last executing test programs:

12.184566202s ago: executing program 2 (id=31):
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802020900"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x5a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x0, 0x800)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8841)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x6000, 0x2000001, 0x13, r3, 0x33a0e000)
preadv2(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x7, 0x4, 0x1)

11.828387647s ago: executing program 2 (id=32):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x87, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c8634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}})
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.902568964s ago: executing program 4 (id=39):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6(0xa, 0x3, 0x3)
syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

8.711850729s ago: executing program 2 (id=44):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.737081047s ago: executing program 1 (id=47):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce)

7.730409918s ago: executing program 2 (id=48):
syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80d00, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x600)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={'\x00', 0x200, 0x6, 0x1, 0x4, 0x0, "000000000000000000002ff7b03900", "00108000", "fe710001", "dd00", ["c2fffedbff00ffdfffffffff", "60ed852aeb3d139c12f42ebd", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffeb4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4)
r1 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={<r3=>0x0}, &(0x7f00000001c0)=0x8)
keyctl$revoke(0x3, r1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r5 = syz_io_uring_setup(0x5d92, 0x0, 0x0, 0x0, &(0x7f0000000000))
r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102", @ANYRESDEC, @ANYRES8=r3, @ANYBLOB="f418cd349f9ccdd9a016bdb211de09c58bdf2699da9a849d1904a70d571e86e4505105de0ca21e3e5719f91cc7d44ffdfdbafe64af6755cef8c85f000f4090493fc365d1237b6bf0455b318608e201603bd074aa570df9c90277b17d801e7a9c9f635c35931f4dd89be20467491357936c9ba7176b471b59f29fdc78548abf840efdd73239ece6b45148dffa2fbe8b02afc7645ac0d9724e20cfbea9f4124d73cfc7c3326fdc22467e90f86ec2168fd32bf4a7ef0c1eaf7f43206aed2e87e43896c69d5d3f1ebd805853d8aad6c88d", @ANYRES16], 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f00000002c0)=[{r5, 0x8000}, {0xffffffffffffffff, 0x8000}, {r0, 0x64e0}, {r7, 0x1200}, {0xffffffffffffffff, 0x80}], 0x5, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x3f00000000000000)

7.357318827s ago: executing program 1 (id=49):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x40)

7.137188004s ago: executing program 4 (id=50):
r0 = syz_open_dev$cec(0x0, 0x0, 0x600)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
keyctl$revoke(0x3, r1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_io_uring_setup(0x5d92, 0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x3f00000000000000)

7.136133704s ago: executing program 1 (id=60):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x6f, 0x10080, 0xfffffffe, 0x83f2, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xcf4, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67ab, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x1ff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x19, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x8000, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x24400}, 0x4004051)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0xdddd1000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.01441217s ago: executing program 3 (id=52):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x24000009)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

