ago: executing program 1 (id=116):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944c", 0x2}], 0x1}, 0x20000010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m9.536314254s ago: executing program 1 (id=120):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x4804)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001400)=[@text16={0x10, &(0x7f0000000140)="f30f6fca670f011a2e9866b90e0800000f32ba4000ed66b9ea0200000f3266050058000066b8010000000f01c1f30f096766c74424007e559a5d6766c7442402597abbee6766c744240600000000670f011424", 0x53}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m9.283956371s ago: executing program 32 (id=120):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x4804)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001400)=[@text16={0x10, &(0x7f0000000140)="f30f6fca670f011a2e9866b90e0800000f32ba4000ed66b9ea0200000f3266050058000066b8010000000f01c1f30f096766c74424007e559a5d6766c7442402597abbee6766c744240600000000670f011424", 0x53}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22.167050453s ago: executing program 0 (id=226):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3c", 0x7f, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
socket(0x10, 0x3, 0x0)

22.130340364s ago: executing program 4 (id=227):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r4, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000005200)='./bus\x00', 0x0, 0x6000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
getresgid(0x0, &(0x7f0000005780), &(0x7f00000057c0))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

21.167060563s ago: executing program 0 (id=229):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
io_uring_setup(0x4a86, &(0x7f0000000000)={0x0, 0x4178, 0x80, 0x8001002, 0x410003d6})
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x5)
setresuid(0xee00, 0xee01, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="08000000c95d"})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)

19.107732524s ago: executing program 0 (id=232):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000)

17.866835431s ago: executing program 5 (id=233):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r3}, 0x38)
lchown(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
pread64(r4, &(0x7f0000000000)=""/153, 0x99, 0x19a55d1a)

16.947214558s ago: executing program 4 (id=234):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0xfffffffffffffee7)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x1050)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x1, 0x7)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x3, 0x2, 0x1, 0x2, 0x4})

16.660421197s ago: executing program 0 (id=235):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getrusage(0xffffffffffffffff, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)

16.658671426s ago: executing program 2 (id=236):
r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

15.459421112s ago: executing program 5 (id=237):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0xfff, 0x6, {{0x7, 0x4, 0x3, 0x6, 0x1c, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x7, 0xb0, [@loopback]}, @noop]}}}}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$NFT_BATCH(r1, 0x0, 0x20004450)
sendmsg$NFT_BATCH(r1, 0x0, 0x24000840)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x68000)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000081}, 0x8061)
connect$inet6(r5, &(0x7f0000000980)={0xa, 0x4e23, 0xe0, @local, 0xfffbfff9}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x194, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf87}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "693d6b05d802ced52c91b211ccbabd8d0d86de46efb49640091e6a"}}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23dd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10001, @mcast1, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1a9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

15.271469438s ago: executing program 5 (id=238):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x11040)
syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x82cd, &(0x7f0000000280)={[{@usrquota}, {@auto_da_alloc}]}, 0x0, 0x4bd, &(0x7f0000000a00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x20060400)
r3 = timerfd_create(0x0, 0x80800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc)
timerfd_gettime(r3, &(0x7f0000000000))
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0))

15.178633761s ago: executing program 3 (id=239):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f00000000c0)=0x9, 0x4)
socket$packet(0x11, 0x3, 0x300)
ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f00000003c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0)
sendfile(r3, r4, 0x0, 0x6)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

15.158489291s ago: executing program 4 (id=240):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "04c22302"}}, {@nls={'nls', 0x3d, 'koi8-r'}}, {@gid}, {@gid}, {@type={'type', 0x3d, "5361c9e5"}}]}, 0x1, 0x5de, &(0x7f0000000d40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907cc", 0x25}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3b", 0x12}, {0x0}], 0x5}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12.846637489s ago: executing program 3 (id=241):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x44, 0x0, 0xf})

10.589995726s ago: executing program 2 (id=242):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
io_uring_setup(0x4a86, &(0x7f0000000000)={0x0, 0x4178, 0x80, 0x8001002, 0x410003d6})
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x5)
setresuid(0xee00, 0xee01, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="08000000c95d"})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)

9.984958204s ago: executing program 5 (id=243):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_open_procfs(0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x4e, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2/../file0\x00', 0x2028, 0x150)

9.981863004s ago: executing program 3 (id=244):
pipe(&(0x7f0000000080))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
accept$alg(r0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file7\x00', 0x2000002, &(0x7f00000003c0)=ANY=[@ANYBLOB='volume=00000000000000001062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',noadinicb,rootdir=00000000000000000004,gid=forget,unhide,noadinicb,iocharset=cp861,longad,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000900)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f0000000800)={[{@data_err_ignore}, {@nodiscard}, {@quota}]}, 0x1, 0x580, &(0x7f0000001f80)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0)

9.969772304s ago: executing program 4 (id=245):
getresuid(&(0x7f0000019180), 0x0, 0x0)
mount$9p_virtio(&(0x7f0000019080), 0x0, 0x0, 0x3200006, &(0x7f0000019280)=ANY=[@ANYRES64])
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x149000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'})
timer_create(0x1, 0x0, &(0x7f0000000040))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
writev(r3, &(0x7f0000019680)=[{&(0x7f0000019480)="b1329129ccf4e8f05761cf50f76b31cbbe8f8b116fabb78d79b090aa2a5f79d7caec908d7bf510342e8a0a4ad439c8e0db3e8798b98ca1d347b8c5d20c41ddd2fd35a53570a1e66832de05b1fc9883903203396fffcb03e7e4159638dcbae8cb78d019621cc9e41c25abc93acbcea842393e6c0e7e784fe849a8a65e5b394c508a91f52045063d2e26ca", 0x8a}, {&(0x7f0000019540)="fa2e4384d60fc2f993f588703f5e7a8c549edb0a1a442cf1fcb6afd22bb95203fc43d776c089f90857bbff9e71e18c9c96d0bf0d3c5f05cfcf852ed5fc6f426499a2a0e3aad12c041cbf0af411e984c1600106254e406834db1aaebb3f3378383e93a62fc9a3a5954fb35b527895596b9e4bdf0c1743ef6db8b6f1be892394fa7440a2526e63b72301a70fab915898541c9435e035a16624a1", 0x99}, {&(0x7f0000019600)="1ab675217b3dfd5a32aebeaa1283c4e0104b36e50345e79261cb98c485b048f91e86aff064664e61927aba7b6e570c72504986125abacd7e0e4ae5b2802ddb4bb04a64", 0x43}], 0x3)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x4f33, 0x2, 0x2, 0x4000, 0x1, 0x1, 0x8, 0x1000d287, 0xa, 0xfd, 0xffeffffd, 0x22, 0xa2, 0x1, 0x8, 0x12a3cfde, 0xf7fffffd, 0x6d, 0x2, 0x1, 0x8, 0xff, 0xeb96, 0x0, 0x40b, 0xe69, 0x6, 0x10008, 0x0, 0x1cda, 0xfbfffff8]})
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)

