last executing test programs:

1m49.271934689s ago: executing program 0 (id=588):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'team0\x00', 0x2979})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="01609eee3c4d", 0x6, 0x40, 0x0, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

1m46.850989736s ago: executing program 0 (id=597):
openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0)
write$nbd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = getpgid(0x0)
r2 = syz_clone(0x28938c00, &(0x7f0000000300)="be3d87bd0a7b780a9353ed6f2ba428f430674e3102fc31e948aa9fbb3e", 0x1d, &(0x7f0000000140), &(0x7f0000000200), 0x0)
kcmp(r1, r2, 0x2, r0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x34)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)

1m46.347439155s ago: executing program 0 (id=609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0)

1m45.208310318s ago: executing program 0 (id=600):
r0 = socket$pptp(0x18, 0x1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40)
mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8)
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
io_setup(0x4, &(0x7f0000010440)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfdfe, 0x100000000000000}])
close_range(r0, 0xffffffffffffffff, 0x0)

1m44.132010718s ago: executing program 0 (id=604):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})

1m42.639727227s ago: executing program 0 (id=611):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0xa)
r5 = syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00')
pread64(r5, &(0x7f0000000080)=""/110, 0x98, 0x5)
pipe2$9p(&(0x7f0000000000), 0x4000)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m39.686353973s ago: executing program 32 (id=611):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0xa)
r5 = syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00')
pread64(r5, &(0x7f0000000080)=""/110, 0x98, 0x5)
pipe2$9p(&(0x7f0000000000), 0x4000)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.327169133s ago: executing program 3 (id=994):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2)
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x6], 0x0, 0x0, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x51)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)

11.152858707s ago: executing program 3 (id=996):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)

11.089238798s ago: executing program 3 (id=997):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r5, 0xc8036ab6d6cbef07, 0x70bd28, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)

10.45470524s ago: executing program 3 (id=999):
socketpair(0x15, 0x800, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xd4e5}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r6 = openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x8000002)
socket$pptp(0x18, 0x1, 0x2)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000040)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

9.368414851s ago: executing program 3 (id=1005):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc8, 0xb8, 0x54, 0x10, 0x41e, 0x401d, 0x64ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xec, 0x2, 0x0, 0x48, 0xec, 0xf}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

8.758468663s ago: executing program 5 (id=1010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)

7.447700428s ago: executing program 5 (id=1012):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}}]}, 0x3c}}, 0x0)

7.395397959s ago: executing program 4 (id=1015):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x93)

7.227824332s ago: executing program 4 (id=1017):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c000)

6.079014054s ago: executing program 4 (id=1020):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x1)
socket$inet(0x2, 0x2, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x84}, 0x0)
r1 = inotify_init()
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000080))
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0), 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x30044043}, 0x90)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r4 = socket$xdp(0x2c, 0x3, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@gettaction={0x1c, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x7, 0x4, 0x9}]}, 0x1c}}, 0x0)
syz_open_dev$vivid(0x0, 0x2, 0x2)

6.067321054s ago: executing program 5 (id=1021):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xff}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r5, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x2400c011)

5.975136536s ago: executing program 3 (id=1023):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(r0, &(0x7f0000000440)=""/176, 0xb0, 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020)
socket(0x40000000015, 0x5, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}})
r7 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r7, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x80, 0x0}, 0x4000080)
socket$kcm(0xa, 0x5, 0x0)
mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.137131372s ago: executing program 5 (id=1024):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}, 0x20000080)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000040)={0x2, 0x200, '@\x00V', 0x1, 0xf})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x6e23, 0x20006, @empty, 0x6}}, 0x4, 0x2, 0x0, 0x5, 0x392, 0x97}, 0x9c)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x3, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x3, 0x10b, 0x100000, 0xffffffffffffffff, 0x4, 0x20001, 0x20007, 0x0, [0x0, 0x400, 0x10, 0x2]})

4.669010151s ago: executing program 4 (id=1025):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x4)
r3 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$KEYCTL_MOVE(0x1e, r2, r3, 0x0, 0x1)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000000c0)="10", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0x1, 0x6, @multicast}, 0x14)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

4.665775091s ago: executing program 2 (id=1035):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x20000080ffff, 0x100000}}, 0x40)

4.640337101s ago: executing program 1 (id=1026):
pipe2(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002400)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0xfffffffffffffffd, r3}, 0x4c)
splice(r0, 0x0, r2, 0x0, 0x10, 0x0)

4.427933925s ago: executing program 2 (id=1027):
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090244000101000100090400000302020000052406000005240004000d240f810372020206030905820200000007030905030200c3a9000200"/86], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x40f00}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xffbf8fec88f9c330}, 0x10000040)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x20000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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")
ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0})
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)

4.427647536s ago: executing program 1 (id=1028):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0xd1, 0x0, 0x0, &(0x7f00000001c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x0, 0x79, 0xfffffffc, 0x9, 0x1, 0x1000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0xfffffffffffffffc, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0x9, 0x8, 0x8000, 0x28001, r5, r6, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20)

3.733043149s ago: executing program 5 (id=1029):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000002c0)=0x46, 0x4)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0xff}}, 0x1c, 0x0, 0x0, &(0x7f0000002a40)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x0)

2.820739286s ago: executing program 1 (id=1030):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c000)

2.751992798s ago: executing program 5 (id=1031):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0xa, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x1e, 0x4, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
pread64(r2, &(0x7f0000000080)=""/196, 0xc4, 0x3)

2.210034058s ago: executing program 2 (id=1032):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x803, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}}]}, 0x3c}}, 0x0)

1.403117943s ago: executing program 4 (id=1033):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.402138433s ago: executing program 1 (id=1044):
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x85, 0x1}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000002640)=ANY=[@ANYBLOB="00008000000000c2"], 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000}, @func_proto={0x0, 0x49, 0x0, 0xd, 0x2, [{0xd, 0x3}]}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0xd}, 0x20)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\r\x00\x00\x00\x00\n\x00\x00\x00', @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

1.187378988s ago: executing program 2 (id=1034):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
pread64(r0, &(0x7f0000000000)=""/71, 0x47, 0x100000000)

259.329695ms ago: executing program 4 (id=1036):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$rfkill(r2, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8)
add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000100), 0x0, 0x0)
request_key(&(0x7f0000000400)='user\x00', 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000013c0)=ANY=[@ANYBLOB="040000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002004e22e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f0000010000000000000000006caa2356000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e216401010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14141b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000080)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

216.110996ms ago: executing program 2 (id=1037):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000680)={0x2, 0xfff9, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

161.809777ms ago: executing program 1 (id=1038):
r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x3, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x2, &(0x7f0000000880)="d40b"}], 0x2})