6.985543416s ago: executing program 1 (id=53):
r0 = socket(0x1a, 0x80000, 0x10000000000002)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe)
connect$rxrpc(r0, &(0x7f0000000780)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840)=<r2=>0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f000000000800008264c6877142581482c0a3c2a06100ecffffff08fa1724", @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600001018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001100)={0x2c, &(0x7f0000000d40)={0x20, 0x30, 0x20, {0x20, 0xa, "c9ede508b5c7e1553f1ac6582a1bca8c0ead37bfcb47b4634f3c1dd58b47"}}, &(0x7f0000000d80)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "0c1d705cd8e95b3f78a3ed4cc71ef4c885b8a4450b3ccaf5caab4eab8e14f321795bf8122fcc99f252606ac38099024a5636994eeecdef6b577835a4a8ae744dbfedcfe4200f57fca0ac7d58bc41fdd6af93cca37c5b035ad30c5f7ea0f4f5311ad42381946e18a1dd1079ab841f09a561803d1c274a1f29d2bd4af226a8e9a27f41ad3eacfdfbfd111f867587de35109be98988c26f335ae4a3f7640fb742d3f3a4d7fc11285aa55312825324e7969617bc6436445afd3354d06e3c5dce30fcf9b61fcf7113a556fda385591342667add337ae20b6d02f211d3bb97e3dd1048c90c1e17a98549bca175ac7775492c13"}}, &(0x7f0000000e80)={0x0, 0xf, 0x15f, {0x5, 0xf, 0x15f, 0x4, [@generic={0x69, 0x10, 0xb, "aac7e26dfc75e68fe8d5028e5d220395c0196002561f8800f83c97a03651ed1754def28e1ec3503be86dd8448aac87b1b483902852759e4f80a106a21b9d167d53d826fd59c222251f972bc3c256d7948246577f3e284463e5bcd2953db99bf7b527c0ed3c7b"}, @generic={0xdf, 0x10, 0x1, "779d0c9e6e833230d402df9d3ad4a3dcdb3676d0187a920514d02de03f00f956abf4055cd6eace30fe8f585abc685850be5d6729b637982830487b1233a7585ffd649ba05887dd4e440ebdfc860207da8c5c845f2a4b9b65f35d6a7059b88e92fd07667d4b83cbc2986e664d519e998c45ef33cadd6a47fa31bee62a242a8b98f1440e2571613d6cb60aabf7bfadc45374f09b012ebf243575828981baec7dad7991828712929267786e37a4b7cebec1f9df48efe3c623105a0fe26744a7598c7bb40ec1e8d022937d5207a435e3708b52374717f53f9da0221144c2"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x80, 0x5, 0x7}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5d, 0x8, 0x6, 0xa9, "16853090", "e37c4152"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x78, 0x3, 0x5, 0x7, 0x0, 0x7fff, 0x7}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x40, 0x4, 0x58, "100295406c3844e6db977eb1e3b467ca1fb09d5f833c7b6c69d4ec0cf994662a9e0e4764cccad90e40b8d90dc6aa94789cf96b56c46bc770a0d698de0bcb3ce2bd6f7f6ad6f125f6e8583b5ee7136e7d976f85cdc62cf725"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x2b}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x6}, 0x0, &(0x7f0000001340)={0x40, 0xb, 0x2, "d28e"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x101}, 0x0, &(0x7f0000001400)={0x40, 0x17, 0x6, @random="cde351f2d16b"}, &(0x7f0000001440)={0x40, 0x19, 0x2, "e157"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x2}, 0x0})
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
syz_usb_connect$uac3(0x4, 0x12b, &(0x7f0000000a00)=ANY=[@ANYRES32=r2], &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x7, 0x4, 0x40, 0xf}, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}]})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1})
syz_io_uring_setup(0x17, &(0x7f0000000140)={0x0, 0xb9c4, 0x21000, 0x3, 0x361}, 0x0, 0x0, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x40, 0x21, 0x47, {0x47, 0x20, "c790968a4b7e242d68252076bc5caef354fde8b7ded9ae0505d3bde7005e540c2cee5668e76c7ad54b5e6fca17bb860837226ce6478554d9855f2a392d8c5c1f3a1ec1d525"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="40186100000016c081fb9a30b046119bfe8a5f905d48ec2c374516a2dfd5d95eb3a327b621a00bebb3ba6e66f07c45d63b69e0c0b9c979876f8b017c7e4534d9323a3e292ac97290c58a991ee8b5edcdd180635073544f15a1b65697821be7257768968da0d54202123694427a6c843f37d86a21e788b5665d6628f53656bcd578c2905109709c135e3e3f3fd78705f8fc0a7bcd6da50710a90f1ce434c367c9cf0fa3b0775b41530000b36f12355d4b570003f73c02257317deb40bfac6cc078e1411fa0e843a23cdb3218a7348cf7c5750931dc3d55518b5"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xdb71}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, 0x0})

6.40087187s ago: executing program 3 (id=54):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$eJzs3M9vVNUeAPDvnWlLCzzax+OhIJgKGok/WlpQWbhA48KFJia6wGVtCyIDNbQmQBopxuDSkLhzYVyaGP8Ad26MujAmbjUxrgwJ0W4ormrunXvLdDotTGk72Pl8kumcc8+ZnnPuPWfm3HvmTgBtqz/9k0Rsj4hfIqK3Gl2cob/6NDc7PXprdno0ifn51/9Msnw3Z6dHi6zF67blkUOliNKHSRxPlpY7efHSmZFKZfx8FuuJwamz7w5OXrz09OmzI6fGT42fGz527OiRoeeeHX5mTdqZtuvm3vcn9u15+c1rr46euPbW91+m1dq9v5pe2447utWgQQ30p3vtr/lMfdpjTdT9/vf7V7WxpKN1NaE55YhID1dnNv57oxy3D15vfPpBSysHrKv0s2nL8skz88AmlkSrawC0RvFBn57/Fo8NmnrcF268ENGVh+dmp0fnFtrfEaV8e+c6lt8fESdm/v4sfUSz1yEAAFYhm9s8FbEl6ud/pdidPVfXOnbkayh9EfHfiNgZEf+LiF0R8f+ILO8DEfFg9cXzvXdZfn9dfOn8p3S9YZ3XSDr/e75m7jdX0/78qa+cx/6Ttb8zOXm6Mn443yeHonNLGh9aoYxvXvr54+XSaud/6SMtv5gL5hW43lF3gW5sZGpkrXbCjSsRezsatT9ZWAlIe8CeiNjb3L/eUQROP/HFvuUy3bn9K1iDdab5zyMerx7/mahrfyENrbA+OdgdlfHDg0WvWOqHn66+tlz599T+NXDjwEPVwO3jX5ejpqNVKuPnJ5sv4+qvHy17TrPa/t+VvJGtWf/4dnXbhZGpqfNDEV3JK1m8OKfLtg/ffu2FkameNF7kT/v/oYONx//O/DXp8U/3UtqJ90fEw/m2tO6PRMSBiDi4Qvu/e/HRd1ZofxJJtO74X4kYa/j+t9D/+5La9fpVBMpnvv16uRXzuzv+R2Mme6+tyt7/7qBBLYqURUn3sOsAAADgX6MUEdsjKQ1Uw/3bo1QaGKh+h39XbC1VJiannjw58d65seo9An3RWSqudPXWXA8dSmby/5jFLw/n14qL9CP5deNPyj1ZfGB0ojLW4rZDu9u2ePxHMf5Tf5RbXTtg3blfC9pX/fgvNcjTtUF1ATZWNv63rpzHuQBsTos//7sj+0UOoC04/4f21Wj8X66Lm//D5rR0/P/W4CfrgM3I/B/al/EP7cv4h7bUzO38cXy5pO6IaOZnAYqbBe669Ly2Mwtbuhvc4b/GgZhZ9yJWGSg3Siq+oLWepffEpTNd+ZYorWdLi9+mbJBUbrKzbYpAOmI2tlBf+QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaHfwIAAP//jo/XvA==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80, 0xc2)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380))