8.035501192s ago: executing program 2 (id=246):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000)

7.988194693s ago: executing program 0 (id=256):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]})

7.979778273s ago: executing program 5 (id=247):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

5.934996254s ago: executing program 3 (id=248):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_open_procfs(0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x4e, &(0x7f0000000940)=ANY=[], 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2/../file0\x00', 0x2028, 0x150)

5.885480416s ago: executing program 2 (id=249):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r0, 0xf, &(0x7f00000001c0)={0x0, 0x7fffffffffffffff}, &(0x7f0000000280))
r3 = socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_pidfd_open(r0, 0x0)
process_mrelease(r4, 0x0)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

5.852695526s ago: executing program 4 (id=250):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={<r2=>0x0, 0x100, 0xbf, 0x1e76}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r2, 0xff}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@fallback, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)

5.818457918s ago: executing program 0 (id=251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_aout(r2, &(0x7f0000000940)=ANY=[], 0x120)
fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006})
r3 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040), 0x3e)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2)
ioctl$FIBMAP(r4, 0x5381, 0x0)
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
openat$cgroup_devices(r5, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0)
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noac'])

2.964636832s ago: executing program 5 (id=252):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_aout(r2, &(0x7f0000000940)=ANY=[], 0x120)
fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006})
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10)
r3 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040), 0x3e)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2)
ioctl$FIBMAP(r4, 0x5381, 0x0)
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000480)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
openat$cgroup_devices(r5, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0)
mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noac'])

2.883520095s ago: executing program 3 (id=253):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x29, 0x33e, &(0x7f0000000480)="$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")
open(0x0, 0x101080, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
creat(0x0, 0x66)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x29d, &(0x7f0000000400)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22a00, 0x0)
ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000)

2.69550501s ago: executing program 2 (id=254):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x44, 0x0, 0xf})

2.524748415s ago: executing program 4 (id=255):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x200, 0x8, 0x8, 0x2}, 0x50)
syz_open_dev$usbfs(0x0, 0x204, 0x2)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000003c0)=""/195)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r0}, 0x38)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f00000001c0), 0x4)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
getpgrp(0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

67.443728ms ago: executing program 2 (id=257):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt(r1, 0x6, 0x400, &(0x7f0000000380)="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", 0xff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x21, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000001c0)=0x84)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x7, 0x4)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @null, 0x40005, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x80000000, 0x0, @mcast2, @mcast2, 0x8, 0x20, 0x1, 0x4}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0)