120.569578ms ago: executing program 2 (id=1039):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sync_file_range(0xffffffffffffffff, 0x80000000, 0xfffffffffffffffd, 0x6)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x23, 0x0, &(0x7f00000001c0))
r3 = syz_io_uring_setup(0xbc4, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x3c8}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, 0x0)
r6 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080), 0x0)
getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000140))
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c)
syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
syz_io_uring_submit(r7, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1})
unshare(0x400)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_enter(r3, 0x47fb, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=1040):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1}, 0x8)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
close(r0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts.
[   52.149156][ T4172] cgroup: Unknown subsys name 'net'
[   52.286678][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.622712][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   54.967101][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   55.022989][ T4195] chnl_net:caif_netlink_parms(): no params data found
[   55.158637][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.166309][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.175005][ T4187] device bridge_slave_0 entered promiscuous mode
[   55.185914][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.193116][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.200908][ T4187] device bridge_slave_1 entered promiscuous mode
[   55.223557][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.230666][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.238583][ T4195] device bridge_slave_0 entered promiscuous mode
[   55.245909][ T4183] chnl_net:caif_netlink_parms(): no params data found
[   55.263630][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   55.276730][ T4182] chnl_net:caif_netlink_parms(): no params data found
[   55.285221][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.292350][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.300145][ T4195] device bridge_slave_1 entered promiscuous mode
[   55.332630][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.372301][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.398032][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.423398][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.457251][ T4187] team0: Port device team_slave_0 added
[   55.465064][ T4187] team0: Port device team_slave_1 added
[   55.525099][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.532247][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.558175][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.572028][ T4195] team0: Port device team_slave_0 added
[   55.578281][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.585365][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.611339][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.622561][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.629609][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.637551][ T4189] device bridge_slave_0 entered promiscuous mode
[   55.645141][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.652643][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.660245][ T4182] device bridge_slave_0 entered promiscuous mode
[   55.675379][ T4195] team0: Port device team_slave_1 added
[   55.681315][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.688528][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.696248][ T4183] device bridge_slave_0 entered promiscuous mode
[   55.707322][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.714767][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.722909][ T4189] device bridge_slave_1 entered promiscuous mode
[   55.729688][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.736757][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.744919][ T4182] device bridge_slave_1 entered promiscuous mode
[   55.757868][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.765141][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.772956][ T4183] device bridge_slave_1 entered promiscuous mode
[   55.813791][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.820735][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.846820][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.859873][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.882321][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.889376][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.915406][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.934071][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.952046][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.962954][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.993770][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.017164][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.028597][ T4187] device hsr_slave_0 entered promiscuous mode
[   56.035336][ T4187] device hsr_slave_1 entered promiscuous mode
[   56.044099][ T4183] team0: Port device team_slave_0 added
[   56.059491][ T4189] team0: Port device team_slave_0 added
[   56.073806][ T4183] team0: Port device team_slave_1 added
[   56.097597][ T4195] device hsr_slave_0 entered promiscuous mode
[   56.104633][ T4195] device hsr_slave_1 entered promiscuous mode
[   56.111196][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.118985][ T4195] Cannot create hsr debugfs directory
[   56.125710][ T4189] team0: Port device team_slave_1 added
[   56.168844][ T4182] team0: Port device team_slave_0 added
[   56.182106][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.189040][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.215175][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.232847][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.239784][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.266008][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.278041][ T4182] team0: Port device team_slave_1 added
[   56.293983][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.300926][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.327045][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.345058][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.352075][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.378080][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.398525][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.405810][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.431764][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.459604][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.466786][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.493743][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.523292][ T4183] device hsr_slave_0 entered promiscuous mode
[   56.529994][ T4183] device hsr_slave_1 entered promiscuous mode
[   56.536527][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.544431][ T4183] Cannot create hsr debugfs directory
[   56.623262][ T4189] device hsr_slave_0 entered promiscuous mode
[   56.630124][ T4189] device hsr_slave_1 entered promiscuous mode
[   56.636764][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.644451][ T4189] Cannot create hsr debugfs directory
[   56.659072][ T4182] device hsr_slave_0 entered promiscuous mode
[   56.666089][ T4182] device hsr_slave_1 entered promiscuous mode
[   56.673078][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.680632][ T4182] Cannot create hsr debugfs directory
[   56.732260][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   56.738806][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   56.741918][ T3159] Bluetooth: hci2: command 0x0409 tx timeout
[   56.750858][ T3159] Bluetooth: hci4: command 0x0409 tx timeout
[   56.821893][ T3159] Bluetooth: hci3: command 0x0409 tx timeout
[   56.913054][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.929184][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.938712][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.951057][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.970564][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   56.983437][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   56.995167][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   57.004461][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   57.087528][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.103969][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.130108][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.144808][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.178447][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.201360][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.221018][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   57.233833][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.242835][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.251245][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.259976][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.282721][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.302351][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.310756][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.320144][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.329027][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.336191][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.349649][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.375186][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   57.383522][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.393729][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.402636][  T454] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.409667][  T454] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.418165][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.427012][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.451461][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.460954][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.470165][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.479250][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.488350][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.497659][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.506794][  T454] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.513868][  T454] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.521451][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.529917][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.545314][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   57.555302][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.565245][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.573769][  T454] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.580810][  T454] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.589903][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.599752][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.614253][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   57.623723][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   57.632766][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   57.652744][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.661694][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.686357][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.694375][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.709779][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.718895][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.728192][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.736747][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.745896][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.755733][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.786109][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.798209][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.810841][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.822057][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.833330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.842174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.851434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.860124][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.868533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.877216][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.886490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.905335][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.920970][ T4182] 8021q: adding VLAN 0 to HW filter on device team0
[   57.929178][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.937797][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.965764][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   57.983663][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.000816][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.009087][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.024535][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.033809][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.040866][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.058623][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.083001][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.102637][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.116043][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.123132][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.157647][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.166327][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.179541][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.189584][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.198907][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.207582][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.216650][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.226310][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.234905][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.241985][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.249690][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.259115][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.267616][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.274684][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.283124][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.291047][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.300090][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.309076][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.322714][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.344037][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.352280][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.365814][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.377305][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.396069][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.410125][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.420881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.434965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.447671][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.459304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.469201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.486835][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.499163][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.512103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.522422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.542781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.555638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.569613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.581933][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.600938][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.614183][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.624071][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.646417][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.662588][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.677319][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.698148][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   58.718606][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.731340][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.740349][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.756622][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.775854][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.785435][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.794170][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.801234][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.810903][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.818687][ T4272] Bluetooth: hci4: command 0x041b tx timeout