5.095962417s ago: executing program 3 (id=57):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x87, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c8634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}})
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.012070235s ago: executing program 0 (id=58):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

4.826017365s ago: executing program 0 (id=59):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce)

4.590055565s ago: executing program 0 (id=61):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x40)

4.517829731s ago: executing program 0 (id=62):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlockall(0x7)

3.448015588s ago: executing program 2 (id=63):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000940)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10c)
fallocate(r2, 0x11, 0x0, 0x6)

3.447076988s ago: executing program 0 (id=73):
syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80d00, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x600)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={'\x00', 0x200, 0x6, 0x1, 0x4, 0x0, "000000000000000000002ff7b03900", "00108000", "fe710001", "dd00", ["c2fffedbff00ffdfffffffff", "60ed852aeb3d139c12f42ebd", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffeb4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4)
r1 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={<r3=>0x0}, &(0x7f00000001c0)=0x8)
keyctl$revoke(0x3, r1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r5 = syz_io_uring_setup(0x5d92, 0x0, 0x0, 0x0, &(0x7f0000000000))
r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102", @ANYRESDEC, @ANYRES8=r3, @ANYBLOB="f418cd349f9ccdd9a016bdb211de09c58bdf2699da9a849d1904a70d571e86e4505105de0ca21e3e5719f91cc7d44ffdfdbafe64af6755cef8c85f000f4090493fc365d1237b6bf0455b318608e201603bd074aa570df9c90277b17d801e7a9c9f635c35931f4dd89be20467491357936c9ba7176b471b59f29fdc78548abf840efdd73239ece6b45148dffa2fbe8b02afc7645ac0d9724e20cfbea9f4124d73cfc7c3326fdc22467e90f86ec2168fd32bf4a7ef0c1eaf7f43206aed2e87e43896c69d5d3f1ebd805853d8aad6c88d", @ANYRES16], 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f00000002c0)=[{r5, 0x8000}, {0xffffffffffffffff, 0x8000}, {r0, 0x64e0}, {r7, 0x1200}, {0xffffffffffffffff, 0x80}], 0x5, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x3f00000000000000)

3.417654494s ago: executing program 4 (id=64):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x6f, 0x10080, 0xfffffffe, 0x83f2, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xcf4, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67ab, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x1ff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x19, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x8000, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x24400}, 0x4004051)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0xdddd1000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.207485039s ago: executing program 4 (id=65):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.622182823s ago: executing program 4 (id=66):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55)
fcntl$setlease(r2, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0xc2)
futimesat(r3, &(0x7f00000004c0)='./file0\x00', 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
stat(0x0, &(0x7f0000000380))

1.451963842s ago: executing program 1 (id=67):
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802020900"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x5a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x0, 0x800)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8841)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x6000, 0x2000001, 0x13, r3, 0x33a0e000)
preadv2(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x7, 0x4, 0x1)

1.395519084s ago: executing program 4 (id=68):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000940)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10c)
fallocate(r2, 0x11, 0x0, 0x6)

1.394632654s ago: executing program 3 (id=79):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55)
fcntl$setlease(r2, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0xc2)
futimesat(r3, &(0x7f00000004c0)='./file0\x00', 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
stat(&(0x7f0000000340)='./file0\x00', 0x0)

785.799864ms ago: executing program 2 (id=69):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80, 0xc2)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380))

219.417104ms ago: executing program 3 (id=70):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab", 0x71, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}})

187.600351ms ago: executing program 1 (id=71):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce)

41.204132ms ago: executing program 3 (id=72):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x40)