0s ago: executing program 3 (id=258):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
io_uring_setup(0x4a86, &(0x7f0000000000)={0x0, 0x4178, 0x80, 0x8001002, 0x410003d6})
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x5)
setresuid(0xee00, 0xee01, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="08000000c95d"})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts.
[   46.744054][ T4173] cgroup: Unknown subsys name 'net'
[   46.888627][ T4173] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.096419][ T4173] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   49.394631][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   49.412611][ T4199] chnl_net:caif_netlink_parms(): no params data found
[   49.447148][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   49.485525][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   49.523433][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   49.595378][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.602464][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.610859][ T4186] device bridge_slave_0 entered promiscuous mode
[   49.630054][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.637168][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.645457][ T4199] device bridge_slave_0 entered promiscuous mode
[   49.662393][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.670073][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.677961][ T4188] device bridge_slave_0 entered promiscuous mode
[   49.685659][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.692716][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.701270][ T4186] device bridge_slave_1 entered promiscuous mode
[   49.711538][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.718670][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.726418][ T4199] device bridge_slave_1 entered promiscuous mode
[   49.747995][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.755336][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.763145][ T4188] device bridge_slave_1 entered promiscuous mode
[   49.786853][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.802822][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.821365][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.828741][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.836769][ T4187] device bridge_slave_0 entered promiscuous mode
[   49.849571][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.857102][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.864987][ T4187] device bridge_slave_1 entered promiscuous mode
[   49.885005][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.901004][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.911849][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.941199][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.958698][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.976792][ T4199] team0: Port device team_slave_0 added
[   49.985621][ T4186] team0: Port device team_slave_0 added
[   49.992698][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.002105][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.009322][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.017185][ T4189] device bridge_slave_0 entered promiscuous mode
[   50.032214][ T4199] team0: Port device team_slave_1 added
[   50.038995][ T4186] team0: Port device team_slave_1 added
[   50.056078][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.063391][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.071008][ T4189] device bridge_slave_1 entered promiscuous mode
[   50.106872][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.115692][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.141716][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.159695][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.166686][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.193762][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.207416][ T4188] team0: Port device team_slave_0 added
[   50.213815][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.220780][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.247106][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.260608][ T4187] team0: Port device team_slave_0 added
[   50.275556][ T4188] team0: Port device team_slave_1 added
[   50.281699][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.288767][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.314828][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.327280][ T4187] team0: Port device team_slave_1 added
[   50.335024][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.366409][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.391962][ T4199] device hsr_slave_0 entered promiscuous mode
[   50.399346][ T4199] device hsr_slave_1 entered promiscuous mode
[   50.418635][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.425868][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.452306][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.464024][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.470975][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.497281][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.532598][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.539860][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.570923][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.591034][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.598313][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.624528][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.644054][ T4189] team0: Port device team_slave_0 added
[   50.651703][ T4189] team0: Port device team_slave_1 added
[   50.680046][ T4186] device hsr_slave_0 entered promiscuous mode
[   50.687143][ T4186] device hsr_slave_1 entered promiscuous mode
[   50.694053][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.701722][ T4186] Cannot create hsr debugfs directory
[   50.732708][ T4188] device hsr_slave_0 entered promiscuous mode
[   50.739506][ T4188] device hsr_slave_1 entered promiscuous mode
[   50.746621][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.754262][ T4188] Cannot create hsr debugfs directory
[   50.790278][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.797308][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.823700][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.835720][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.842651][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.868707][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.911810][ T4187] device hsr_slave_0 entered promiscuous mode
[   50.918548][ T4187] device hsr_slave_1 entered promiscuous mode
[   50.925296][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.933180][ T4187] Cannot create hsr debugfs directory
[   51.056320][ T4189] device hsr_slave_0 entered promiscuous mode
[   51.062944][ T4189] device hsr_slave_1 entered promiscuous mode
[   51.069546][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   51.077225][ T4189] Cannot create hsr debugfs directory
[   51.113946][ T4175] Bluetooth: hci0: command 0x0409 tx timeout
[   51.120399][ T4175] Bluetooth: hci3: command 0x0409 tx timeout
[   51.132117][ T4175] Bluetooth: hci1: command 0x0409 tx timeout
[   51.143394][ T4175] Bluetooth: hci2: command 0x0409 tx timeout
[   51.203902][ T2382] Bluetooth: hci4: command 0x0409 tx timeout
[   51.222915][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   51.234600][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   51.254169][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   51.263802][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   51.313983][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   51.322652][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   51.336773][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   51.350753][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   51.396497][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   51.417540][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   51.434749][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   51.450023][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.461644][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   51.484263][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.492869][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.522224][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   51.555207][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.567088][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.576100][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.583367][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.592086][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.625604][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   51.635166][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   51.646104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.654982][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.663718][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.670765][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.678922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.687598][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.715020][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   51.726796][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.735542][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.746465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.755242][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.765074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.774593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.796768][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   51.812934][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   51.824037][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.836546][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   51.845568][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.854789][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   51.863200][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.871555][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   51.886297][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   51.900595][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   51.910134][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   51.920078][ T4199] 8021q: adding VLAN 0 to HW filter on device team0