[   58.825324][ T4272] Bluetooth: hci2: command 0x041b tx timeout
[   58.836362][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.846010][ T4272] Bluetooth: hci0: command 0x041b tx timeout
[   58.856750][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.866283][ T4272] Bluetooth: hci1: command 0x041b tx timeout
[   58.876841][  T454] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.883940][  T454] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.893668][ T4226] Bluetooth: hci3: command 0x041b tx timeout
[   58.904930][ T4195] device veth0_vlan entered promiscuous mode
[   58.930412][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.939139][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.948006][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.957410][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   58.966055][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.977439][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.986762][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.995658][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.009729][ T4195] device veth1_vlan entered promiscuous mode
[   59.032556][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.044267][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.056336][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.065372][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.072985][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.080884][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.088980][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.097510][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.106412][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.115044][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.124495][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.132980][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.142501][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.151026][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.159975][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.189249][ T4182] device veth0_vlan entered promiscuous mode
[   59.197185][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.206006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.220674][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.228351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.235883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.244341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.258543][ T4195] device veth0_macvtap entered promiscuous mode
[   59.276636][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.288094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.303690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.323676][ T4195] device veth1_macvtap entered promiscuous mode
[   59.347457][ T4183] device veth0_vlan entered promiscuous mode
[   59.356719][ T4182] device veth1_vlan entered promiscuous mode
[   59.366353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.374624][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.384430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.393162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.401268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.409599][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.417932][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.430382][ T4183] device veth1_vlan entered promiscuous mode
[   59.494750][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.509108][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.517835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.526547][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.535178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.543745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.552512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.561001][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.570013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.578586][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.587177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.602049][ T4182] device veth0_macvtap entered promiscuous mode
[   59.615964][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.626991][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.635715][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.644877][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.655538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.664251][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.674895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.683733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.692341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.700709][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.709770][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.718361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.726085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.735706][ T4187] device veth0_vlan entered promiscuous mode
[   59.748855][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.756735][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.778605][ T4182] device veth1_macvtap entered promiscuous mode
[   59.786030][ T4183] device veth0_macvtap entered promiscuous mode
[   59.797299][ T4187] device veth1_vlan entered promiscuous mode
[   59.814530][ T4183] device veth1_macvtap entered promiscuous mode
[   59.842246][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.870355][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.881119][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.892727][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.905205][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.920285][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.930383][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   59.943860][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   59.954786][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.967669][ T4187] device veth0_macvtap entered promiscuous mode
[   59.983463][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.991413][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.999675][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.008120][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.017264][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.025544][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.034139][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.043262][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.052342][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.060885][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.069923][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.078392][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.088955][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.100004][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.111048][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.118898][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.129421][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.139428][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.150967][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.163638][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.184304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.186462][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.198990][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.208688][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.210471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.224945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.233977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.249008][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.258138][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.272557][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.281253][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.295476][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.305545][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.314530][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.323831][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.341446][ T4187] device veth1_macvtap entered promiscuous mode
[   60.382743][  T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.387421][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.390655][  T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.409174][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.422313][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.433075][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.443093][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.453851][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.465009][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.473436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.482016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.490527][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.499675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.508263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.532394][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.553112][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.563306][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.574250][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.585604][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.596272][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.607464][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.630864][ T4189] device veth0_vlan entered promiscuous mode
[   60.653673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.662567][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.674186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.682777][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.691058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.699486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.728333][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.739649][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.752688][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.761491][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.770994][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.792026][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.826416][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.868771][ T4189] device veth1_vlan entered promiscuous mode
[   60.892080][ T4241] Bluetooth: hci0: command 0x040f tx timeout
[   60.912634][ T4241] Bluetooth: hci2: command 0x040f tx timeout
[   60.920640][ T4241] Bluetooth: hci4: command 0x040f tx timeout
[   61.210591][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.350571][ T4226] Bluetooth: hci3: command 0x040f tx timeout
[   61.379661][ T4226] Bluetooth: hci1: command 0x040f tx timeout
[   61.412769][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.420794][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.463255][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.486954][ T4189] device veth0_macvtap entered promiscuous mode
[   61.504879][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.515224][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.524833][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.534653][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.545379][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.548081][ T4189] device veth1_macvtap entered promiscuous mode
[   61.578622][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.586470][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   61.648097][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.763510][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.777553][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.787653][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.798392][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.809969][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.824954][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.836264][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.914378][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.023401][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.585094][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.595172][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.636515][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.647591][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.648574][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.659967][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.674017][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.676059][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.712676][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.723172][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.741009][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.752337][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.762323][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.772934][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.793492][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.818577][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.840583][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.860495][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.872837][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.893794][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.907313][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.921671][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.930639][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.971823][ T4241] Bluetooth: hci2: command 0x0419 tx timeout
[   62.988158][ T4241] Bluetooth: hci0: command 0x0419 tx timeout
[   63.010564][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.050850][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.122744][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.221574][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   63.230480][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[   63.262790][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   63.271768][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   63.280827][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   63.289794][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   63.298757][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   63.307723][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   63.357187][ T4320] loop1: detected capacity change from 0 to 128
[   63.372186][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[   63.728065][    T7] Bluetooth: hci1: command 0x0419 tx timeout
[   63.757249][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.765502][    T7] Bluetooth: hci3: command 0x0419 tx timeout
[   63.772102][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   63.828600][ T4330] overlayfs: missing 'lowerdir'
[   63.878260][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.896613][ T4320] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   63.933236][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.945241][ T4320] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   63.969264][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.977394][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.987466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.978472][ T4334] loop0: detected capacity change from 0 to 32768
[   66.201745][ T4334] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4334)
[   66.270781][ T4334] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   66.280849][ T4334] BTRFS error (device loop0): superblock checksum mismatch
[   66.295594][ T4334] BTRFS error (device loop0): open_ctree failed: -22
[   66.323588][ T4337] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   66.350121][ T4337] CIFS: Unable to determine destination address
[   67.077264][ T4174] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (4174)
[   69.025603][ T4361] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.272717][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[   71.279588][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[   71.886182][ T4389] capability: warning: `syz.3.23' uses deprecated v2 capabilities in a way that may be insecure
[   73.971673][ T4255] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   74.021302][ T4407] loop4: detected capacity change from 0 to 512
[   74.233001][ T4407] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.30: casefold flag without casefold feature
[   74.298952][ T4407] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.30: couldn't read orphan inode 15 (err -117)