0s ago: executing program 0 (id=74):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts.
[   60.511287][ T4176] cgroup: Unknown subsys name 'net'
[   60.672809][ T4176] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   62.141870][ T4176] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   63.592494][ T4203] chnl_net:caif_netlink_parms(): no params data found
[   63.603220][ T4198] chnl_net:caif_netlink_parms(): no params data found
[   63.653578][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   63.703252][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   63.789896][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.797674][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.805707][ T4203] device bridge_slave_0 entered promiscuous mode
[   63.818303][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.825356][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.836107][ T4198] device bridge_slave_0 entered promiscuous mode
[   63.852741][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   63.861934][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.869320][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.877484][ T4203] device bridge_slave_1 entered promiscuous mode
[   63.891583][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.898702][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.906598][ T4198] device bridge_slave_1 entered promiscuous mode
[   63.958356][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.975197][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.990583][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.997824][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.005603][ T4190] device bridge_slave_0 entered promiscuous mode
[   64.013249][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.020696][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.028871][ T4189] device bridge_slave_0 entered promiscuous mode
[   64.037988][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.055852][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.070675][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.078080][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.086111][ T4190] device bridge_slave_1 entered promiscuous mode
[   64.093253][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.100354][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.108572][ T4189] device bridge_slave_1 entered promiscuous mode
[   64.129293][ T4203] team0: Port device team_slave_0 added
[   64.165557][ T4203] team0: Port device team_slave_1 added
[   64.190593][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.202194][ T4198] team0: Port device team_slave_0 added
[   64.210164][ T4198] team0: Port device team_slave_1 added
[   64.230269][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.248131][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.258873][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.292277][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.302600][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.310991][ T4188] device bridge_slave_0 entered promiscuous mode
[   64.319328][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.326399][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.334743][ T4188] device bridge_slave_1 entered promiscuous mode
[   64.342592][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.349687][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.375856][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.395273][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.402353][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.428434][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.441719][ T4190] team0: Port device team_slave_0 added
[   64.455117][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.462127][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.488540][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.510893][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.518407][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.544648][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.562318][ T4190] team0: Port device team_slave_1 added
[   64.576429][ T4189] team0: Port device team_slave_0 added
[   64.584698][ T4189] team0: Port device team_slave_1 added
[   64.606423][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.650039][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.671484][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.678525][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.705122][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.722998][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.730200][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.756385][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.770089][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.780224][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.806297][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.824055][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.832026][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.858056][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.874319][ T4198] device hsr_slave_0 entered promiscuous mode
[   64.881357][ T4198] device hsr_slave_1 entered promiscuous mode
[   64.891087][ T4203] device hsr_slave_0 entered promiscuous mode
[   64.898055][ T4203] device hsr_slave_1 entered promiscuous mode
[   64.905341][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.913182][ T4203] Cannot create hsr debugfs directory
[   64.924779][ T4188] team0: Port device team_slave_0 added
[   64.971291][ T4188] team0: Port device team_slave_1 added
[   65.042144][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.049391][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.075761][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.090255][ T4190] device hsr_slave_0 entered promiscuous mode
[   65.097800][ T4190] device hsr_slave_1 entered promiscuous mode
[   65.104543][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.112262][ T4190] Cannot create hsr debugfs directory
[   65.135795][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.142866][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.168830][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.184205][ T4189] device hsr_slave_0 entered promiscuous mode
[   65.191142][ T4189] device hsr_slave_1 entered promiscuous mode
[   65.197946][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.205502][ T4189] Cannot create hsr debugfs directory
[   65.291214][ T4188] device hsr_slave_0 entered promiscuous mode
[   65.297974][ T4188] device hsr_slave_1 entered promiscuous mode
[   65.304442][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.312177][ T4188] Cannot create hsr debugfs directory
[   65.327910][ T2287] Bluetooth: hci0: command 0x0409 tx timeout
[   65.334514][ T2287] Bluetooth: hci3: command 0x0409 tx timeout
[   65.336995][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[   65.346769][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[   65.355288][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   65.537084][ T4203] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.547784][ T4203] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.557485][ T4203] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.574256][ T4203] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.624884][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.646009][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   65.665521][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.674556][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.711868][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.734661][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.744137][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.770959][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.805857][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.823866][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.836141][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.846506][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.861614][ T4203] 8021q: adding VLAN 0 to HW filter on device team0
[   65.877792][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.886629][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.897308][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.908690][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.918945][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.928316][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.935553][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.966325][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.990716][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.001189][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.009899][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.017018][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.050713][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.064877][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.074339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.087085][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.110326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.120423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.129981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.139839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.148607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.157366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.165653][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.186008][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.195528][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.218248][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.229735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.256378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.264453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.272907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.282940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.294175][ T4198] 8021q: adding VLAN 0 to HW filter on device team0