[   51.930046][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.938330][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.954218][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   51.972689][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.981719][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.990794][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.997873][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.032015][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.053463][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.062556][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.073176][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.081983][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.089079][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.107058][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.136690][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.147644][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.158688][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.172544][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   52.191973][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.204498][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.214466][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.224475][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.235611][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.245028][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.254727][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.261788][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.293434][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   52.303542][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.311472][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.321629][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.330786][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.339782][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.348493][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.355614][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.364681][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.375182][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.383920][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.391537][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.400813][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.409367][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.417918][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.425741][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.435456][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.444218][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.456169][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.471146][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.481262][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.490086][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.497186][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.505781][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.515614][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.524326][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.531388][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.539043][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.558366][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.584585][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.592531][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.604950][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.614093][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.622541][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.632142][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.641349][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.650198][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.658979][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.667770][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.676761][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.685659][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.693981][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.701726][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.730567][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.746583][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.760238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   52.770603][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.785104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.795270][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.806126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.815021][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.823399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.831669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.845371][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.855619][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.865058][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   52.874930][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.904025][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   52.921808][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.933823][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.966124][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.974928][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.989806][ T4186] device veth0_vlan entered promiscuous mode
[   53.020400][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.033576][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.042212][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.052818][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.059956][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.070487][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   53.078226][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   53.086340][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.095427][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.105242][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.112327][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.132685][ T4186] device veth1_vlan entered promiscuous mode
[   53.151765][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   53.161149][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.177916][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.190419][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.203798][ T1109] Bluetooth: hci2: command 0x041b tx timeout
[   53.215849][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   53.231651][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.233375][ T1109] Bluetooth: hci1: command 0x041b tx timeout
[   53.243698][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.253114][ T1109] Bluetooth: hci3: command 0x041b tx timeout
[   53.270336][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   53.286592][ T1109] Bluetooth: hci0: command 0x041b tx timeout
[   53.288573][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.295568][ T4231] Bluetooth: hci4: command 0x041b tx timeout
[   53.329082][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.338283][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.352896][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.362184][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.371715][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.380504][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.389133][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.397785][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   53.408797][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   53.416608][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.425417][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.434516][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.449699][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.467822][ T4186] device veth0_macvtap entered promiscuous mode
[   53.479880][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   53.489015][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   53.497450][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   53.509924][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.532026][ T4186] device veth1_macvtap entered promiscuous mode
[   53.573614][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.581722][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.592905][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.602515][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.611375][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.634281][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.660073][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.667849][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.678183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.688980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.697670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.707085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.715567][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.725256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.733817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.742370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.750416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.759939][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.769638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.780801][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.788780][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.797074][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.805668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.816524][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.824835][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.845786][ T4187] device veth0_vlan entered promiscuous mode
[   53.853924][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.862768][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.875333][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.884582][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.896811][ T4199] device veth0_vlan entered promiscuous mode
[   53.908507][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   53.916479][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   53.934781][ T4188] device veth0_vlan entered promiscuous mode
[   53.948638][ T4187] device veth1_vlan entered promiscuous mode
[   53.959897][ T4199] device veth1_vlan entered promiscuous mode
[   53.975398][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.995033][ T4188] device veth1_vlan entered promiscuous mode
[   54.048785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   54.058007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   54.066380][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   54.075589][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   54.083954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   54.091900][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   54.100341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.109216][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.121680][ T4199] device veth0_macvtap entered promiscuous mode
[   54.148403][ T4187] device veth0_macvtap entered promiscuous mode
[   54.156859][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   54.165360][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.174043][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.182418][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.191287][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.201858][ T4199] device veth1_macvtap entered promiscuous mode
[   54.226569][ T4187] device veth1_macvtap entered promiscuous mode
[   54.236785][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.245483][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   54.254226][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.262086][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.270338][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.278625][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.287485][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.298946][ T4189] device veth0_vlan entered promiscuous mode
[   54.307607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.317062][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.344057][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.351144][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.352031][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.366618][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.381913][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.397060][ T4189] device veth1_vlan entered promiscuous mode
[   54.409735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   54.419690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   54.427797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.437030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.445794][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.456724][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.467288][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.478988][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.489736][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.500942][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.511292][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.522006][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.532960][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.549279][ T4188] device veth0_macvtap entered promiscuous mode