[   75.635573][ T4407] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   76.000400][ T4255] usb 4-1: device not accepting address 2, error -71
[   76.287231][ T4431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30'.
[   77.193192][ T1325] cfg80211: failed to load regulatory.db
[   77.690094][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'.
[   77.825431][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.525191][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.759722][ T4454] trusted_key: encrypted_key: insufficient parameters specified
[   79.295514][ T4442] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   80.723458][ T4471] 9pnet: Insufficient options for proto=fd
[   81.493759][ T4496] loop0: detected capacity change from 0 to 16
[   81.677206][ T4499] loop1: detected capacity change from 0 to 32768
[   81.745047][ T4496] erofs: (device loop0): mounted with root inode @ nid 36.
[   83.244061][ T4499] XFS (loop1): Mounting V5 Filesystem
[   83.340428][ T4499] XFS (loop1): Ending clean mount
[   84.050936][ T4182] XFS (loop1): Unmounting Filesystem
[   84.462558][ T4336] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   84.556546][ T4553] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.981968][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   85.465628][ T4565] loop3: detected capacity change from 0 to 2048
[   85.481662][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 160, setting to 64
[   85.612411][ T4336] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[   85.623102][ T4336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.643821][ T4336] usb 1-1: config 0 descriptor??
[   85.667091][ T4569] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.672730][ T4543] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   85.741244][ T4568] device sit0 entered promiscuous mode
[   85.813336][ T4568] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   85.820925][ T4568] netlink: 1 bytes leftover after parsing attributes in process `syz.1.66'.
[   85.863793][ T4311] Bluetooth: hci5: Frame reassembly failed (-84)
[   86.052675][ T4577] tipc: Started in network mode
[   86.067224][ T4577] tipc: Node identity 7edcf3c9b60d, cluster identity 4711
[   86.075054][ T4577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.084834][ T4577] device syzkaller0 entered promiscuous mode
[   86.130348][ T4577] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   86.272307][ T4336] waltop 0003:172F:0032.0001: unknown main item tag 0x0
[   86.296533][ T4336] waltop 0003:172F:0032.0001: unknown main item tag 0x0
[   86.323448][ T4588] tipc: Resetting bearer <eth:syzkaller0>
[   86.329600][ T4336] waltop 0003:172F:0032.0001: unknown main item tag 0x0
[   86.342189][ T4336] waltop 0003:172F:0032.0001: unknown main item tag 0x0
[   86.549738][ T4336] waltop 0003:172F:0032.0001: hidraw0: USB HID vff.f8 Device [HID 172f:0032] on usb-dummy_hcd.0-1/input0
[   86.675035][ T4336] usb 1-1: USB disconnect, device number 2
[   86.703272][ T4577] tipc: Resetting bearer <eth:syzkaller0>
[   86.758511][ T4577] tipc: Disabling bearer <eth:syzkaller0>
[   87.649217][ T4590] fido_id[4590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   87.851865][ T4336] Bluetooth: hci5: command 0x1003 tx timeout
[   87.858001][ T4190] Bluetooth: hci5: sending frame failed (-49)
[   90.572387][ T4248] Bluetooth: hci5: command 0x1001 tx timeout
[   90.601776][ T4190] Bluetooth: hci5: sending frame failed (-49)
[   90.684219][ T4624] loop0: detected capacity change from 0 to 128
[   91.669098][ T4633] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   92.024448][ T4255] libceph: connect (1)[c::]:6789 error -101
[   92.031143][ T4255] libceph: mon0 (1)[c::]:6789 connect error
[   92.156517][ T4632] ceph: No mds server is up or the cluster is laggy
[   92.661990][ T4336] Bluetooth: hci5: command 0x1009 tx timeout
[   93.915010][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'.
[   93.923755][ T4661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.91'.
[   93.935969][ T4661] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.944958][ T4661] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.953671][ T4661] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.962379][ T4661] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.973596][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'.
[   93.982404][ T4661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.91'.
[   93.991781][ T4661] Zero length message leads to an empty skb
[   94.522596][ T4679] binder: 4678:4679 ioctl c0306201 200000000180 returned -14
[   95.322178][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.861767][    T7] usb 4-1: config index 0 descriptor too short (expected 65527, got 18)
[   95.870460][    T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[   95.885521][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.910751][    T7] usb 4-1: config 0 descriptor??
[   95.981392][    T7] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[   96.634723][ T4696] netlink: 200 bytes leftover after parsing attributes in process `syz.3.104'.
[   96.891820][   T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   98.131895][   T13] usb 3-1: Using ep0 maxpacket: 32
[   98.444194][   T21] usb 4-1: USB disconnect, device number 4
[   98.622454][   T13] usb 3-1: unable to get BOS descriptor or descriptor too short
[   98.712420][   T13] usb 3-1: config 1 interface 0 altsetting 199 endpoint 0x1 has invalid wMaxPacketSize 0
[   98.742346][   T13] usb 3-1: config 1 interface 0 altsetting 199 bulk endpoint 0x1 has invalid maxpacket 0
[   98.782850][   T13] usb 3-1: config 1 interface 0 has no altsetting 0
[   99.421983][   T13] usb 3-1: string descriptor 0 read error: -71
[   99.443246][   T13] usb 3-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40
[   99.527265][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.662581][   T13] usb 3-1: can't set config #1, error -71
[  100.066620][   T13] usb 3-1: USB disconnect, device number 2
[  103.269062][ T4798] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  103.321875][ T4798] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  104.722367][ T4825] loop1: detected capacity change from 0 to 32768
[  105.122749][ T4834] mmap: syz.0.147 (4834) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  105.710290][ T4825] XFS (loop1): Mounting V5 Filesystem
[  105.791645][ T4825] XFS (loop1): Ending clean mount
[  106.431386][ T4182] XFS (loop1): Unmounting Filesystem
[  107.427471][ T4238] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  107.701885][ T4238] usb 4-1: Using ep0 maxpacket: 32
[  108.134554][ T4238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.136044][ T4864] ubi31: attaching mtd0
[  108.144847][ T4238] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  108.149921][ T4864] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66)
[  108.531815][ T4238] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  108.574313][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.621635][ T4238] usb 4-1: Product: syz
[  108.625827][ T4238] usb 4-1: Manufacturer: syz
[  108.660930][ T4238] usb 4-1: SerialNumber: syz
[  108.678292][ T4238] usb 4-1: config 0 descriptor??
[  109.103199][ T4238] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  109.218184][ T4529] udevd[4529]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  109.278418][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'.
[  109.801959][ T4889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.161'.
[  110.290496][   T13] usb 4-1: USB disconnect, device number 5
[  111.162587][ T4899] syz.2.166 (4899) used greatest stack depth: 16768 bytes left
[  111.552027][ T4909] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  113.471878][ T4931] binder: BINDER_SET_CONTEXT_MGR already set
[  113.478248][ T4931] binder: 4929:4931 ioctl 4018620d 200000000040 returned -16
[  113.487577][ T4931] binder: 4929:4931 ioctl c0306201 0 returned -14
[  116.165829][ T4947] tmpfs: Unknown parameter 'usrquota'
[  117.175146][ T4255] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  117.561702][ T4255] usb 2-1: config index 0 descriptor too short (expected 30768, got 18)
[  117.616827][ T4255] usb 2-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  117.701840][ T4255] usb 2-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  117.802490][ T4255] usb 2-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  117.879291][ T4255] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  117.918446][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.978401][ T4978] process 'syz.2.185' launched './file0' with NULL argv: empty string added
[  118.651873][ T4255] usb 2-1: language id specifier not provided by device, defaulting to English
[  118.887171][ T4255] usb 2-1: USB disconnect, device number 2
[  118.903365][   T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  119.135124][ T5024] loop2: detected capacity change from 0 to 1024
[  119.161633][   T13] usb 5-1: Using ep0 maxpacket: 8
[  119.281763][   T13] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  119.577298][   T13] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  120.109425][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.129654][   T13] usb 5-1: Product: syz
[  120.150916][   T13] usb 5-1: Manufacturer: syz
[  120.155939][   T13] usb 5-1: SerialNumber: syz
[  120.172222][   T13] usb 5-1: config 0 descriptor??
[  120.233531][   T13] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  120.242666][   T13] usb 5-1: setting power ON
[  120.247636][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  120.270056][   T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  120.349649][   T13] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  120.360192][   T13] usb 5-1: media controller created
[  120.380449][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.405438][   T13] usb 5-1: selecting invalid altsetting 6
[  120.412014][   T13] usb 5-1: digital interface selection failed (-22)
[  120.418650][   T13] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  121.498429][ T5008] dvb-usb: bulk message failed: -22 (3/0)
[  121.860160][ T4238] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  121.889058][ T5008] dvb-usb: bulk message failed: -22 (4/0)
[  121.895573][   T13] usb 5-1: setting power OFF
[  121.903891][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  121.911286][ T5008] cxusb: i2c read failed
[  121.915901][   T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  121.922356][ T5034] dvb-usb: bulk message failed: -22 (3/0)
[  121.932229][ T5034] cxusb: i2c rd: len=8192 is too big!
[  121.932229][ T5034] 
[  121.948339][   T13] (NULL device *): no alternate interface
[  122.948818][   T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  122.963742][ T4238] usb 2-1: Using ep0 maxpacket: 16
[  123.518045][   T13] usb 5-1: USB disconnect, device number 2
[  123.521941][ T4238] usb 2-1: unable to read config index 0 descriptor/start: -71
[  123.531441][ T4238] usb 2-1: can't read configurations, error -71
[  124.101673][   T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  124.741564][   T13] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  125.082639][   T13] usb 5-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config
[  125.093499][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  125.103454][   T13] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x79, skipping
[  125.321789][   T13] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  125.337765][   T13] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  125.351680][   T13] usb 5-1: Product: syz
[  125.356192][   T13] usb 5-1: Manufacturer: syz
[  126.142322][ T5048] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  126.162658][   T13] cdc_wdm 5-1:1.0: skipping garbage
[  126.167886][   T13] cdc_wdm 5-1:1.0: skipping garbage
[  126.208981][   T13] cdc_wdm: probe of 5-1:1.0 failed with error -22
[  126.711767][ T4272] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.031035][ T5111] binder: BINDER_SET_CONTEXT_MGR already set
[  127.037271][ T5111] binder: 5109:5111 ioctl 4018620d 200000000040 returned -16
[  127.277756][ T4272] usb 3-1: Using ep0 maxpacket: 16
[  127.401783][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.415059][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.431669][ T4272] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  127.443460][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.487261][    T7] usb 5-1: USB disconnect, device number 3
[  127.510424][ T4272] usb 3-1: config 0 descriptor??
[  128.440555][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'.
[  128.643607][ T4272] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  128.662197][ T4272] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  128.676211][ T4272] konepure 0003:1E7D:2DB4.0002: item fetching failed at offset 2/4
[  128.685119][ T4272] konepure 0003:1E7D:2DB4.0002: parse failed
[  128.691299][ T4272] konepure: probe of 0003:1E7D:2DB4.0002 failed with error -22
[  128.849855][ T4248] usb 3-1: USB disconnect, device number 3
[  128.867963][ T5130] netlink: 'syz.3.224': attribute type 5 has an invalid length.
[  128.946117][ T5130] device ip6erspan0 entered promiscuous mode
[  129.155821][ T5137] loop3: detected capacity change from 0 to 4096
[  129.241399][ T5137] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  129.252631][ T5137] ntfs3: loop3: Failed to load $Extend.
[  130.095102][ T3159] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  130.766192][ T3159] usb 1-1: Using ep0 maxpacket: 8
[  130.872326][ T5176] netlink: 7704 bytes leftover after parsing attributes in process `syz.2.235'.
[  131.136647][    T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  131.177271][    T7] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  131.531756][ T3159] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  132.137608][ T3159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.145912][ T3159] usb 1-1: Product: syz
[  132.150083][ T3159] usb 1-1: Manufacturer: syz
[  132.154819][ T3159] usb 1-1: SerialNumber: syz
[  132.190039][ T3159] usb 1-1: config 0 descriptor??
[  132.298641][ T5182] fido_id[5182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  132.415891][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.422316][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  132.451841][ T3159] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71
[  132.469826][ T3159] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  132.529427][ T3159] usb 1-1: USB disconnect, device number 3
[  133.416117][ T5206] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.460041][ T5206] device bond_slave_0 entered promiscuous mode
[  133.466456][ T5206] device bond_slave_1 entered promiscuous mode
[  133.551614][ T5206] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  133.728921][ T5206] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  133.761625][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  138.278074][ T5260] device veth0_to_team entered promiscuous mode
[  139.935919][ T5257] binder: BINDER_SET_CONTEXT_MGR already set
[  140.017246][ T5257] binder: 5254:5257 ioctl 4018620d 2000000000c0 returned -16
[  140.435700][ T5274] CUSE: unknown device info "€"
[  140.440603][ T5274] CUSE: zero length info key specified
[  140.458421][ T5281] loop1: detected capacity change from 0 to 128
[  141.931800][ T3159] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.201730][ T3159] usb 3-1: Using ep0 maxpacket: 8
[  142.791766][ T3159] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  142.961819][ T3159] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  143.001396][ T3159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.059251][ T3159] usb 3-1: Product: syz
[  143.100177][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'.
[  143.117883][ T3159] usb 3-1: Manufacturer: syz
[  143.142956][ T3159] usb 3-1: SerialNumber: syz
[  143.161295][ T3159] usb 3-1: config 0 descriptor??
[  143.243373][ T3159] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  143.283680][ T3159] usb 3-1: setting power ON
[  143.288213][ T3159] dvb-usb: bulk message failed: -22 (2/0)
[  143.472267][ T3159] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  144.211810][ T3159] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  144.220884][ T3159] usb 3-1: media controller created
[  144.705057][ T3159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.289617][ T3159] usb 3-1: selecting invalid altsetting 6
[  146.440709][ T3159] usb 3-1: digital interface selection failed (-22)
[  147.085436][ T3159] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  147.981698][ T3159] usb 3-1: setting power OFF
[  147.987371][ T3159] dvb-usb: bulk message failed: -22 (2/0)