[   66.303831][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.313859][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.322313][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.345972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.359612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.372957][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.380168][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.415384][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   66.427307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.435344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.444327][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.454847][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.461971][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.471337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.480556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.489536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.498702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.509136][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.521637][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.531502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.546252][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.555561][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.565342][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.572433][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.583291][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.592065][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.602073][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.609202][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.621636][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.642166][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.673999][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.684902][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.701609][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.713317][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.725703][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.734409][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.746474][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.756058][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.767272][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.786256][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   66.808326][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.817833][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.825648][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.835239][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.844695][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.855655][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.864521][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.873434][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.882719][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.909574][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.925966][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.937574][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.945042][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.954703][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.964673][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.973537][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.980675][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.989763][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.000659][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.009528][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.016592][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.032582][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.040776][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.049773][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.059346][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.070231][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.079994][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.114465][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.126304][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.155768][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.181551][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.200733][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.219405][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.229009][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.237926][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.246212][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.266399][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.275393][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.289351][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.306655][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.315175][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.353410][ T4203] device veth0_vlan entered promiscuous mode
[   67.361813][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   67.377972][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.395424][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.403940][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.416503][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.419043][ T4234] Bluetooth: hci3: command 0x041b tx timeout
[   67.442197][ T4203] device veth1_vlan entered promiscuous mode
[   67.449074][ T4234] Bluetooth: hci4: command 0x041b tx timeout
[   67.458578][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.467377][ T4234] Bluetooth: hci1: command 0x041b tx timeout
[   67.482016][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.489886][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[   67.494374][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.496183][ T4234] Bluetooth: hci0: command 0x041b tx timeout
[   67.519873][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.528808][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.535881][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.544170][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.573324][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.583510][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.592836][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.611278][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.618408][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.626510][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.634235][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.643424][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.654239][ T1283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.703177][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.723100][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.748578][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.770951][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.780305][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.789437][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.798021][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.806337][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.816103][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.829043][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.840865][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.855636][ T4203] device veth0_macvtap entered promiscuous mode
[   67.863018][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.874180][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.901697][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.910473][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.925011][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.934500][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.959663][ T4203] device veth1_macvtap entered promiscuous mode
[   67.987652][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.997416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.004888][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.016388][ T4189] device veth0_vlan entered promiscuous mode
[   68.049528][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.059998][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.076053][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.091261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.100850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.111719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.120086][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.132583][ T4189] device veth1_vlan entered promiscuous mode
[   68.162012][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.170392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.184319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.193592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.205343][ T4198] device veth0_vlan entered promiscuous mode
[   68.229215][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.241183][ T4189] device veth0_macvtap entered promiscuous mode
[   68.253839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.262117][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.270290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.280776][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.291489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.300838][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.310135][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.319040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.342467][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.353106][ T4189] device veth1_macvtap entered promiscuous mode
[   68.368315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.377352][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.385337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.395214][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.405046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.413164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.424968][ T4198] device veth1_vlan entered promiscuous mode
[   68.434373][ T4203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.446473][ T4203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.455460][ T4203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.465167][ T4203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.489076][ T4188] device veth0_vlan entered promiscuous mode