[   54.557184][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   54.566030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.575084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.584143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.592621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.604702][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.617902][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.627897][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.639139][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.650193][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.659185][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.668219][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.677274][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.686231][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.704856][ T4188] device veth1_macvtap entered promiscuous mode
[   54.722530][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.732847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.741776][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.752161][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.761293][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.770310][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.779279][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.799864][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.810468][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.821162][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.831862][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.842893][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.853455][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.864857][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.876188][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.886699][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.896654][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.907335][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.917260][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.928078][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.939241][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.948953][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.961168][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.970775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.980071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.989499][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.998621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   55.007176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.018112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   55.026693][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.041745][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.051824][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.060784][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.072229][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.089568][ T4189] device veth0_macvtap entered promiscuous mode
[   55.178352][ T4189] device veth1_macvtap entered promiscuous mode
[   55.245388][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.247056][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.282297][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.283563][ T4260] Bluetooth: hci3: command 0x040f tx timeout
[   55.297581][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.308876][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.314760][ T4260] Bluetooth: hci1: command 0x040f tx timeout
[   55.319994][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.336485][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.347458][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.356647][ T4260] Bluetooth: hci2: command 0x040f tx timeout
[   55.368922][ T4260] Bluetooth: hci4: command 0x040f tx timeout
[   55.375352][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.376607][ T4265] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   55.390621][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.392025][ T4260] Bluetooth: hci0: command 0x040f tx timeout
[   55.408496][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.433625][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   55.442679][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   55.451431][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   55.459764][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   55.468675][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.491128][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.503656][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.514203][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.524672][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.534798][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.545505][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.555399][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.566246][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.578240][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.598608][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   55.614298][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.614789][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.625700][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.640632][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.650110][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.661282][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.678557][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.697030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   55.703325][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.712047][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.731487][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   55.776575][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.796330][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.814125][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   55.838004][ T4276] loop4: detected capacity change from 0 to 512
[   55.895763][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.907080][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.934058][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.941429][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.978359][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   55.995289][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   56.005454][ T4276] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   56.018047][ T4276] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.082467][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.118937][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.151472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   56.248235][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.285336][ T4289] device syzkaller0 entered promiscuous mode
[   56.296113][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.321914][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.354440][ T4259] Bluetooth: hci1: command 0x0419 tx timeout
[   57.360666][ T4260] Bluetooth: hci3: command 0x0419 tx timeout
[   57.423241][ T4308] loop3: detected capacity change from 0 to 512
[   57.729981][ T4308] EXT4-fs (loop3): Ignoring removed orlov option
[   57.958067][ T4308] EXT4-fs (loop3): Test dummy encryption mode enabled
[   58.002454][ T4260] Bluetooth: hci0: command 0x0419 tx timeout
[   58.009184][ T4260] Bluetooth: hci4: command 0x0419 tx timeout
[   58.015356][ T4260] Bluetooth: hci2: command 0x0419 tx timeout
[   58.023439][ T4308] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   58.068211][ T4308] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.086373][ T4314] loop4: detected capacity change from 0 to 512
[   58.167823][ T4308] EXT4-fs (loop3): 1 truncate cleaned up
[   58.180471][ T4317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   58.184115][ T4308] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback.
[   58.247850][ T4314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.12: missing EA_INODE flag
[   58.267015][ T4314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.12: error while reading EA inode 12 err=-117
[   58.284612][ T4314] EXT4-fs (loop4): 1 orphan inode deleted
[   58.302263][ T4314] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   58.650221][ T4331] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   59.399014][ T4308] kvm: pic: non byte read
[   59.451772][ T4308] kvm: pic: level sensitive irq not supported
[   59.454907][ T4308] kvm: pic: non byte read
[   59.514745][ T4308] kvm: pic: level sensitive irq not supported
[   59.514855][ T4308] kvm: pic: non byte read
[   59.586336][ T4329] kvm [4327]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0
[   59.595762][ T4329] kvm [4327]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[   59.613694][ T4329] kvm [4327]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000
[   59.626656][ T4329] kvm [4327]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[   59.640784][ T4329] kvm [4327]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80
[   59.655488][ T4329] kvm [4327]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0
[   59.665259][ T4329] kvm [4327]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[   61.957536][ T4358] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.051030][ T4383] loop2: detected capacity change from 0 to 64
[   63.230805][ T4387] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   65.450350][ T4400] loop0: detected capacity change from 0 to 256
[   65.767032][ T4408] loop1: detected capacity change from 0 to 2048
[   65.833477][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   65.946165][ T4408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.985219][ T4411] attempt to access beyond end of device
[   65.985219][ T4411] loop0: rw=2049, want=544, limit=256
[   66.048025][ T4411] attempt to access beyond end of device
[   66.048025][ T4411] loop0: rw=2049, want=1024, limit=256
[   66.165340][ T4408] device syzkaller0 entered promiscuous mode
[   66.180045][ T4413] ODEBUG: Out of memory. ODEBUG disabled
[   66.214373][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.232213][ T4411] attempt to access beyond end of device
[   66.232213][ T4411] loop0: rw=2049, want=8176, limit=256
[   66.246706][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.261769][ T4229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   66.293737][ T4229] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   66.318496][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.356563][ T4229] usb 3-1: config 0 descriptor??
[   66.371398][ T4411] attempt to access beyond end of device
[   66.371398][ T4411] loop0: rw=2049, want=14256, limit=256
[   66.394500][ T4411] attempt to access beyond end of device
[   66.394500][ T4411] loop0: rw=2049, want=15552, limit=256
[   66.697497][ T4425] device syzkaller0 entered promiscuous mode
[   66.707741][ T4335] attempt to access beyond end of device
[   66.707741][ T4335] loop0: rw=1, want=32832, limit=256
[   66.878349][ T4229] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   66.921118][ T4229] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   67.176214][ T4435] xt_connbytes: Forcing CT accounting to be enabled
[   67.206421][ T4435] xt_CT: No such helper "netbios-ns"
[   67.275669][ T4440] loop4: detected capacity change from 0 to 512
[   67.303056][ T4440] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   67.322393][ T4440] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   67.347847][ T4440] EXT4-fs (loop4): 1 truncate cleaned up
[   67.355342][ T4440] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none.
[   67.403118][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   67.793477][   T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.860756][   T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.044092][   T21] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   68.176003][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   68.232363][   T21] usb 2-1: SerialNumber: syz