[  148.014081][ T3159] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  148.023811][ T3159] (NULL device *): no alternate interface
[  148.094505][ T3159] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  148.209692][ T5353] fuse: Bad value for 'fd'
[  148.313041][ T3159] usb 3-1: USB disconnect, device number 4
[  149.158801][ T5361] netlink: 'syz.2.295': attribute type 10 has an invalid length.
[  149.274947][ T5361] 8021q: adding VLAN 0 to HW filter on device team0
[  149.314842][ T5361] bond0: (slave team0): Enslaving as an active interface with an up link
[  150.571636][ T4194] Bluetooth: hci4: SCO packet for unknown connection handle 0
[  150.756309][ T5394] loop0: detected capacity change from 0 to 256
[  152.358006][ T5394] exfat: Unknown parameter 'ÿÿÿÿ'
[  152.549925][ T5392] syz.0.303 uses obsolete (PF_INET,SOCK_PACKET)
[  152.957961][ T5412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.310'.
[  157.538914][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'.
[  157.689094][ T5470] loop0: detected capacity change from 0 to 256
[  157.738357][ T5470] =======================================================
[  157.738357][ T5470] WARNING: The mand mount option has been deprecated and
[  157.738357][ T5470]          and is ignored by this kernel. Remove the mand
[  157.738357][ T5470]          option from the mount to silence this warning.
[  157.738357][ T5470] =======================================================
[  157.773330][    C1] vkms_vblank_simulate: vblank timer overrun
[  160.923792][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  161.061868][   T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  161.289120][  T264] block nbd3: Attempted send on invalid socket
[  161.296395][  T264] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  161.308906][  T264] gfs2: error 10 reading superblock
[  161.621741][   T21] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  162.485085][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.493594][   T21] usb 5-1: Product: syz
[  162.497880][   T21] usb 5-1: Manufacturer: syz
[  162.518025][   T21] usb 5-1: SerialNumber: syz
[  162.520806][ T1109] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  162.565620][   T21] usb 5-1: config 0 descriptor??
[  162.629461][   T21] gspca_main: sq905c-2.14.0 probing 2770:9052
[  162.679569][ T1109] Bluetooth: hci2: Injecting HCI hardware error event
[  162.777950][ T4190] Bluetooth: hci2: hardware error 0x00
[  163.111648][   T21] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  163.121718][   T21] sq905c 5-1:0.0: Get version command failed
[  163.127781][   T21] sq905c: probe of 5-1:0.0 failed with error -71
[  163.149214][   T21] usb 5-1: USB disconnect, device number 4
[  165.588538][ T5553] tipc: Started in network mode
[  165.615280][ T5553] tipc: Node identity 0ec4fae2cffa, cluster identity 4711
[  165.701056][ T5553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.762516][ T5563] device syzkaller0 entered promiscuous mode
[  165.789303][ T5553] tipc: Resetting bearer <eth:syzkaller0>
[  165.832043][ T5552] tipc: Resetting bearer <eth:syzkaller0>
[  165.849336][ T5552] tipc: Disabling bearer <eth:syzkaller0>
[  165.860995][ T5566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'.
[  167.814435][ T4248] Bluetooth: hci5: command 0x1003 tx timeout
[  167.846518][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  167.864223][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.873741][ T5581] bond0: (slave rose0): Enslaving as an active interface with an up link
[  167.992487][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  169.941663][ T5523] Bluetooth: hci5: command 0x1001 tx timeout
[  169.948636][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  170.063229][ T5608] loop0: detected capacity change from 0 to 2048
[  170.110834][ T5608] NILFS (loop0): invalid segment: Magic number mismatch
[  170.158049][ T5608] NILFS (loop0): trying rollback from an earlier position
[  170.185175][ T5608] NILFS (loop0): recovery complete
[  170.201655][ T5618] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.606771][ T1109] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  170.623421][ T5620] crypto_alloc_aead failed rc=-2
[  170.629300][ T5523] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  170.991748][ T1109] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  171.006649][ T5635] loop4: detected capacity change from 0 to 1024
[  171.050084][ T1109] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  171.086744][ T1109] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  171.096119][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.145807][ T1109] usb 2-1: config 0 descriptor??
[  171.163423][ T5523] usb 3-1: Using ep0 maxpacket: 8
[  171.181960][ T5609] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.183344][ T5635] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.369: Invalid block bitmap block 0 in block_group 0
[  171.204192][ T1109] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  171.262825][ T5635] Quota error (device loop4): write_blk: dquota write failed
[  171.271141][ T5635] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  171.282785][ T5635] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.369: Failed to acquire dquot type 0
[  171.294794][ T5635] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.369: Freeing blocks not in datazone - block = 0, count = 4096
[  171.314942][ T5635] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.369: Invalid inode bitmap blk 0 in block_group 0
[  171.332066][ T5523] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.349983][ T5635] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  171.350395][  T454] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8)
[  171.376809][  T454] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0
[  171.376965][ T5635] EXT4-fs (loop4): 1 orphan inode deleted
[  171.417978][ T5635] EXT4-fs (loop4): mounted filesystem without journal. Opts: €�; nodiscard,grpid,,errors=continue. Quota mode: writeback.
[  171.541858][ T5523] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  171.604299][ T5523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.648261][ T5523] usb 3-1: Product: syz
[  171.661466][ T5523] usb 3-1: Manufacturer: syz
[  171.682444][ T5523] usb 3-1: SerialNumber: syz
[  171.716903][ T5523] usb 3-1: config 0 descriptor??
[  171.773576][ T5523] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  171.988093][ T5523] usb 3-1: USB disconnect, device number 5
[  172.702660][ T4248] Bluetooth: hci5: command 0x1009 tx timeout
[  173.347364][ T1109] usb 2-1: USB disconnect, device number 5
[  173.621314][ T5696] loop0: detected capacity change from 0 to 4096
[  173.637916][ T5696] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  173.662407][ T5696] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  173.766670][ T5698] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  173.768325][ T5697] IPVS: stopping backup sync thread 5698 ...
[  173.791631][ T1109] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  174.161753][ T1109] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  174.176351][ T1109] usb 2-1: config 0 interface 0 has no altsetting 0
[  174.263482][ T4241] kernel write not supported for file /sg0 (pid: 4241 comm: kworker/0:5)
[  175.276184][ T5713] loop4: detected capacity change from 0 to 2048
[  175.471959][ T1109] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  175.481011][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  175.543646][ T1109] usb 2-1: Product: syz
[  175.553144][ T1109] usb 2-1: Manufacturer: syz
[  175.568335][ T1109] usb 2-1: SerialNumber: syz
[  175.573761][ T5713] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  175.594178][ T5716] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.637098][ T1109] usb 2-1: config 0 descriptor??
[  175.704817][ T1109] usb 2-1: selecting invalid altsetting 0
[  176.627624][ T1109] usb 2-1: USB disconnect, device number 6
[  176.692203][ T5725] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  176.948255][ T5732] fuse: Bad value for 'fd'
[  177.154445][ T5732] loop2: detected capacity change from 0 to 40427
[  177.166584][ T4528] udevd[4528]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.203783][ T5732] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  177.212309][ T5732] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  177.221960][ T5732] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6
[  177.233665][ T5732] F2FS-fs (loop2): invalid crc value
[  177.270990][ T5732] F2FS-fs (loop2): Found nat_bits in checkpoint
[  177.308222][ T5732] F2FS-fs (loop2): Start checkpoint disabled!
[  177.321560][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'.
[  177.370111][ T5732] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  177.377412][ T5732] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  179.002528][ T5740] kvm [5739]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  179.088272][ T5740] kvm [5739]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  179.127687][ T5740] kvm [5739]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  179.204677][ T5723] loop4: detected capacity change from 0 to 32768
[  179.308307][   T26] audit: type=1326 audit(1758134359.794:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  179.352274][ T5723] gfs2: quota_quantum mount option requires a positive numeric argument
[  179.353427][   T26] audit: type=1326 audit(1758134359.794:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  179.439437][   T26] audit: type=1326 audit(1758134359.794:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5757 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  180.216957][ T5769] loop1: detected capacity change from 0 to 1024
[  180.287506][ T5769] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.406: Invalid block bitmap block 0 in block_group 0
[  180.338979][ T5769] Quota error (device loop1): write_blk: dquota write failed
[  180.348110][ T5769] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  180.358477][ T5769] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.406: Failed to acquire dquot type 0
[  180.381066][ T5769] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.406: Freeing blocks not in datazone - block = 0, count = 4096
[  180.399585][ T5769] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.406: Invalid inode bitmap blk 0 in block_group 0
[  180.412341][  T145] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8)
[  180.420917][  T145] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:2: Failed to release dquot type 0
[  180.446552][ T5769] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  180.467969][ T5769] EXT4-fs (loop1): 1 orphan inode deleted
[  180.521559][ T5769] EXT4-fs (loop1): mounted filesystem without journal. Opts: €�; nodiscard,grpid,,errors=continue. Quota mode: writeback.
[  180.582155][ T4238] Bluetooth: hci1: command 0x0406 tx timeout
[  180.588554][ T4241] Bluetooth: hci4: command 0x0406 tx timeout
[  180.618788][ T4238] Bluetooth: hci3: command 0x0406 tx timeout
[  180.624453][ T4241] Bluetooth: hci0: command 0x0406 tx timeout
[  182.036231][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'.
[  182.045245][ T5807] netlink: 26 bytes leftover after parsing attributes in process `syz.2.402'.
[  182.100012][ T5807] loop2: detected capacity change from 0 to 256
[  182.140072][ T5807] exfat: Unknown parameter 'keep_last_dots'
[  184.129064][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'.
[  184.254119][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'.
[  185.048855][ T5846] autofs4:pid:5846:autofs_fill_super: called with bogus options
[  185.411583][ T4238] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  185.771978][ T4238] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  185.786333][ T4238] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  185.982695][ T4238] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  185.994060][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.116873][ T4238] usb 2-1: invalid MIDI out EP 0
[  186.388325][ T4238] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[  186.581980][ T4241] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  187.686368][ T4200] udevd[4200]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.768852][ T4248] usb 2-1: USB disconnect, device number 7
[  188.466303][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'.
[  188.471676][ T4241] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  188.508727][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'.
[  188.518830][ T4241] usb 1-1: config 0 interface 0 has no altsetting 0
[  188.746002][ T4241] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  188.762166][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  188.801632][ T4241] usb 1-1: Product: syz
[  188.812576][ T4241] usb 1-1: Manufacturer: syz
[  188.817204][ T4241] usb 1-1: SerialNumber: syz
[  189.353628][ T4241] usb 1-1: config 0 descriptor??
[  189.401765][ T4241] usb 1-1: can't set config #0, error -71
[  189.547205][ T4241] usb 1-1: USB disconnect, device number 4
[  191.126053][ T5932] loop1: detected capacity change from 0 to 256
[  191.763555][ T5945] loop4: detected capacity change from 0 to 128
[  192.694097][ T4248] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  193.143224][ T4248] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  193.165061][ T4248] usb 4-1: config 0 interface 0 has no altsetting 0
[  193.461688][ T4248] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  193.481684][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  193.490196][ T4248] usb 4-1: Product: syz
[  193.499807][ T4248] usb 4-1: Manufacturer: syz
[  193.507311][ T4248] usb 4-1: SerialNumber: syz
[  193.862697][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  194.293552][ T4248] usb 4-1: config 0 descriptor??
[  194.312769][ T3159] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  194.475189][ T4248] usb 4-1: selecting invalid altsetting 0
[  194.714006][ T4248] usb 4-1: USB disconnect, device number 6
[  194.832094][ T3159] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  194.852566][ T3159] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  194.867676][ T3159] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  194.881612][ T3159] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.896799][ T3159] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  194.911679][ T3159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.952838][ T5728] udevd[5728]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.086717][ T3159] debugfs: Directory 'card3' with parent 'sound' already present!
[  195.122082][ T3159] usb 1-1: invalid MIDI out EP 0
[  195.140747][   T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  195.169495][   T13] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  195.561597][ T3159] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[  195.732226][ T3159] usb 1-1: USB disconnect, device number 5
[  196.165486][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.763377][ T5970] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  197.973655][ T5970] usb 5-1: Using ep0 maxpacket: 8
[  198.903089][ T5970] usb 5-1: unable to read config index 0 descriptor/start: -71
[  199.207666][ T5970] usb 5-1: can't read configurations, error -71
[  201.118074][ T6035] netlink: 'syz.4.479': attribute type 1 has an invalid length.
[  201.125771][ T6035] netlink: 'syz.4.479': attribute type 12 has an invalid length.
[  201.133531][ T6035] netlink: 224 bytes leftover after parsing attributes in process `syz.4.479'.
[  204.853032][ T6071] 8021q: VLANs not supported on hsr0
[  208.391599][ T4248] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  208.642248][ T4248] usb 5-1: Using ep0 maxpacket: 16
[  208.685018][ T6109] netlink: 'syz.0.503': attribute type 27 has an invalid length.
[  208.731595][ T6109] netlink: 164 bytes leftover after parsing attributes in process `syz.0.503'.
[  208.791844][ T4248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.990776][ T4248] usb 5-1: config 0 has no interfaces?
[  210.441446][ T4248] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  210.450822][ T4248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.479075][ T4248] usb 5-1: config 0 descriptor??
[  211.056824][ T6129] loop3: detected capacity change from 0 to 128
[  211.133032][ T6129] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  211.210065][ T6129] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  211.228950][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[  212.091520][ T6144] netlink: 52 bytes leftover after parsing attributes in process `syz.1.514'.
[  212.110359][ T6144] device sit0 left promiscuous mode