[   68.498414][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.505515][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.514067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.524045][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.533239][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.541551][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.579223][ T4188] device veth1_vlan entered promiscuous mode
[   68.591961][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.603342][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.616844][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.644317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.654828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.669436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.678116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.686621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.697710][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.706422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.718784][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.730196][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.741377][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.754261][ T4198] device veth0_macvtap entered promiscuous mode
[   68.766615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.779108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.808069][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.817496][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.826246][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.835382][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.861798][ T4198] device veth1_macvtap entered promiscuous mode
[   68.869591][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.878679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.909420][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.935716][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.946174][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.971365][ T4190] device veth0_vlan entered promiscuous mode
[   68.987946][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.997270][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.005915][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.016409][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.027260][ T4188] device veth0_macvtap entered promiscuous mode
[   69.036132][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.047211][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.058244][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.068843][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.080640][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.095551][ T4190] device veth1_vlan entered promiscuous mode
[   69.100576][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.112869][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.122694][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.134360][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.142572][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.150467][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.159022][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.168376][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.177144][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.188415][ T4188] device veth1_macvtap entered promiscuous mode
[   69.202774][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.214087][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.224277][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.235533][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.246627][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.274601][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.286477][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.297260][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.308461][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.318778][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.329920][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.341537][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.351819][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.364463][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.375879][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.386758][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.396591][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.409097][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.421028][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.429780][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.438346][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.447324][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.456053][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.465131][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.476522][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.486064][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.495051][ T4234] Bluetooth: hci1: command 0x040f tx timeout
[   69.501935][ T4234] Bluetooth: hci4: command 0x040f tx timeout
[   69.516046][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.529525][ T4234] Bluetooth: hci3: command 0x040f tx timeout
[   69.535622][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.548233][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.558741][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.573164][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.583337][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.586558][ T4262] Bluetooth: hci0: command 0x040f tx timeout
[   69.593788][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.608071][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.612770][ T4262] Bluetooth: hci2: command 0x040f tx timeout
[   69.628857][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.638112][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.692143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.702863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.742441][ T4190] device veth0_macvtap entered promiscuous mode
[   69.752986][ T4190] device veth1_macvtap entered promiscuous mode
[   69.764268][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.766018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.781575][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.789566][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.797975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.806121][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.815423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.850588][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.862786][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.879845][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.899242][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.910933][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.921747][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.931649][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.942162][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.954094][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.976090][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.996559][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.040150][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.057273][ T4262] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.075157][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.086507][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.098455][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.108754][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.121749][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.132301][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.143235][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.154849][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.166493][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.177266][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.197876][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.211986][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.221478][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.236157][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.290997][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.300470][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.308116][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.308133][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.347103][ T4262] usb 3-1: Using ep0 maxpacket: 8
[   70.348839][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.360892][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.410809][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.427186][ T2287] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.436667][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.455792][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.471697][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.480747][ T4262] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   70.490587][ T4262] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   70.500937][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.509076][ T4262] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   70.519560][ T4262] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   70.534961][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.543170][ T4262] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   70.557162][ T4262] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   70.566456][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.595775][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.617079][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.629196][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.667031][ T2287] usb 2-1: Using ep0 maxpacket: 16
[   70.677344][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.707056][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.782083][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.787577][ T2287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.799779][ T2287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   70.908051][ T4262] usb 3-1: GET_CAPABILITIES returned 0
[   70.913813][ T4262] usbtmc 3-1:16.0: can't read capabilities
[   70.968092][ T2287] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   70.983755][ T2287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.993504][ T2287] usb 2-1: Product: syz