[   68.587086][   T21] usb 2-1: 0:2 : does not exist
[   68.635645][   T21] usb 2-1: USB disconnect, device number 2
[   68.953327][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   69.280089][ T4261] usb 3-1: USB disconnect, device number 2
[   69.400973][ T4459] tipc: Started in network mode
[   69.407488][ T4459] tipc: Node identity 760de3754108, cluster identity 4711
[   69.418984][ T4459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.548333][ T4461] device syzkaller0 entered promiscuous mode
[   69.598418][ T4465] loop0: detected capacity change from 0 to 4096
[   69.625682][ T4458] tipc: Resetting bearer <eth:syzkaller0>
[   69.649854][ T4465] EXT4-fs (loop0): inline encryption not supported
[   69.708272][ T4458] tipc: Disabling bearer <eth:syzkaller0>
[   70.685171][ T4474] loop1: detected capacity change from 0 to 256
[   70.788681][ T4413] Set syz1 is full, maxelem 65536 reached
[   70.982577][ T4484] loop4: detected capacity change from 0 to 128
[   71.024057][ T4465] EXT4-fs (loop0): Test dummy encryption mode enabled
[   71.030872][ T4465] EXT4-fs (loop0): inline encryption not supported
[   71.053190][ T4465] EXT4-fs (loop0): Unrecognized mount option "smackfstransmute=nodelalloc" or missing value
[   71.734719][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[   71.741255][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[   71.912605][ T4489] binder_alloc: 4488: binder_alloc_buf failed to map page at 200000ffd000 in userspace
[   72.292975][    C0] sched: RT throttling activated
[   73.314220][ T4501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.322003][ T4501] device syzkaller0 entered promiscuous mode
[   73.341410][ T4501] tipc: Resetting bearer <eth:syzkaller0>
[   73.350301][ T4500] tipc: Resetting bearer <eth:syzkaller0>
[   73.362710][ T4500] tipc: Disabling bearer <eth:syzkaller0>
[   73.441241][ T4486] loop3: detected capacity change from 0 to 32768
[   73.469746][ T4503] device syzkaller0 entered promiscuous mode
[   73.488125][ T4486] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.56 (4486)
[   73.582317][ T4505] device syzkaller0 entered promiscuous mode
[   73.700880][ T4486] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   73.728283][ T4486] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   74.513483][ T4486] BTRFS info (device loop3): use zstd compression, level 3
[   74.553231][ T4486] BTRFS info (device loop3): using free space tree
[   74.617503][ T4486] BTRFS info (device loop3): has skinny extents
[   75.707323][ T4486] BTRFS error (device loop3): open_ctree failed: -12
[   75.767321][ T4554] device syzkaller0 entered promiscuous mode
[   75.943113][ T4260] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   75.973061][ T4549] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   75.982333][ T4560] binder_alloc: 4559: pid 4559 spamming oneway? 1 buffers allocated for a total size of 5312
[   76.032422][ T4560] binder_alloc: 4559: pid 4559 spamming oneway? 2 buffers allocated for a total size of 5320
[   76.044648][ T4560] binder: 4559:4560 ioctl c0306201 200000000680 returned -14
[   76.263112][ T4549] usb 2-1: Using ep0 maxpacket: 32
[   76.428597][ T1106] cfg80211: failed to load regulatory.db
[   76.434832][ T4549] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   76.713645][ T4549] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   76.772864][ T4549] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   76.915028][ T4549] usb 2-1: Product: syz
[   76.923233][ T4549] usb 2-1: Manufacturer: syz
[   76.928813][ T4573] loop3: detected capacity change from 0 to 512
[   76.930333][ T4549] usb 2-1: SerialNumber: syz
[   76.943498][ T4260] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[   76.945821][ T4549] usb 2-1: config 0 descriptor??
[   76.958030][ T4260] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[   76.973100][ T4260] usb 3-1: config 0 has no interface number 0
[   76.974023][ T4516] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   76.979448][ T4260] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[   76.996735][ T4260] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   77.013856][ T4573] =======================================================
[   77.013856][ T4573] WARNING: The mand mount option has been deprecated and
[   77.013856][ T4573]          and is ignored by this kernel. Remove the mand
[   77.013856][ T4573]          option from the mount to silence this warning.
[   77.013856][ T4573] =======================================================
[   77.052696][ T4260] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[   77.072432][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.114700][ T4260] usb 3-1: config 0 descriptor??
[   77.159452][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   77.183701][ T4573] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   77.217985][ T4573] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.78: corrupted inode contents
[   77.251212][ T4573] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.78: mark_inode_dirty error
[   77.271426][ T4573] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.78: corrupted inode contents
[   77.303947][ T4573] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.78: mark_inode_dirty error
[   77.322935][ T4581] loop4: detected capacity change from 0 to 1024
[   77.374599][ T4552] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.428692][ T4581] EXT4-fs (loop4): Ignoring removed oldalloc option
[   77.459580][ T4581] EXT4-fs (loop4): inline encryption not supported
[   77.475494][ T4581] EXT4-fs (loop4): Ignoring removed bh option
[   77.493507][ T4228] usb 2-1: USB disconnect, device number 3
[   77.532473][ T4581] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,barrier,commit=0x0000000000000005,journal_ioprio=0x0000000000000000,data_err=ignore,init_itable,oldalloc,inlinecrypt,bh,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: none.
[   77.557855][    C1] vkms_vblank_simulate: vblank timer overrun
[   77.788593][ T4552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.807444][ T4552] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   77.845553][ T4260] usb 3-1: USB disconnect, device number 3
[   77.851605][ T4552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.905672][ T4552] usb 1-1: config 0 descriptor??
[   78.476102][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[   78.490394][ T4552] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[   78.509197][ T4552] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input6
[   79.023876][ T4552] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   79.393731][ T4608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   79.482906][ T2382] usb 1-1: USB disconnect, device number 2
[   80.067720][ T4621] loop3: detected capacity change from 0 to 512
[   80.286098][ T4621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.92: missing EA_INODE flag
[   80.340076][ T4621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.92: error while reading EA inode 12 err=-117
[   80.473389][ T4630] binder_alloc: 4625: binder_alloc_buf size 61936 failed, no address space
[   80.503352][ T4621] EXT4-fs (loop3): 1 orphan inode deleted
[   80.551196][ T4621] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   80.663331][ T4630] binder_alloc: allocated: 64 (num: 1 largest: 64), free: 12224 (num: 1 largest: 12224)
[   81.123184][ T2382] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   81.133729][ T4641] loop2: detected capacity change from 0 to 8
[   81.175614][ T4641] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   81.406486][ T4180] udevd[4180]: incorrect cramfs checksum on /dev/loop2
[   81.583505][ T2382] usb 2-1: config 0 has no interfaces?
[   81.589401][ T2382] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[   81.701759][ T2382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.710542][ T4228] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   81.848364][ T2382] usb 2-1: config 0 descriptor??
[   81.999500][ T4180] udevd[4180]: incorrect cramfs checksum on /dev/loop2
[   82.083160][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   82.104822][ T4228] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   82.131607][ T4228] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   82.201449][ T4645] device syzkaller0 entered promiscuous mode
[   82.232043][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.358919][ T1109] usb 2-1: USB disconnect, device number 4
[   82.366493][ T4228] usb 1-1: config 0 descriptor??
[   83.731795][ T4668] netlink: 'syz.1.105': attribute type 10 has an invalid length.
[   83.803454][ T4668] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.814810][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'.
[   84.070951][ T4685] loop1: detected capacity change from 0 to 512
[   84.151061][ T4688] loop4: detected capacity change from 0 to 512
[   84.187097][ T4685] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[   84.500432][ T4688] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.112: invalid indirect mapped block 4294967295 (level 1)
[   84.518634][ T4688] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.112: invalid indirect mapped block 4294967295 (level 1)
[   84.536134][ T4688] EXT4-fs (loop4): 2 truncates cleaned up
[   84.542336][ T4688] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,grpjquota=,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   84.747369][ T1109] usb 1-1: USB disconnect, device number 3
[   85.660463][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   85.837979][ T4189] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0)
[   85.854966][ T4189] EXT4-fs error (device loop1): ext4_lookup:1858: inode #14: comm syz-executor: unexpected EA_INODE flag
[   85.868844][ T4189] EXT4-fs error (device loop1): ext4_lookup:1858: inode #14: comm syz-executor: unexpected EA_INODE flag
[   86.053846][   T21] usb 3-1: Using ep0 maxpacket: 32
[   86.203513][   T21] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   86.231411][   T21] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   86.322409][   T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   86.409761][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   86.498344][   T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   86.584013][   T21] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   86.639535][   T21] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   86.649109][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.667267][   T21] usb 3-1: config 0 descriptor??
[   86.925054][ T4710] loop4: detected capacity change from 0 to 8192
[   86.941025][   T21] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   86.996821][ T4710] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   87.106330][ T4710] REISERFS (device loop4): using ordered data mode
[   87.112878][ T4710] reiserfs: using flush barriers
[   87.167474][ T4302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.197010][   T21] usb 3-1: USB disconnect, device number 4
[   87.199648][ T4710] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   87.240360][   T21] usblp0: removed
[   87.283719][ T4710] REISERFS (device loop4): checking transaction log (loop4)
[   87.342798][ T4302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.373973][ T4712] loop3: detected capacity change from 0 to 32768
[   87.446073][ T4302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.510838][ T4710] REISERFS (device loop4): Using tea hash to sort names
[   87.520948][ T4710] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   87.675171][ T4712] XFS (loop3): Mounting V5 Filesystem
[   87.752233][ T4712] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   87.790242][ T4712] XFS (loop3): Starting recovery (logdev: internal)
[   87.802872][ T4302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.946355][ T4712] XFS (loop3): Ending recovery (logdev: internal)