[  212.207027][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.219563][ T6144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.491584][ T4238] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  212.501926][ T4446] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  212.511554][    C1] raw-gadget.1 gadget: ignoring, device is not running
[  212.681624][ T4238] usb 2-1: device descriptor read/64, error -32
[  213.042212][ T4238] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  213.151568][ T1109] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  213.391711][ T1109] usb 4-1: Using ep0 maxpacket: 16
[  213.512267][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.560606][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.619484][ T1109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  213.683111][ T1109] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  213.726689][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.906066][ T1109] usb 4-1: config 0 descriptor??
[  214.041631][ T4248] usb 5-1: can't set config #0, error -71
[  214.050428][ T4248] usb 5-1: USB disconnect, device number 7
[  214.607753][ T6176] libceph: resolve '400' (ret=-3): failed
[  214.639780][ T1109] HID 045e:07da: Invalid code 65791 type 1
[  214.673586][ T1109] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input6
[  214.691683][ T4238] usb 2-1: unable to read config index 0 descriptor/start: -71
[  214.742471][ T4241] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  214.851782][ T4248] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  214.857834][ T1109] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  215.018431][ T4238] usb 2-1: can't read configurations, error -71
[  215.026429][ T4238] usb usb2-port1: attempt power cycle
[  215.268549][ T1109] usb 4-1: USB disconnect, device number 7
[  215.366381][ T4241] usb 3-1: Using ep0 maxpacket: 32
[  215.377650][ T6187] fido_id[6187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  215.436381][ T4248] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  215.448150][ T4248] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  215.462008][ T4248] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  215.471045][ T4248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.514009][ T4241] usb 3-1: config 0 has an invalid interface number: 106 but max is 1
[  215.516934][ T6169] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  215.523100][ T4241] usb 3-1: config 0 has no interface number 1
[  215.591648][ T5401] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  215.740327][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  215.807143][ T5401] usb 1-1: device descriptor read/64, error -71
[  216.096664][ T4241] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  216.110984][   T26] audit: type=1326 audit(1758134396.614:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  216.112784][ T4238] usb 5-1: USB disconnect, device number 8
[  216.151151][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  216.167251][   T26] audit: type=1326 audit(1758134396.654:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  216.171838][ T5401] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  216.197208][ T4241] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x10, skipping
[  216.218447][ T4241] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  216.236303][   T26] audit: type=1326 audit(1758134396.654:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  216.270526][ T4241] usb 3-1: config 0 interface 106 has no altsetting 0
[  216.326356][   T26] audit: type=1326 audit(1758134396.654:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  216.354928][   T26] audit: type=1326 audit(1758134396.654:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  216.391577][   T26] audit: type=1326 audit(1758134396.654:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  216.422600][   T26] audit: type=1326 audit(1758134396.654:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748d09ba9 code=0x7ffc0000
[  216.451744][ T4241] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=ee.ed
[  216.465565][   T26] audit: type=1326 audit(1758134396.654:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe748d0bac7 code=0x7ffc0000
[  216.466118][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.521713][ T5401] usb 1-1: device descriptor read/64, error -71
[  216.538143][ T4241] usb 3-1: Product: syz
[  216.541060][   T26] audit: type=1326 audit(1758134396.654:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe748d0ba3c code=0x7ffc0000
[  216.569426][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.591026][ T4241] usb 3-1: Manufacturer: syz
[  216.601180][ T4241] usb 3-1: SerialNumber: syz
[  216.615260][ T4241] usb 3-1: config 0 descriptor??
[  216.631423][   T26] audit: type=1326 audit(1758134396.654:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe748d0b974 code=0x7ffc0000
[  216.653702][ T5401] usb usb1-port1: attempt power cycle
[  216.913445][ T6174] udc-core: couldn't find an available UDC or it's busy
[  216.953296][ T6174] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  217.941554][ T5401] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  218.032183][ T4241] usb 3-1: ucan: probing device on interface #0
[  218.038461][ T4241] usb 3-1: ucan: invalid EP count (4)
[  218.181814][ T5401] usb 1-1: device not accepting address 8, error -71
[  218.566639][ T4241] usb 3-1: ucan: probe failed; try to update the device firmware
[  218.581106][ T6224] autofs4:pid:6224:autofs_fill_super: called with bogus options
[  218.611960][ T6223] netlink: 'syz.1.536': attribute type 10 has an invalid length.
[  218.656226][ T6223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.536'.
[  218.672705][ T6223] device team0 entered promiscuous mode
[  218.678700][ T6223] device team_slave_0 entered promiscuous mode
[  218.685257][ T4241] usb 3-1: USB disconnect, device number 6
[  218.702313][ T6223] device team_slave_1 entered promiscuous mode
[  218.723741][ T6223] bridge0: port 3(team0) entered blocking state
[  218.740543][ T6223] bridge0: port 3(team0) entered disabled state
[  219.000814][ T6237] exFAT-fs (nullb0): invalid boot record signature
[  219.011655][ T6237] exFAT-fs (nullb0): failed to read boot sector
[  219.019877][ T6237] exFAT-fs (nullb0): failed to recognize exfat type
[  219.221685][ T6223] bridge0: port 3(team0) entered blocking state
[  219.228311][ T6223] bridge0: port 3(team0) entered forwarding state
[  219.546014][ T6245] loop1: detected capacity change from 0 to 1024
[  219.592551][ T6245] EXT4-fs (loop1): Ignoring removed bh option
[  219.634818][ T6245] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  224.269696][ T6295] autofs4:pid:6295:autofs_fill_super: called with bogus options
[  226.943889][ T6329] loop1: detected capacity change from 0 to 512
[  227.454058][ T6329] EXT4-fs (loop1): orphan cleanup on readonly fs
[  227.479837][ T6338] loop2: detected capacity change from 0 to 128
[  227.505890][ T6329] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.567: bg 0: block 248: padding at end of block bitmap is not set
[  227.751731][ T6329] __quota_error: 26 callbacks suppressed
[  227.751748][ T6329] Quota error (device loop1): write_blk: dquota write failed
[  227.841947][ T6329] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  227.944177][ T6329] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.567: Failed to acquire dquot type 1
[  228.452385][ T6329] EXT4-fs (loop1): 1 truncate cleaned up
[  228.510837][ T6329] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  229.192746][ T6357] netlink: 'syz.3.576': attribute type 10 has an invalid length.
[  229.271595][ T4241] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  229.312605][ T6357] team0: Port device dummy0 added
[  230.201635][ T4241] usb 2-1: unable to read config index 0 descriptor/start: -71
[  230.230963][ T4241] usb 2-1: can't read configurations, error -71
[  234.806593][ T6434] overlayfs: unrecognized mount option "uuid=null" or missing value
[  237.108196][   T26] audit: type=1804 audit(1758134417.614:41): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.600" name="/newroot/131/bus/file0" dev="overlay" ino=731 res=1 errno=0
[  238.078893][ T6462] netlink: 'syz.1.603': attribute type 4 has an invalid length.
[  242.346468][ T4481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.455584][ T4481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.589363][ T4481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.982287][ T4481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.781932][ T3159] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  244.202094][ T3159] usb 4-1: config index 0 descriptor too short (expected 30768, got 18)
[  244.210621][ T4481] tipc: Left network mode
[  244.227863][ T3159] usb 4-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  244.261989][ T3159] usb 4-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  244.302565][ T3159] usb 4-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  244.478452][ T3159] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  244.501541][ T3159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.972672][ T5523] Bluetooth: hci2: command 0x0409 tx timeout
[  245.594712][ T6498] chnl_net:caif_netlink_parms(): no params data found
[  246.394018][ T3159] usb 4-1: language id specifier not provided by device, defaulting to English
[  246.638694][ T3159] usb 4-1: USB disconnect, device number 8
[  246.675909][ T6562] fuse: Bad value for 'fd'
[  246.693681][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.709831][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.740059][ T6498] device bridge_slave_0 entered promiscuous mode
[  246.747960][ T6564] nfs: Unknown parameter '/dev/ubi_ctrl'
[  246.843704][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.873846][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.909079][ T6498] device bridge_slave_1 entered promiscuous mode
[  247.051621][ T1325] Bluetooth: hci2: command 0x041b tx timeout
[  249.098222][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.131675][ T1325] Bluetooth: hci2: command 0x040f tx timeout
[  249.138643][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'.
[  249.155830][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.775422][ T6498] team0: Port device team_slave_0 added
[  249.814019][ T6498] team0: Port device team_slave_1 added
[  249.965349][ T6601] loop3: detected capacity change from 0 to 1024
[  250.073539][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.080511][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.189796][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.211038][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.218215][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.251297][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.374546][ T6498] device hsr_slave_0 entered promiscuous mode
[  250.393930][ T6498] device hsr_slave_1 entered promiscuous mode
[  250.407095][ T6498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.799512][ T6498] Cannot create hsr debugfs directory
[  251.903744][ T6612] comedi comedi0: rti800: I/O port conflict (0x109,16)
[  252.364696][ T6614] overlayfs: workdir and upperdir must be separate subtrees
[  252.373808][ T1325] Bluetooth: hci2: command 0x0419 tx timeout
[  252.520365][ T4481] device hsr_slave_0 left promiscuous mode
[  252.593749][ T4481] device hsr_slave_1 left promiscuous mode
[  252.628171][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.654629][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.727323][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.839928][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.848677][ T4481] device bridge_slave_1 left promiscuous mode
[  252.866565][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.965518][ T4481] device bridge_slave_0 left promiscuous mode
[  252.972280][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.121435][ T4481] device veth1_macvtap left promiscuous mode
[  254.135321][ T4481] device veth0_macvtap left promiscuous mode
[  254.150415][ T4481] device veth1_vlan left promiscuous mode
[  254.201686][ T4481] device veth0_vlan left promiscuous mode
[  255.293658][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  255.833846][ T1325] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  255.895765][ T1325] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  256.169082][ T4481] team0 (unregistering): Port device team_slave_1 removed
[  256.257002][ T4481] team0 (unregistering): Port device team_slave_0 removed
[  256.336215][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.382795][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.591190][ T4481] bond0 (unregistering): Released all slaves
[  256.651007][ T6660] loop1: detected capacity change from 0 to 1024
[  258.102101][ T6684] device bridge0 entered promiscuous mode
[  258.147921][ T6684] bridge0: port 3(macsec1) entered blocking state
[  258.361703][ T6684] bridge0: port 3(macsec1) entered disabled state
[  258.565293][ T6684] device bridge0 left promiscuous mode
[  258.632625][ T6498] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  258.793129][ T6498] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  259.082958][ T6498] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  259.149537][ T6498] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  259.644464][ T6716] netlink: 'syz.3.669': attribute type 10 has an invalid length.
[  260.203533][ T6716] team0: Port device dummy0 removed
[  260.219782][ T6716] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  260.476870][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.488479][ T6498] 8021q: adding VLAN 0 to HW filter on device team0
[  260.492085][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  260.492687][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  260.493117][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  260.495550][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  260.495875][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.495918][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.496573][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  260.509929][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  260.510522][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  260.511073][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.511113][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.608177][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  260.608889][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  260.609903][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  260.616875][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  260.618122][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  260.632112][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  260.632778][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  260.665177][ T6498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  260.665196][ T6498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.668200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  260.668669][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.669587][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.670102][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.670566][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  260.848889][ T6738] usb usb1: usbfs: process 6738 (syz.1.673) did not claim interface 0 before use
[  261.434817][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  261.434945][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  261.441090][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.053483][ T6763] loop3: detected capacity change from 0 to 1024
[  262.621876][ T6762] netlink: 'syz.4.677': attribute type 15 has an invalid length.
[  263.094276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  263.132243][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  263.375103][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  263.658127][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  263.844492][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  263.924754][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.015505][ T6498] device veth0_vlan entered promiscuous mode
[  264.057426][ T6498] device veth1_vlan entered promiscuous mode
[  264.119434][ T6797] loop4: detected capacity change from 0 to 128
[  264.159577][ T6788] netlink: 'syz.2.684': attribute type 10 has an invalid length.
[  264.184936][ T6788] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  264.196497][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  264.219004][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'.
[  264.236155][ T6797] EXT4-fs (loop4): Test dummy encryption mode enabled
[  264.244819][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  264.303647][ T6498] device veth0_macvtap entered promiscuous mode