[   71.002608][ T2287] usb 2-1: Manufacturer: syz
[   71.010045][ T2287] usb 2-1: SerialNumber: syz
[   71.084430][ T4280] syz.4.6 uses obsolete (PF_INET,SOCK_PACKET)
[   71.097750][ T4280] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.115102][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.121693][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.186815][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.196946][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.206053][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.215108][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.224173][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.233252][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.242318][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.251444][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.260547][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.269642][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.278732][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.287824][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.296930][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.306044][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.315135][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   71.324299][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[   71.436358][ T4268] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   71.450285][   T21] usb 3-1: USB disconnect, device number 2
[   71.567334][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   71.578248][ T4231] Bluetooth: hci4: command 0x0419 tx timeout
[   71.585173][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   71.597193][ T2287] usb 2-1: 0:2 : does not exist
[   71.603981][ T4287] loop0: detected capacity change from 0 to 512
[   71.646075][ T2287] usb 2-1: USB disconnect, device number 2
[   71.657632][ T4262] Bluetooth: hci2: command 0x0419 tx timeout
[   71.673413][ T4262] Bluetooth: hci0: command 0x0419 tx timeout
[   71.684509][ T4287] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   71.697291][ T4268] usb 4-1: Using ep0 maxpacket: 16
[   71.711182][ T4287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   71.737323][ T4287] System zones: 1-12
[   71.770899][ T4287] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.7: Bad quota inum: 2934046720, type: 1
[   71.797236][ T4287] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   71.817008][ T4268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   71.830757][ T4287] EXT4-fs (loop0): mount failed
[   72.120275][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   72.128733][ T4268] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   72.146461][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.154903][ T4268] usb 4-1: Product: syz
[   72.159155][ T4268] usb 4-1: Manufacturer: syz
[   72.164204][ T4268] usb 4-1: SerialNumber: syz
[   72.216730][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   72.516731][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   72.526721][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   72.536715][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   72.546717][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   72.556717][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   72.566720][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   72.576717][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   72.586716][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   72.596719][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   72.788245][ T4268] usb 4-1: config 0 descriptor??
[   72.864244][ T4268] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   72.877721][ T4268] em28xx 4-1:0.0: DVB interface 0 found: bulk
[   72.976827][ T4271] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   73.086908][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   73.216816][ T4271] usb 5-1: Using ep0 maxpacket: 32
[   73.336948][ T4271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.358315][ T4271] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   73.379964][ T4271] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   73.404026][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.431304][ T4271] usb 5-1: config 0 descriptor??
[   73.449826][ T4233] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024
[   73.474950][ T4233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   73.492233][ T4268] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[   73.506882][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.690235][ T4233] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   73.712707][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   73.735040][ T4233] usb 3-1: Product: syz
[   73.754728][ T4233] usb 3-1: Manufacturer: syz
[   73.764844][ T4233] usb 3-1: SerialNumber: syz
[   73.811679][ T4296] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   74.031362][ T4268] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   74.054741][ T4268] em28xx 4-1:0.0: board has no eeprom
[   74.075103][ T4233] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   74.344510][   T13] usb 3-1: USB disconnect, device number 3
[   74.375946][ T4296] usblp0: removed
[   74.386819][ T4268] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   74.401764][ T4268] em28xx 4-1:0.0: dvb set to bulk mode.
[   74.416167][ T4233] em28xx 4-1:0.0: Binding DVB extension
[   74.435522][ T4268] usb 4-1: USB disconnect, device number 2
[   74.460687][ T4268] em28xx 4-1:0.0: Disconnecting em28xx
[   74.536655][ T4233] em28xx 4-1:0.0: Registering input extension
[   74.543503][ T4268] em28xx 4-1:0.0: Closing input extension
[   74.566435][ T4268] em28xx 4-1:0.0: Freeing device
[   74.652791][ T4322] loop1: detected capacity change from 0 to 512
[   74.669632][ T4322] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   74.695759][ T4322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   74.704039][ T4322] System zones: 1-12
[   74.710059][ T4322] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.15: Bad quota inum: 2934046720, type: 1
[   74.722150][ T4322] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   74.739837][ T4322] EXT4-fs (loop1): mount failed
[   75.088065][ T4192] usb 5-1: USB disconnect, device number 2
[   75.396373][ T4343] loop2: detected capacity change from 0 to 512
[   75.441663][ T4343] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   75.464459][ T4343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   75.478844][ T4343] System zones: 1-12
[   75.483861][ T4343] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.22: Bad quota inum: 2934046720, type: 1
[   75.501126][ T4343] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   75.520789][ T4343] EXT4-fs (loop2): mount failed
[   75.597063][ T4192] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   75.866832][ T4192] usb 5-1: Using ep0 maxpacket: 8
[   75.946431][ T4268] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.546954][ T4192] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   76.555477][ T4192] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   76.568291][ T4192] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   76.578652][ T4192] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   76.590544][ T4192] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   76.603964][ T4192] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   76.616132][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.736601][ T4357] loop0: detected capacity change from 0 to 512
[   76.797399][ T4268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   76.814791][ T4268] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   76.827603][ T4357] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   76.845307][ T4268] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.894133][ T4357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   76.897297][ T4192] usb 5-1: GET_CAPABILITIES returned 0
[   76.913149][ T4357] System zones: 1-12
[   76.916876][ T4192] usbtmc 5-1:16.0: can't read capabilities
[   76.945004][ T4357] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.27: Bad quota inum: 2934046720, type: 1
[   76.984507][ T4357] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   77.008206][ T4357] EXT4-fs (loop0): mount failed
[   77.036998][ T4268] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   77.046066][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   77.058788][ T4268] usb 2-1: Product: syz
[   77.063044][ T4268] usb 2-1: Manufacturer: syz
[   77.069260][ T4268] usb 2-1: SerialNumber: syz
[   77.148946][    T7] usb 5-1: USB disconnect, device number 3
[   77.156988][ T4262] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   77.369380][ T4268] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   77.651681][    T7] usb 2-1: USB disconnect, device number 3
[   77.664225][    T7] usblp0: removed
[   77.686810][ T4268] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.727113][ T4262] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024
[   77.741489][ T4262] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   77.752042][ T4262] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.936926][ T4268] usb 1-1: Using ep0 maxpacket: 16
[   77.986981][ T4262] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   78.000701][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   78.020840][ T4262] usb 4-1: Product: syz
[   78.030198][ T4262] usb 4-1: Manufacturer: syz
[   78.039512][ T4262] usb 4-1: SerialNumber: syz
[   78.057065][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   78.087843][ T4361] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   78.238204][ T4268] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   78.247944][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.256478][ T4268] usb 1-1: Product: syz
[   78.261334][ T4268] usb 1-1: Manufacturer: syz
[   78.268673][ T4268] usb 1-1: SerialNumber: syz
[   78.280945][ T4268] usb 1-1: config 0 descriptor??
[   78.329471][ T4268] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   78.340921][ T4262] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   78.348007][ T4268] em28xx 1-1:0.0: DVB interface 0 found: bulk
[   78.597898][    T7] usb 4-1: USB disconnect, device number 3