[   88.168466][ T4724] chnl_net:caif_netlink_parms(): no params data found
[   88.474308][ T4187] XFS (loop3): Unmounting Filesystem
[   88.486533][ T4751] loop4: detected capacity change from 0 to 512
[   88.600463][ T4751] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.124: inode has both inline data and extents flags
[   88.616232][ T4751] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.124: couldn't read orphan inode 15 (err -117)
[   88.643012][ T4751] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback.
[   88.851859][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.859667][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.867929][ T4724] device bridge_slave_0 entered promiscuous mode
[   88.876957][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.884159][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.892473][ T4724] device bridge_slave_1 entered promiscuous mode
[   88.915103][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.926766][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.955675][ T4724] team0: Port device team_slave_0 added
[   88.965316][ T4724] team0: Port device team_slave_1 added
[   89.082492][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.113839][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.830882][ T4549] Bluetooth: hci2: command 0x0409 tx timeout
[   89.844651][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.888908][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.911302][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.951079][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.977372][ T4778] device syzkaller0 entered promiscuous mode
[   90.010043][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.020379][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.209802][ T4792] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   90.298450][ T4724] device hsr_slave_0 entered promiscuous mode
[   90.321464][ T4724] device hsr_slave_1 entered promiscuous mode
[   90.357979][ T4724] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.367300][ T4724] Cannot create hsr debugfs directory
[   91.257305][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'.
[   91.732669][ T4825] loop2: detected capacity change from 0 to 512
[   91.995677][ T4825] EXT4-fs (loop2): Ignoring removed orlov option
[   92.187831][ T4825] EXT4-fs (loop2): Test dummy encryption mode enabled
[   92.234727][ T4724] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   92.252194][ T4825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.302847][   T21] Bluetooth: hci2: command 0x041b tx timeout
[   92.332442][ T4724] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   92.415538][ T4724] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   92.509574][ T4825] EXT4-fs (loop2): 1 truncate cleaned up
[   92.521577][ T4825] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[   92.541612][ T4302] bond0: (slave wlan1): Releasing backup interface
[   92.566576][ T4724] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   94.256665][ T4852] loop4: detected capacity change from 0 to 8
[   94.305156][ T4847] xt_connbytes: Forcing CT accounting to be enabled
[   94.314392][   T21] Bluetooth: hci2: command 0x040f tx timeout
[   94.403696][ T4852] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   94.789553][ T4409] udevd[4409]: incorrect cramfs checksum on /dev/loop4
[   95.028969][ T4847] xt_CT: No such helper "netbios-ns"
[   95.220051][ T4409] udevd[4409]: incorrect cramfs checksum on /dev/loop4
[   95.488850][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.725219][ T4302] device hsr_slave_0 left promiscuous mode
[   95.879464][ T4302] device hsr_slave_1 left promiscuous mode
[   96.005087][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.106997][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.341791][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.384348][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.403188][ T4552] Bluetooth: hci2: command 0x0419 tx timeout
[   96.413904][ T4302] device bridge_slave_1 left promiscuous mode
[   96.431105][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.443072][ T4871] comedi comedi0: rti802: I/O port conflict (0x3,4)
[   96.487895][ T4302] device bridge_slave_0 left promiscuous mode
[   96.512098][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.872185][ T4302] device veth1_macvtap left promiscuous mode
[   97.005831][ T4302] device veth0_macvtap left promiscuous mode
[   97.104259][ T4302] device veth1_vlan left promiscuous mode
[   97.186717][ T4302] device veth0_vlan left promiscuous mode
[   99.769051][ T4302] team0 (unregistering): Port device team_slave_1 removed
[   99.799427][ T4302] team0 (unregistering): Port device team_slave_0 removed
[   99.815524][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.841865][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.010379][ T4302] bond0 (unregistering): Released all slaves
[  100.155674][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.176662][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.194701][ T4724] 8021q: adding VLAN 0 to HW filter on device team0
[  100.222236][ T4885] loop3: detected capacity change from 0 to 512
[  100.252082][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.264092][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.285583][ T4891] binder_alloc: 4887: pid 4887 spamming oneway? 1 buffers allocated for a total size of 5312
[  100.310770][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.313957][  T144] Bluetooth: hci5: Frame reassembly failed (-84)
[  100.317921][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.341057][ T4885] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.154: missing EA_INODE flag
[  100.356054][ T4885] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.154: error while reading EA inode 12 err=-117
[  100.368553][ T4198] Bluetooth: hci5: Received unexpected HCI Event 00000000
[  100.379120][ T4885] EXT4-fs (loop3): 1 orphan inode deleted
[  100.380712][ T4891] binder_alloc: 4887: pid 4887 spamming oneway? 2 buffers allocated for a total size of 5320
[  100.384934][ T4885] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  100.392709][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.603656][ T4891] binder: 4887:4891 ioctl c0306201 200000000680 returned -14
[  100.669391][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.703246][ T4902] xt_connbytes: Forcing CT accounting to be enabled
[  101.711234][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.718355][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.791082][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.800676][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.811256][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.869223][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.877535][ T4902] xt_CT: No such helper "netbios-ns"
[  101.890740][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.912365][ T4908] device syzkaller0 entered promiscuous mode
[  101.953508][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  101.964049][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  101.981978][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.010349][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.023858][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.081097][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[  102.150604][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.162511][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.419381][ T4551] Bluetooth: hci5: command 0x1003 tx timeout
[  102.425618][  T146] Bluetooth: hci5: sending frame failed (-49)
[  102.477968][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.496460][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.668263][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.683177][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.296586][ T4960] process 'syz.2.169' launched '/dev/fd/6' with NULL argv: empty string added
[  105.443809][ T4259] Bluetooth: hci5: command 0x1001 tx timeout
[  105.933154][  T146] Bluetooth: hci5: sending frame failed (-49)
[  106.040691][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.263726][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  107.283004][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.292992][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.302994][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.312989][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.322989][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.332992][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.342997][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.352998][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  107.373001][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  108.297563][ T4643] Bluetooth: hci5: command 0x1009 tx timeout
[  108.809643][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.827802][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.903874][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.919993][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.948441][ T4724] device veth0_vlan entered promiscuous mode
[  108.967682][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.987128][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.020395][ T4724] device veth1_vlan entered promiscuous mode
[  109.090905][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  109.121267][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  109.146918][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.171401][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.200840][ T4988] nftables ruleset with unbound set
[  109.202704][ T4724] device veth0_macvtap entered promiscuous mode
[  109.244730][ T4724] device veth1_macvtap entered promiscuous mode
[  109.349845][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.397913][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.574653][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.585498][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.595659][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.606373][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.617060][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.630152][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.646849][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.657768][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.669881][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.744022][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  109.846196][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.197696][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.298789][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.500724][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.675757][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.818540][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.957934][ T5018] loop3: detected capacity change from 0 to 512
[  110.991360][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.150652][ T4724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.309872][ T4724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.508492][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.518710][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.544087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.622151][ T5018] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.645001][ T5018] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.692180][ T4724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.933607][ T4724] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.348405][ T5046] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[  112.515972][ T4724] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.745087][ T4724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.772073][ T5044] EXT4-fs (loop3): Cannot change quota options when quota turned on