[  264.363559][ T6498] device veth1_macvtap entered promiscuous mode
[  264.387800][ T6797] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none.
[  264.420896][ T6797] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  264.503934][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.638148][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.674876][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.961095][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.045452][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.120687][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.189447][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.221072][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.234353][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.249517][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.273171][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.283512][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.303725][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.358094][ T6498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.502271][ T6498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.517729][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.528458][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  265.906338][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  265.945815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  265.966600][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  266.022429][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  266.152138][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  266.912400][ T6498] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.991503][ T6498] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.000528][ T6498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.081501][ T6498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.379991][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.411677][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.435618][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  267.484239][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.507193][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.570570][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  268.609298][ T6886] syz.1.708[6886] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  268.609391][ T6886] syz.1.708[6886] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  270.004837][ T6922] device ip6tnl1 entered promiscuous mode
[  272.228048][ T6954] loop4: detected capacity change from 0 to 1764
[  273.378302][ T6950] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  273.385061][ T6950] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  273.393523][ T6950] vhci_hcd vhci_hcd.0: Device attached
[  273.470603][ T6951] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  273.478320][ T6958] vhci_hcd: connection closed
[  273.480460][ T4310] vhci_hcd: stop threads
[  273.590622][ T4310] vhci_hcd: release socket
[  273.644030][ T4310] vhci_hcd: disconnect device
[  278.638635][ T7056] loop1: detected capacity change from 0 to 256
[  281.266365][ T7091] sched: RT throttling activated
[  283.499348][   T26] audit: type=1326 audit(1758134464.004:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.2.767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f268455cba9 code=0x0
[  285.369593][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'.
[  286.224132][ T7150] ODEBUG: Out of memory. ODEBUG disabled
[  286.242243][ T7147] binder: 7146:7147 ioctl c018620c 200000000280 returned -22
[  287.931639][ T7150] syz.1.777 (7150): drop_caches: 2
[  288.171644][ T1325] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  289.297460][ T1325] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  289.344072][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.389533][ T1325] usb 5-1: config 0 descriptor??
[  289.423867][ T7220] netlink: 44 bytes leftover after parsing attributes in process `syz.2.793'.
[  289.433788][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.441971][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.475392][ T1325] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  290.596782][ T7249] 9pnet: Insufficient options for proto=fd
[  291.202753][ T1325] usb 5-1: USB disconnect, device number 9
[  291.837553][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'.
[  295.668597][ T7325] tmpfs: Unknown parameter 'usrquota'
[  296.459510][ T7313] loop3: detected capacity change from 0 to 1024
[  297.161699][ T1109] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  297.170904][ T7344] futex_wake_op: syz.3.832 tries to shift op by -1; fix this program
[  297.370718][ T4238] libceph: connect (1)[c::]:6789 error -101
[  297.380338][ T4238] libceph: mon0 (1)[c::]:6789 connect error
[  297.610028][ T7361] ceph: No mds server is up or the cluster is laggy
[  297.632813][ T1109] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  297.654541][ T1109] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  297.688011][ T1109] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  297.701510][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.734014][ T1109] usb 6-1: config 0 descriptor??
[  297.827485][ T1109] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  299.880757][ T4248] usb 6-1: USB disconnect, device number 2
[  299.888386][ T7406] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  310.411520][ T1109] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  311.321671][ T1109] usb 4-1: config 5 has an invalid interface number: 3 but max is 0
[  311.906443][ T4336] Bluetooth: hci4: command 0x0409 tx timeout
[  311.963117][ T1109] usb 4-1: config 5 has no interface number 0
[  312.202905][ T1109] usb 4-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36
[  312.202987][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.203061][ T1109] usb 4-1: Product: syz
[  312.203128][ T1109] usb 4-1: Manufacturer: syz
[  312.203196][ T1109] usb 4-1: SerialNumber: syz
[  313.071606][ T1109] usb 4-1: can't set config #5, error -71
[  313.075954][ T1109] usb 4-1: USB disconnect, device number 9
[  313.831619][ T1109] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  314.493078][ T7701] capability: warning: `syz.1.916' uses 32-bit capabilities (legacy support in use)
[  315.061616][ T1109] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  315.442547][ T1109] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  315.559236][ T7721] netlink: 64 bytes leftover after parsing attributes in process `syz.5.920'.
[  315.635075][ T1109] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  315.644956][ T1109] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  315.656241][ T1109] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  315.831898][ T1109] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  315.877256][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  315.895587][ T1109] usb 4-1: Product: syz
[  315.904023][ T1109] usb 4-1: Manufacturer: syz
[  316.135760][ T1109] cdc_wdm 4-1:1.0: skipping garbage
[  316.141197][ T1109] cdc_wdm 4-1:1.0: skipping garbage
[  316.624122][ T1109] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  316.950032][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  316.999902][ T1109] cdc_wdm 4-1:1.0: Unknown control protocol
[  317.032917][ T1109] usb 4-1: USB disconnect, device number 10
[  318.095562][ T7764] netlink: 'syz.3.932': attribute type 1 has an invalid length.
[  318.103314][ T7764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.932'.
[  320.935218][ T7811] fuse: Bad value for 'fd'
[  323.395476][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.402727][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.577183][ T7800] device bond_slave_0 left promiscuous mode
[  323.583813][ T7800] device bond_slave_1 left promiscuous mode
[  325.915149][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.991872][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.242935][ T7874] fuse: Bad value for 'fd'
[  327.472742][ T7800] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.483450][ T7800] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.492964][ T7800] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.501928][ T7800] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.688846][ T7800] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  327.697981][ T7800] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  327.706893][ T7800] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  327.715804][ T7800] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.948209][ T7922] loop4: detected capacity change from 0 to 128
[  329.611560][ T3159] Bluetooth: hci0: command 0x0401 tx timeout
[  330.188909][ T7942] tmpfs: Bad value for 'mpol'
[  330.708647][ T7941] overlayfs: failed to clone upperpath
[  330.773671][ T7944] netlink: 'syz.1.990': attribute type 10 has an invalid length.
[  330.842287][ T7944] device veth1_macvtap left promiscuous mode
[  331.691572][ T3159] Bluetooth: hci0: command 0x0c1a tx timeout
[  331.961151][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'.
[  332.041039][ T7989] syz.3.999 sent an empty control message without MSG_MORE.
[  332.688391][ T7990] overlayfs: failed to clone upperpath
[  333.131692][ T3159] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  333.381706][ T3159] usb 4-1: Using ep0 maxpacket: 16
[  333.820080][ T3159] usb 4-1: config 0 has an invalid interface number: 236 but max is 0
[  334.674558][ T3159] usb 4-1: config 0 has no interface number 0
[  334.680769][ T3159] usb 4-1: config 0 interface 236 has no altsetting 0
[  334.903319][ T3159] usb 4-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=64.ac
[  334.940453][ T3159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.952785][ T3159] usb 4-1: Product: syz
[  334.956966][ T3159] usb 4-1: Manufacturer: syz
[  334.964842][ T3159] usb 4-1: SerialNumber: syz
[  335.394036][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'.
[  335.403534][ T8035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1019'.
[  335.416065][ T8035] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.424811][ T8035] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.433669][ T8035] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.442509][ T8035] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  335.453790][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'.
[  335.462864][ T8035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1019'.
[  336.062069][ T3159] usb 4-1: config 0 descriptor??
[  336.131773][ T3159] usb 4-1: can't set config #0, error -71
[  336.141921][ T3159] usb 4-1: USB disconnect, device number 11
[  336.266598][ T8050] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  337.090194][ T8052] netlink: 'syz.4.1020': attribute type 4 has an invalid length.
[  338.637598][ T8079] fuse: Bad value for 'fd'
[  341.137324][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'.
[  341.146396][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'.
[  341.157313][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'.
[  341.166321][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'.
[  341.892660][ T8093] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  342.125578][ T8109] 
[  342.127919][ T8109] ======================================================
[  342.134917][ T8109] WARNING: possible circular locking dependency detected
[  342.141921][ T8109] syzkaller #0 Not tainted
[  342.146314][ T8109] ------------------------------------------------------
[  342.153319][ T8109] syz.4.1036/8109 is trying to acquire lock:
[  342.159279][ T8109] ffff88801a398c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  342.170302][ T8109] 
[  342.170302][ T8109] but task is already holding lock:
[  342.177647][ T8109] ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  342.187284][ T8109] 
[  342.187284][ T8109] which lock already depends on the new lock.
[  342.187284][ T8109] 
[  342.197665][ T8109] 
[  342.197665][ T8109] the existing dependency chain (in reverse order) is:
[  342.206747][ T8109] 
[  342.206747][ T8109] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  342.214725][ T8109]        __mutex_lock_common+0x1eb/0x2390
[  342.220430][ T8109]        mutex_lock_nested+0x17/0x20
[  342.225701][ T8109]        rfkill_register+0x33/0x8a0
[  342.230888][ T8109]        hci_register_dev+0x452/0x970
[  342.236251][ T8109]        vhci_create_device+0x32c/0x5c0
[  342.241778][ T8109]        vhci_write+0x391/0x450
[  342.246632][ T8109]        vfs_write+0x712/0xd00
[  342.251379][ T8109]        ksys_write+0x14d/0x250
[  342.256244][ T8109]        do_syscall_64+0x4c/0xa0
[  342.261169][ T8109]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.267596][ T8109] 
[  342.267596][ T8109] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  342.275392][ T8109]        __mutex_lock_common+0x1eb/0x2390
[  342.281099][ T8109]        mutex_lock_nested+0x17/0x20
[  342.286372][ T8109]        vhci_send_frame+0x88/0x100
[  342.291659][ T8109]        hci_send_frame+0x1a9/0x2e0
[  342.296850][ T8109]        hci_tx_work+0x9f9/0x1710
[  342.301858][ T8109]        process_one_work+0x863/0x1000
[  342.307312][ T8109]        worker_thread+0xaa8/0x12a0
[  342.312495][ T8109]        kthread+0x436/0x520
[  342.317086][ T8109]        ret_from_fork+0x1f/0x30
[  342.322013][ T8109] 
[  342.322013][ T8109] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  342.331203][ T8109]        __flush_work+0xdd/0x1b0
[  342.336129][ T8109]        hci_dev_do_open+0xc58/0x1270
[  342.341494][ T8109]        hci_power_on+0x1c1/0x610
[  342.346527][ T8109]        process_one_work+0x863/0x1000
[  342.351968][ T8109]        worker_thread+0xaa8/0x12a0
[  342.357150][ T8109]        kthread+0x436/0x520
[  342.361725][ T8109]        ret_from_fork+0x1f/0x30
[  342.366652][ T8109] 
[  342.366652][ T8109] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  342.374275][ T8109]        __mutex_lock_common+0x1eb/0x2390
[  342.379979][ T8109]        mutex_lock_nested+0x17/0x20
[  342.385246][ T8109]        bg_scan_update+0x44/0x3b0
[  342.390348][ T8109]        process_one_work+0x863/0x1000
[  342.395791][ T8109]        worker_thread+0xaa8/0x12a0
[  342.400983][ T8109]        kthread+0x436/0x520
[  342.405562][ T8109]        ret_from_fork+0x1f/0x30
[  342.410485][ T8109] 
[  342.410485][ T8109] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  342.420281][ T8109]        __lock_acquire+0x2c33/0x7c60
[  342.425642][ T8109]        lock_acquire+0x197/0x3f0
[  342.430650][ T8109]        __flush_work+0xdd/0x1b0
[  342.435607][ T8109]        __cancel_work_timer+0x3ac/0x520
[  342.441226][ T8109]        hci_request_cancel_all+0xcc/0x300
[  342.447028][ T8109]        hci_dev_do_close+0x4e/0x1030
[  342.452384][ T8109]        hci_rfkill_set_block+0x10a/0x190
[  342.458107][ T8109]        rfkill_set_block+0x1c6/0x420
[  342.463480][ T8109]        rfkill_fop_write+0x458/0x560
[  342.468849][ T8109]        vfs_write+0x300/0xd00
[  342.473608][ T8109]        ksys_write+0x14d/0x250
[  342.478439][ T8109]        do_syscall_64+0x4c/0xa0
[  342.483359][ T8109]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.489757][ T8109] 
[  342.489757][ T8109] other info that might help us debug this:
[  342.489757][ T8109] 
[  342.499968][ T8109] Chain exists of:
[  342.499968][ T8109]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  342.499968][ T8109] 
[  342.515672][ T8109]  Possible unsafe locking scenario:
[  342.515672][ T8109] 
[  342.523100][ T8109]        CPU0                    CPU1
[  342.528445][ T8109]        ----                    ----
[  342.533788][ T8109]   lock(rfkill_global_mutex);
[  342.538535][ T8109]                                lock(&data->open_mutex);
[  342.545625][ T8109]                                lock(rfkill_global_mutex);
[  342.552890][ T8109]   lock((work_completion)(&hdev->bg_scan_update));
[  342.559456][ T8109] 
[  342.559456][ T8109]  *** DEADLOCK ***
[  342.559456][ T8109] 
[  342.567594][ T8109] 1 lock held by syz.4.1036/8109:
[  342.572597][ T8109]  #0: ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  342.582670][ T8109] 
[  342.582670][ T8109] stack backtrace:
[  342.588536][ T8109] CPU: 1 PID: 8109 Comm: syz.4.1036 Not tainted syzkaller #0
[  342.595882][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  342.605924][ T8109] Call Trace:
[  342.609185][ T8109]  <TASK>
[  342.612098][ T8109]  dump_stack_lvl+0x168/0x230
[  342.616760][ T8109]  ? load_image+0x3b0/0x3b0
[  342.621245][ T8109]  ? show_regs_print_info+0x20/0x20
[  342.626436][ T8109]  ? print_circular_bug+0x12b/0x1a0
[  342.631619][ T8109]  check_noncircular+0x274/0x310
[  342.636561][ T8109]  ? add_chain_block+0x940/0x940
[  342.641493][ T8109]  ? lockdep_lock+0xdc/0x1e0
[  342.646088][ T8109]  ? __lock_acquire+0x12d9/0x7c60