[  113.189965][ T5053] loop4: detected capacity change from 0 to 512
[  113.203251][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.299458][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.667317][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.711940][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  113.744571][ T5057] autofs4:pid:5057:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  113.754403][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.762523][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  113.776749][ T5053] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.836028][ T5053] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.975347][ T5085] loop2: detected capacity change from 0 to 128
[  117.068172][ T5085] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  117.125454][ T5085] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  121.107917][    T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  123.237050][ T5143] loop4: detected capacity change from 0 to 2048
[  123.800097][ T5143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.206275][ T5155] netlink: 'syz.3.207': attribute type 1 has an invalid length.
[  125.455606][ T5143] UDF-fs: error (device loop4): udf_read_inode: (ino 1410) failed !bh
[  125.472844][ T5155] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.527535][ T5169] loop5: detected capacity change from 0 to 1024
[  126.542262][ T5157] bond1: (slave geneve2): making interface the new active one
[  126.572795][ T5157] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  126.984204][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  127.092887][ T5157] syz.3.207 (5157) used greatest stack depth: 19600 bytes left
[  128.161995][ T5169] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.784097][ T5169] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[  132.230335][ T5219] loop4: detected capacity change from 0 to 512
[  132.381172][ T5226] Zero length message leads to an empty skb
[  132.743692][ T1430] ieee802154 phy0 wpan0: encryption failed: -22
[  132.750251][ T1430] ieee802154 phy1 wpan1: encryption failed: -22
[  141.441479][ T5341] loop5: detected capacity change from 0 to 512
[  141.775217][ T5346] loop4: detected capacity change from 0 to 1024
[  143.659083][ T5346] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  143.663407][ T5349] syz.3.239 (5349): drop_caches: 2
[  148.563525][ T5374] loop3: detected capacity change from 0 to 2048
[  148.677218][ T5383] autofs4:pid:5383:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  148.700145][ T5374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.025573][ T5391] overlayfs: failed to clone upperpath
[  153.667843][ T5406] loop4: detected capacity change from 0 to 128
[  153.689130][ T5397] loop2: detected capacity change from 0 to 2048
[  153.827499][ T5397] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2.
[  153.828231][ T5406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.852058][ T5406] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  153.968387][ T5419] loop3: detected capacity change from 0 to 256
[  154.200384][ T5419] FAT-fs (loop3): Directory bread(block 64) failed
[  154.207081][ T5419] FAT-fs (loop3): Directory bread(block 65) failed
[  154.213743][ T5419] FAT-fs (loop3): Directory bread(block 66) failed
[  154.220301][ T5419] FAT-fs (loop3): Directory bread(block 67) failed
[  154.226918][ T5419] FAT-fs (loop3): Directory bread(block 68) failed
[  154.233675][ T5419] FAT-fs (loop3): Directory bread(block 69) failed
[  154.240265][ T5419] FAT-fs (loop3): Directory bread(block 70) failed
[  154.246870][ T5419] FAT-fs (loop3): Directory bread(block 71) failed
[  154.253540][ T5419] FAT-fs (loop3): Directory bread(block 72) failed
[  154.260067][ T5419] FAT-fs (loop3): Directory bread(block 73) failed
[  156.720332][ T5438] loop4: detected capacity change from 0 to 512
[  156.758587][ T5437] 
[  156.760959][ T5437] ======================================================
[  156.767987][ T5437] WARNING: possible circular locking dependency detected
[  156.775020][ T5437] syzkaller #0 Not tainted
[  156.779443][ T5437] ------------------------------------------------------
[  156.786462][ T5437] syz.2.257/5437 is trying to acquire lock:
[  156.792360][ T5437] ffffffff8d574a38 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xa5/0x710
[  156.801874][ T5437] 
[  156.801874][ T5437] but task is already holding lock:
[  156.809240][ T5437] ffffffff8d5749d8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x24/0x710
[  156.818836][ T5437] 
[  156.818836][ T5437] which lock already depends on the new lock.
[  156.818836][ T5437] 
[  156.829247][ T5437] 
[  156.829247][ T5437] the existing dependency chain (in reverse order) is:
[  156.838262][ T5437] 
[  156.838262][ T5437] -> #2 (nr_neigh_list_lock){+...}-{2:2}:
[  156.846179][ T5437]        _raw_spin_lock_bh+0x32/0x50
[  156.851475][ T5437]        nr_del_node+0x512/0x8d0
[  156.856422][ T5437]        nr_rt_ioctl+0xa20/0xd80
[  156.861360][ T5437]        sock_do_ioctl+0xfb/0x320
[  156.866373][ T5437]        sock_ioctl+0x4d2/0x710
[  156.871222][ T5437]        __se_sys_ioctl+0xfa/0x170
[  156.876324][ T5437]        do_syscall_64+0x4c/0xa0
[  156.881253][ T5437]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  156.887658][ T5437] 
[  156.887658][ T5437] -> #1 (&nr_node->node_lock){+...}-{2:2}:
[  156.895645][ T5437]        _raw_spin_lock_bh+0x32/0x50
[  156.900938][ T5437]        nr_del_node+0x152/0x8d0
[  156.905865][ T5437]        nr_rt_ioctl+0xa20/0xd80
[  156.910802][ T5437]        sock_do_ioctl+0xfb/0x320
[  156.915830][ T5437]        sock_ioctl+0x4d2/0x710
[  156.920708][ T5437]        __se_sys_ioctl+0xfa/0x170
[  156.925807][ T5437]        do_syscall_64+0x4c/0xa0
[  156.930733][ T5437]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  156.937134][ T5437] 
[  156.937134][ T5437] -> #0 (nr_node_list_lock){+...}-{2:2}:
[  156.944938][ T5437]        __lock_acquire+0x2c42/0x7d10
[  156.950298][ T5437]        lock_acquire+0x19e/0x400
[  156.955313][ T5437]        _raw_spin_lock_bh+0x32/0x50
[  156.960587][ T5437]        nr_rt_device_down+0xa5/0x710
[  156.965946][ T5437]        nr_device_event+0x133/0x140
[  156.971251][ T5437]        raw_notifier_call_chain+0xcb/0x160
[  156.977130][ T5437]        __dev_notify_flags+0x158/0x300
[  156.982665][ T5437]        dev_change_flags+0xe3/0x1a0
[  156.987934][ T5437]        dev_ifsioc+0x130/0xd50
[  156.992768][ T5437]        dev_ioctl+0x545/0xe30
[  156.997515][ T5437]        sock_do_ioctl+0x245/0x320
[  157.002609][ T5437]        sock_ioctl+0x4d2/0x710
[  157.007440][ T5437]        __se_sys_ioctl+0xfa/0x170
[  157.012534][ T5437]        do_syscall_64+0x4c/0xa0
[  157.017457][ T5437]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.023857][ T5437] 
[  157.023857][ T5437] other info that might help us debug this:
[  157.023857][ T5437] 
[  157.034066][ T5437] Chain exists of:
[  157.034066][ T5437]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  157.034066][ T5437] 
[  157.047867][ T5437]  Possible unsafe locking scenario:
[  157.047867][ T5437] 
[  157.055298][ T5437]        CPU0                    CPU1
[  157.060651][ T5437]        ----                    ----
[  157.065994][ T5437]   lock(nr_neigh_list_lock);
[  157.070655][ T5437]                                lock(&nr_node->node_lock);
[  157.077921][ T5437]                                lock(nr_neigh_list_lock);
[  157.085104][ T5437]   lock(nr_node_list_lock);
[  157.089678][ T5437] 
[  157.089678][ T5437]  *** DEADLOCK ***
[  157.089678][ T5437] 
[  157.097802][ T5437] 2 locks held by syz.2.257/5437:
[  157.102927][ T5437]  #0: ffffffff8d43d408 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30
[  157.111644][ T5437]  #1: ffffffff8d5749d8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x24/0x710
[  157.121645][ T5437] 
[  157.121645][ T5437] stack backtrace:
[  157.127533][ T5437] CPU: 1 PID: 5437 Comm: syz.2.257 Not tainted syzkaller #0
[  157.134814][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  157.144860][ T5437] Call Trace:
[  157.148126][ T5437]  <TASK>
[  157.151041][ T5437]  dump_stack_lvl+0x188/0x250
[  157.155714][ T5437]  ? load_image+0x400/0x400
[  157.160201][ T5437]  ? show_regs_print_info+0x20/0x20
[  157.165385][ T5437]  ? print_circular_bug+0x12b/0x1a0
[  157.170568][ T5437]  check_noncircular+0x296/0x330
[  157.175494][ T5437]  ? add_chain_block+0x940/0x940
[  157.180415][ T5437]  ? lockdep_lock+0xf1/0x1f0
[  157.184994][ T5437]  ? lockdep_unlock+0x143/0x2e0
[  157.189831][ T5437]  ? mark_lock+0x94/0x320
[  157.194143][ T5437]  ? _find_first_zero_bit+0xce/0xf0
[  157.199339][ T5437]  __lock_acquire+0x2c42/0x7d10
[  157.204194][ T5437]  ? verify_lock_unused+0x140/0x140
[  157.209392][ T5437]  lock_acquire+0x19e/0x400
[  157.213882][ T5437]  ? nr_rt_device_down+0xa5/0x710
[  157.218893][ T5437]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  157.224859][ T5437]  ? read_lock_is_recursive+0x10/0x10
[  157.230221][ T5437]  ? __bpf_trace_softirq+0x10/0x10
[  157.235319][ T5437]  ? __rwlock_init+0x140/0x140
[  157.240072][ T5437]  ? __local_bh_enable_ip+0x136/0x1c0
[  157.245425][ T5437]  ? lockdep_hardirqs_on+0x94/0x140
[  157.250614][ T5437]  ? nr_rt_device_down+0xa5/0x710
[  157.255632][ T5437]  _raw_spin_lock_bh+0x32/0x50
[  157.260401][ T5437]  ? nr_rt_device_down+0xa5/0x710
[  157.265415][ T5437]  nr_rt_device_down+0xa5/0x710
[  157.270257][ T5437]  ? do_raw_spin_unlock+0x11d/0x230
[  157.275450][ T5437]  nr_device_event+0x133/0x140
[  157.280208][ T5437]  raw_notifier_call_chain+0xcb/0x160
[  157.285572][ T5437]  __dev_notify_flags+0x158/0x300
[  157.290592][ T5437]  ? __dev_change_flags+0x6a0/0x6a0
[  157.295777][ T5437]  ? __dev_change_flags+0x4d0/0x6a0
[  157.300965][ T5437]  ? dev_get_flags+0x1c0/0x1c0
[  157.305715][ T5437]  ? __mutex_lock_common+0x465/0x2400
[  157.311087][ T5437]  dev_change_flags+0xe3/0x1a0
[  157.315839][ T5437]  dev_ifsioc+0x130/0xd50
[  157.320158][ T5437]  ? dev_ioctl+0xe30/0xe30
[  157.324561][ T5437]  ? apparmor_capable+0x12c/0x190
[  157.329573][ T5437]  ? full_name_hash+0x8e/0xe0
[  157.334238][ T5437]  dev_ioctl+0x545/0xe30
[  157.338465][ T5437]  ? _copy_from_user+0x111/0x170
[  157.343388][ T5437]  sock_do_ioctl+0x245/0x320
[  157.347966][ T5437]  ? sock_show_fdinfo+0xb0/0xb0
[  157.352805][ T5437]  sock_ioctl+0x4d2/0x710
[  157.357118][ T5437]  ? sock_poll+0x410/0x410
[  157.361526][ T5437]  ? bpf_lsm_file_ioctl+0x5/0x10
[  157.366450][ T5437]  ? security_file_ioctl+0x7c/0xa0
[  157.371548][ T5437]  ? sock_poll+0x410/0x410
[  157.375948][ T5437]  __se_sys_ioctl+0xfa/0x170
[  157.380523][ T5437]  do_syscall_64+0x4c/0xa0
[  157.384928][ T5437]  ? clear_bhb_loop+0x30/0x80
[  157.389591][ T5437]  ? clear_bhb_loop+0x30/0x80
[  157.394253][ T5437]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.400139][ T5437] RIP: 0033:0x7fbd77865dd9
[  157.404543][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.424135][ T5437] RSP: 002b:00007fbd75abf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  157.432534][ T5437] RAX: ffffffffffffffda RBX: 00007fbd77adefa0 RCX: 00007fbd77865dd9
[  157.440493][ T5437] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a
[  157.448450][ T5437] RBP: 00007fbd778fbd69 R08: 0000000000000000 R09: 0000000000000000
[  157.456403][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.464358][ T5437] R13: 00007fbd77adf038 R14: 00007fbd77adefa0 R15: 00007fff4b7177c8
[  157.472324][ T5437]  </TASK>
[  157.490510][ T5438] EXT4-fs (loop4): Ignoring removed bh option
[  157.551579][ T5438] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  157.996547][ T5438] EXT4-fs (loop4): 1 truncate cleaned up
[  158.002349][ T5438] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  158.294500][ T5462] overlayfs: upper fs needs to support d_type.
[  158.618817][ T4199] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  158.636689][ T4199] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  158.659908][ T4199] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)