[  342.651116][ T8109]  ? lockdep_lock+0x1e0/0x1e0
[  342.655784][ T8109]  ? mark_lock+0x94/0x320
[  342.660096][ T8109]  __lock_acquire+0x2c33/0x7c60
[  342.664937][ T8109]  ? verify_lock_unused+0x140/0x140
[  342.670123][ T8109]  lock_acquire+0x197/0x3f0
[  342.674610][ T8109]  ? __flush_work+0xc1/0x1b0
[  342.679181][ T8109]  ? __lock_acquire+0x7c60/0x7c60
[  342.684199][ T8109]  ? read_lock_is_recursive+0x10/0x10
[  342.689556][ T8109]  ? start_flush_work+0x776/0x820
[  342.694565][ T8109]  __flush_work+0xdd/0x1b0
[  342.698963][ T8109]  ? __flush_work+0xc1/0x1b0
[  342.703536][ T8109]  ? flush_work+0x20/0x20
[  342.707844][ T8109]  ? try_to_grab_pending+0xf3/0x7e0
[  342.713024][ T8109]  ? lockdep_hardirqs_off+0x70/0x100
[  342.718296][ T8109]  ? mark_lock+0x94/0x320
[  342.722616][ T8109]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  342.728582][ T8109]  ? lock_chain_count+0x20/0x20
[  342.733415][ T8109]  ? mark_lock+0x94/0x320
[  342.737749][ T8109]  ? __cancel_work_timer+0x331/0x520
[  342.743021][ T8109]  __cancel_work_timer+0x3ac/0x520
[  342.748118][ T8109]  ? cancel_work_sync+0x20/0x20
[  342.752953][ T8109]  ? __cancel_work+0x1f4/0x2d0
[  342.757698][ T8109]  ? lockdep_hardirqs_on+0x94/0x140
[  342.762879][ T8109]  ? __cancel_work+0x26f/0x2d0
[  342.767624][ T8109]  ? cancel_work+0x20/0x20
[  342.772023][ T8109]  ? lock_chain_count+0x20/0x20
[  342.776860][ T8109]  hci_request_cancel_all+0xcc/0x300
[  342.782131][ T8109]  hci_dev_do_close+0x4e/0x1030
[  342.786965][ T8109]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  342.792865][ T8109]  ? _raw_spin_unlock+0x40/0x40
[  342.797700][ T8109]  hci_rfkill_set_block+0x10a/0x190
[  342.802881][ T8109]  ? rcu_lock_release+0x20/0x20
[  342.807715][ T8109]  rfkill_set_block+0x1c6/0x420
[  342.812552][ T8109]  rfkill_fop_write+0x458/0x560
[  342.817388][ T8109]  ? rfkill_fop_read+0x4b0/0x4b0
[  342.822311][ T8109]  ? common_file_perm+0xc0/0x1c0
[  342.827233][ T8109]  ? fsnotify_perm+0x5d/0x560
[  342.831893][ T8109]  ? security_file_permission+0x75/0xa0
[  342.837420][ T8109]  ? rfkill_fop_read+0x4b0/0x4b0
[  342.842341][ T8109]  vfs_write+0x300/0xd00
[  342.846571][ T8109]  ? file_end_write+0x250/0x250
[  342.851411][ T8109]  ? __fget_files+0x40f/0x480
[  342.856096][ T8109]  ? __fdget_pos+0x1e2/0x370
[  342.860675][ T8109]  ? ksys_write+0x71/0x250
[  342.865079][ T8109]  ksys_write+0x14d/0x250
[  342.869389][ T8109]  ? __ia32_sys_read+0x80/0x80
[  342.874133][ T8109]  ? lockdep_hardirqs_on+0x94/0x140
[  342.879318][ T8109]  do_syscall_64+0x4c/0xa0
[  342.883716][ T8109]  ? clear_bhb_loop+0x30/0x80
[  342.888375][ T8109]  ? clear_bhb_loop+0x30/0x80
[  342.893035][ T8109]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.898919][ T8109] RIP: 0033:0x7f8c3a988ba9
[  342.903318][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.922905][ T8109] RSP: 002b:00007f8c38bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  342.931305][ T8109] RAX: ffffffffffffffda RBX: 00007f8c3abcffa0 RCX: 00007f8c3a988ba9
[  342.939265][ T8109] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000004
[  342.947219][ T8109] RBP: 00007f8c3aa0be19 R08: 0000000000000000 R09: 0000000000000000
[  342.955172][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.963125][ T8109] R13: 00007f8c3abd0038 R14: 00007f8c3abcffa0 R15: 00007fff0d8925e8
[  342.971092][ T8109]  </TASK>
[  343.401494][ T5401] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  343.651556][ T5401] usb 5-1: Using ep0 maxpacket: 8
[  343.931995][ T5401] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  343.941075][ T5401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.949111][ T5401] usb 5-1: Product: syz
[  343.953284][ T5401] usb 5-1: Manufacturer: syz
[  343.957859][ T5401] usb 5-1: SerialNumber: syz
[  343.964585][ T5401] usb 5-1: config 0 descriptor??
[  344.221538][ T5401] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  344.701563][ T5401] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  344.710422][ T5401] usb 5-1: USB disconnect, device number 10
[  347.462068][    C1] ==================================================================
[  347.470244][    C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490
[  347.477697][    C1] Read of size 2 at addr ffff88806129842a by task swapper/1/0
[  347.485153][    C1] 
[  347.487466][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  347.494472][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  347.504516][    C1] Call Trace:
[  347.507804][    C1]  <IRQ>
[  347.510665][    C1]  dump_stack_lvl+0x168/0x230
[  347.515347][    C1]  ? show_regs_print_info+0x20/0x20
[  347.520533][    C1]  ? _printk+0xcc/0x110
[  347.524678][    C1]  ? rose_timer_expiry+0x470/0x490
[  347.529777][    C1]  ? load_image+0x3b0/0x3b0
[  347.534270][    C1]  ? rcu_is_watching+0x11/0xa0
[  347.539038][    C1]  ? lock_acquire+0xcd/0x3f0
[  347.543615][    C1]  print_address_description+0x60/0x2d0
[  347.549153][    C1]  ? rose_timer_expiry+0x470/0x490
[  347.554253][    C1]  kasan_report+0xdf/0x130
[  347.558662][    C1]  ? rose_timer_expiry+0x470/0x490
[  347.563758][    C1]  rose_timer_expiry+0x470/0x490
[  347.568685][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  347.573697][    C1]  call_timer_fn+0x16c/0x530
[  347.578281][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  347.583311][    C1]  ? do_raw_spin_lock+0x11d/0x280
[  347.588338][    C1]  ? __run_timers+0x7c0/0x7c0
[  347.593005][    C1]  ? rcu_is_watching+0x11/0xa0
[  347.597758][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  347.602775][    C1]  __run_timers+0x525/0x7c0
[  347.607281][    C1]  ? detach_timer+0x2b0/0x2b0
[  347.611951][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  347.617134][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  347.621970][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  347.627255][    C1]  run_timer_softirq+0x63/0xf0
[  347.632003][    C1]  handle_softirqs+0x328/0x820
[  347.636756][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  347.641603][    C1]  ? do_softirq+0x200/0x200
[  347.646115][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  347.651299][    C1]  __irq_exit_rcu+0x12f/0x220
[  347.655968][    C1]  ? irq_exit_rcu+0x20/0x20
[  347.660463][    C1]  irq_exit_rcu+0x5/0x20
[  347.664703][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  347.670322][    C1]  </IRQ>
[  347.673240][    C1]  <TASK>
[  347.676154][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  347.682126][    C1] RIP: 0010:default_idle+0xb/0x10
[  347.687159][    C1] Code: bf 48 89 df e8 86 f5 09 f8 eb b5 e8 3f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d f7 83 53 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  347.706751][    C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2
[  347.712808][    C1] RAX: e109688606359800 RBX: ffff88813fe38000 RCX: 000000000033af18
[  347.720770][    C1] RDX: 0000000000000001 RSI: ffffffff8a59a460 RDI: ffffffff89b24290
[  347.728736][    C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed1017227662
[  347.736693][    C1] R10: ffffed1017227662 R11: 1ffff11017227661 R12: ffffffff8d6991e8
[  347.744648][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc7000
[  347.752607][    C1]  ? default_idle_call+0x70/0xc0
[  347.757532][    C1]  default_idle_call+0x81/0xc0
[  347.762287][    C1]  do_idle+0x21b/0x5b0
[  347.766358][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  347.771543][    C1]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  347.777193][    C1]  cpu_startup_entry+0x14/0x20
[  347.781948][    C1]  start_secondary+0x31f/0x430
[  347.786717][    C1]  ? arch_scale_freq_tick+0x120/0x120
[  347.792091][    C1]  secondary_startup_64_no_verify+0xb1/0xbb
[  347.797989][    C1]  </TASK>
[  347.800999][    C1] 
[  347.803324][    C1] Allocated by task 6498:
[  347.807672][    C1]  __kasan_kmalloc+0xb5/0xf0
[  347.812262][    C1]  __alloc_skb+0x22c/0x750
[  347.816670][    C1]  __netdev_alloc_skb+0x103/0x4a0
[  347.821688][    C1]  __ieee80211_beacon_get+0xa73/0x1f80
[  347.827170][    C1]  ieee80211_beacon_get_tim+0x48/0x840
[  347.832618][    C1]  mac80211_hwsim_beacon_tx+0xf4/0x920
[  347.838093][    C1]  __iterate_interfaces+0x243/0x500
[  347.843286][    C1]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  347.850316][    C1]  mac80211_hwsim_beacon+0x9b/0x180
[  347.855505][    C1]  __hrtimer_run_queues+0x53d/0xc40
[  347.860698][    C1]  hrtimer_run_softirq+0x176/0x240
[  347.865817][    C1]  handle_softirqs+0x328/0x820
[  347.870572][    C1]  __irq_exit_rcu+0x12f/0x220
[  347.875240][    C1]  irq_exit_rcu+0x5/0x20
[  347.879477][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  347.885102][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  347.891073][    C1] 
[  347.893389][    C1] Freed by task 6498:
[  347.897368][    C1]  kasan_set_track+0x4b/0x70
[  347.901965][    C1]  kasan_set_free_info+0x1f/0x40
[  347.906906][    C1]  ____kasan_slab_free+0xd5/0x110
[  347.911913][    C1]  slab_free_freelist_hook+0xea/0x170
[  347.917268][    C1]  kfree+0xef/0x2a0
[  347.921057][    C1]  skb_release_data+0x6fe/0x850
[  347.925895][    C1]  consume_skb+0xa2/0x100
[  347.930208][    C1]  mac80211_hwsim_beacon_tx+0x4f3/0x920
[  347.935738][    C1]  __iterate_interfaces+0x243/0x500
[  347.940922][    C1]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  347.947934][    C1]  mac80211_hwsim_beacon+0x9b/0x180
[  347.953230][    C1]  __hrtimer_run_queues+0x53d/0xc40
[  347.958412][    C1]  hrtimer_run_softirq+0x176/0x240
[  347.963514][    C1]  handle_softirqs+0x328/0x820
[  347.968273][    C1]  __irq_exit_rcu+0x12f/0x220
[  347.972936][    C1]  irq_exit_rcu+0x5/0x20
[  347.977169][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  347.982787][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  347.988767][    C1] 
[  347.991078][    C1] The buggy address belongs to the object at ffff888061298400
[  347.991078][    C1]  which belongs to the cache kmalloc-512 of size 512
[  348.005116][    C1] The buggy address is located 42 bytes inside of
[  348.005116][    C1]  512-byte region [ffff888061298400, ffff888061298600)
[  348.018285][    C1] The buggy address belongs to the page:
[  348.023894][    C1] page:ffffea000184a600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61298
[  348.034110][    C1] head:ffffea000184a600 order:2 compound_mapcount:0 compound_pincount:0
[  348.042418][    C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  348.050400][    C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80
[  348.058966][    C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  348.067528][    C1] page dumped because: kasan: bad access detected
[  348.073940][    C1] page_owner tracks the page as allocated
[  348.079648][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4183, ts 55948493812, free_ts 14627012860
[  348.098726][    C1]  get_page_from_freelist+0x1b77/0x1c60
[  348.104271][    C1]  __alloc_pages+0x1e1/0x470
[  348.108862][    C1]  new_slab+0xc0/0x4b0
[  348.112911][    C1]  ___slab_alloc+0x81e/0xdf0
[  348.117589][    C1]  __kmalloc+0x1cd/0x330
[  348.121828][    C1]  __register_sysctl_table+0xa1f/0x1230
[  348.127393][    C1]  __devinet_sysctl_register+0x2c1/0x380
[  348.133010][    C1]  devinet_sysctl_register+0x17c/0x1f0
[  348.138452][    C1]  inetdev_init+0x28c/0x4d0
[  348.142937][    C1]  inetdev_event+0x280/0x1360
[  348.147615][    C1]  raw_notifier_call_chain+0xcb/0x160
[  348.152978][    C1]  register_netdevice+0x1275/0x16b0
[  348.158158][    C1]  veth_newlink+0x8ed/0xda0
[  348.162649][    C1]  rtnl_newlink+0x114c/0x17d0
[  348.167327][    C1]  rtnetlink_rcv_msg+0x9b9/0xe60
[  348.172269][    C1]  netlink_rcv_skb+0x1e0/0x430
[  348.177041][    C1] page last free stack trace:
[  348.181717][    C1]  free_unref_page_prepare+0x637/0x6c0
[  348.187202][    C1]  free_unref_page+0x94/0x280
[  348.191883][    C1]  free_contig_range+0x96/0xf0
[  348.196653][    C1]  destroy_args+0x100/0xa20
[  348.201168][    C1]  debug_vm_pgtable+0x318/0x370
[  348.206030][    C1]  do_one_initcall+0x1ee/0x680
[  348.210799][    C1]  do_initcall_level+0x137/0x1f0
[  348.215726][    C1]  do_initcalls+0x4b/0x90
[  348.220038][    C1]  kernel_init_freeable+0x3ce/0x560
[  348.225219][    C1]  kernel_init+0x19/0x1b0
[  348.229540][    C1]  ret_from_fork+0x1f/0x30
[  348.233945][    C1] 
[  348.236257][    C1] Memory state around the buggy address:
[  348.241868][    C1]  ffff888061298300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  348.249915][    C1]  ffff888061298380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  348.257957][    C1] >ffff888061298400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.266005][    C1]                                   ^
[  348.271362][    C1]  ffff888061298480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.279426][    C1]  ffff888061298500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.287465][    C1] ==================================================================
[  348.295537][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  348.302732][    C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G    B             syzkaller #0
[  348.311147][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  348.321206][    C1] Call Trace:
[  348.324475][    C1]  <IRQ>
[  348.327302][    C1]  dump_stack_lvl+0x168/0x230
[  348.331971][    C1]  ? show_regs_print_info+0x20/0x20
[  348.337179][    C1]  ? load_image+0x3b0/0x3b0
[  348.341677][    C1]  panic+0x2c9/0x7f0
[  348.345579][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  348.350068][    C1]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[  348.355944][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  348.361924][    C1]  ? _raw_spin_unlock+0x40/0x40
[  348.366775][    C1]  ? print_memory_metadata+0x314/0x400
[  348.372228][    C1]  ? rose_timer_expiry+0x470/0x490
[  348.377343][    C1]  check_panic_on_warn+0x80/0xa0
[  348.382288][    C1]  ? rose_timer_expiry+0x470/0x490
[  348.387389][    C1]  end_report+0x6d/0xf0
[  348.391542][    C1]  kasan_report+0x102/0x130
[  348.396060][    C1]  ? rose_timer_expiry+0x470/0x490
[  348.401161][    C1]  rose_timer_expiry+0x470/0x490
[  348.406091][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  348.411103][    C1]  call_timer_fn+0x16c/0x530
[  348.415685][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  348.420698][    C1]  ? do_raw_spin_lock+0x11d/0x280
[  348.425714][    C1]  ? __run_timers+0x7c0/0x7c0
[  348.430384][    C1]  ? rcu_is_watching+0x11/0xa0
[  348.435132][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  348.440142][    C1]  __run_timers+0x525/0x7c0
[  348.444634][    C1]  ? detach_timer+0x2b0/0x2b0
[  348.449294][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  348.454472][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  348.459307][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  348.464577][    C1]  run_timer_softirq+0x63/0xf0
[  348.469324][    C1]  handle_softirqs+0x328/0x820
[  348.474072][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  348.478905][    C1]  ? do_softirq+0x200/0x200
[  348.483389][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  348.488582][    C1]  __irq_exit_rcu+0x12f/0x220
[  348.493248][    C1]  ? irq_exit_rcu+0x20/0x20
[  348.497756][    C1]  irq_exit_rcu+0x5/0x20
[  348.501989][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  348.507604][    C1]  </IRQ>
[  348.510519][    C1]  <TASK>
[  348.513442][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  348.519423][    C1] RIP: 0010:default_idle+0xb/0x10
[  348.524450][    C1] Code: bf 48 89 df e8 86 f5 09 f8 eb b5 e8 3f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d f7 83 53 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  348.544038][    C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2
[  348.550085][    C1] RAX: e109688606359800 RBX: ffff88813fe38000 RCX: 000000000033af18
[  348.558041][    C1] RDX: 0000000000000001 RSI: ffffffff8a59a460 RDI: ffffffff89b24290
[  348.566103][    C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed1017227662
[  348.574060][    C1] R10: ffffed1017227662 R11: 1ffff11017227661 R12: ffffffff8d6991e8
[  348.582021][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc7000
[  348.589985][    C1]  ? default_idle_call+0x70/0xc0
[  348.595019][    C1]  default_idle_call+0x81/0xc0
[  348.599770][    C1]  do_idle+0x21b/0x5b0
[  348.603824][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  348.609004][    C1]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  348.614626][    C1]  cpu_startup_entry+0x14/0x20
[  348.619375][    C1]  start_secondary+0x31f/0x430
[  348.624143][    C1]  ? arch_scale_freq_tick+0x120/0x120
[  348.629507][    C1]  secondary_startup_64_no_verify+0xb1/0xbb
[  348.635402][    C1]  </TASK>
[  348.638697][    C1] Kernel Offset: disabled
[  348.643025][    C1] Rebooting in 86400 seconds..