[   78.617082][ T4361] usblp0: removed
[   78.736947][ T4262] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   78.964305][ T4387] loop1: detected capacity change from 0 to 512
[   78.971163][ T4268] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   78.987057][ T4262] usb 3-1: Using ep0 maxpacket: 32
[   79.012109][ T4387] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   79.043226][ T4387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   79.059634][ T4387] System zones: 1-12
[   79.071010][ T4387] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.36: Bad quota inum: 2934046720, type: 1
[   79.091574][ T4387] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   79.108867][ T4387] EXT4-fs (loop1): mount failed
[   79.156975][ T4262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.276752][ T4262] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   79.296579][ T4262] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   79.326791][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.348766][ T4262] usb 3-1: config 0 descriptor??
[   79.916895][ T4268] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   79.928325][ T4268] em28xx 1-1:0.0: board has no eeprom
[   80.126512][ T4408] loop1: detected capacity change from 0 to 512
[   80.186855][ T4408] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   80.215671][ T4408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   80.224227][ T4408] System zones: 1-12
[   80.255241][ T4408] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.40: Bad quota inum: 2934046720, type: 1
[   80.267181][ T4408] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   80.306812][ T4268] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   80.328776][ T4268] em28xx 1-1:0.0: dvb set to bulk mode.
[   80.367070][ T4408] EXT4-fs (loop1): mount failed
[   80.377351][ T4268] usb 1-1: USB disconnect, device number 2
[   80.408336][ T4268] em28xx 1-1:0.0: Disconnecting em28xx
[   80.432627][ T2241] em28xx 1-1:0.0: Binding DVB extension
[   80.654927][ T2241] em28xx 1-1:0.0: Registering input extension
[   80.663649][ T4268] em28xx 1-1:0.0: Closing input extension
[   80.678065][ T4268] em28xx 1-1:0.0: Freeing device
[   81.463269][   T13] usb 3-1: USB disconnect, device number 4
[   82.834511][ T4423] loop0: detected capacity change from 0 to 128
[   82.851784][ T4424] loop3: detected capacity change from 0 to 128
[   82.924450][ T4424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.930516][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   82.942456][ T4424] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.966341][ T4423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.996584][ T4423] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.311538][ T4454] loop0: detected capacity change from 0 to 512
[   83.360132][ T4454] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   83.403342][ T4454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   83.411823][ T4454] System zones: 1-12
[   83.417684][ T4454] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.51: Bad quota inum: 2934046720, type: 1
[   83.432792][ T4454] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   83.448771][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024
[   83.461068][ T4454] EXT4-fs (loop0): mount failed
[   83.466439][    T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   83.476789][   T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   83.484483][    T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.597028][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   83.777071][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   83.786250][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   83.842343][ T4463] loop3: detected capacity change from 0 to 512
[   84.408338][    T7] usb 3-1: Product: syz
[   84.412545][    T7] usb 3-1: Manufacturer: syz
[   84.426866][ T4463] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   84.449913][ T4463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   84.456375][    T7] usb 3-1: SerialNumber: syz
[   84.463185][ T4463] System zones: 1-12
[   84.468132][ T4463] EXT4-fs error (device loop3): ext4_quota_enable:6440: comm syz.3.54: Bad quota inum: 2934046720, type: 1
[   84.481700][ T4463] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   84.490421][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   84.540261][ T4463] EXT4-fs (loop3): mount failed
[   84.547397][ T4434] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   84.567734][ T4231] usb 2-1: Using ep0 maxpacket: 16
[   84.578601][   T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   84.592034][   T13] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.747006][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   85.088948][    T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   85.167889][   T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   85.185451][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   85.194594][   T13] usb 5-1: Product: syz
[   85.199220][   T13] usb 5-1: Manufacturer: syz
[   85.203842][   T13] usb 5-1: SerialNumber: syz
[   85.213626][ T4268] usb 3-1: USB disconnect, device number 5
[   85.234128][ T4268] usblp0: removed
[   85.238173][ T4231] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   85.249231][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.257944][ T4231] usb 2-1: Product: syz
[   85.263019][ T4231] usb 2-1: Manufacturer: syz
[   85.269501][ T4231] usb 2-1: SerialNumber: syz
[   85.301456][ T4231] usb 2-1: config 0 descriptor??
[   85.369179][ T4231] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   85.379919][ T4231] em28xx 2-1:0.0: DVB interface 0 found: bulk
[   85.479341][   T13] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   85.506869][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   85.672242][ T4483] Zero length message leads to an empty skb
[   85.753798][ T4271] usb 5-1: USB disconnect, device number 4
[   85.759859][ T4233] usb 4-1: Using ep0 maxpacket: 32
[   85.770585][ T4271] usblp0: removed
[   86.488493][   T23] cfg80211: failed to load regulatory.db
[   86.767161][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.800738][ T4233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   86.846897][ T4233] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   86.881331][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.896872][ T4231] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   86.927681][ T4233] usb 4-1: config 0 descriptor??
[   87.177044][    T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   87.421461][ T4231] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   87.434164][ T4231] em28xx 2-1:0.0: board has no eeprom
[   87.602630][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024
[   87.624350][    T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   87.640909][    T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.701786][ T4506] loop4: detected capacity change from 0 to 512
[   87.745625][ T4506] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   87.776569][ T4506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   87.789342][ T4506] System zones: 1-12
[   87.796049][ T4506] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.66: Bad quota inum: 2934046720, type: 1
[   87.808727][ T4231] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   87.817490][ T4506] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   87.826855][ T4231] em28xx 2-1:0.0: dvb set to bulk mode.
[   87.844923][ T4231] usb 2-1: USB disconnect, device number 4
[   87.851337][   T13] em28xx 2-1:0.0: Binding DVB extension
[   87.857169][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   87.866237][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   87.876309][ T4231] em28xx 2-1:0.0: Disconnecting em28xx
[   87.881943][    T7] usb 1-1: Product: syz
[   87.886139][    T7] usb 1-1: Manufacturer: syz
[   87.899563][ T4506] EXT4-fs (loop4): mount failed
[   87.904947][    T7] usb 1-1: SerialNumber: syz
[   87.929351][ T4492] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   88.132686][   T13] em28xx 2-1:0.0: Registering input extension
[   88.141856][ T4231] em28xx 2-1:0.0: Closing input extension
[   88.263415][ T4231] em28xx 2-1:0.0: Freeing device
[   88.475103][   T13] usb 4-1: USB disconnect, device number 4
[   88.794164][    T7] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   88.903396][ T4518] loop3: detected capacity change from 0 to 512
[   88.915630][ T4503] loop2: detected capacity change from 0 to 128
[   88.962616][ T4518] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   89.003438][ T4518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   89.023111][ T4518] System zones: 1-12
[   89.029044][ T4518] EXT4-fs error (device loop3): ext4_quota_enable:6440: comm syz.3.79: Bad quota inum: 2934046720, type: 1
[   89.066490][ T4271] usb 1-1: USB disconnect, device number 3
[   89.076005][ T4492] usblp0: removed
[   89.096050][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.113695][ T4518] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   89.140622][ T4518] EXT4-fs (loop3): mount failed
[   89.145921][ T4503] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.127272][ T4535] loop2: detected capacity change from 0 to 512
[   90.218573][ T4535] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   90.257686][ T4535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   90.267926][ T4532] ==================================================================
[   90.276235][ T4532] BUG: KASAN: use-after-free in tcf_ct_act+0x361f/0x3b40
[   90.283331][ T4532] Write of size 4 at addr ffff888023080a94 by task syz.1.71/4532
[   90.291074][ T4532] 
[   90.293432][ T4532] CPU: 1 PID: 4532 Comm: syz.1.71 Not tainted syzkaller #0
[   90.300664][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.310745][ T4532] Call Trace:
[   90.314064][ T4532]  <TASK>
[   90.317013][ T4532]  dump_stack_lvl+0x188/0x250
[   90.321720][ T4532]  ? show_regs_print_info+0x20/0x20
[   90.326950][ T4532]  ? load_image+0x410/0x410
[   90.331482][ T4532]  ? _raw_spin_lock_irqsave+0xbc/0x100
[   90.336968][ T4532]  ? ipv6_defrag+0x3a0/0x3a0
[   90.341598][ T4532]  print_address_description+0x60/0x2d0
[   90.347176][ T4532]  ? tcf_ct_act+0x361f/0x3b40
[   90.351882][ T4532]  kasan_report+0xdf/0x130
[   90.356327][ T4532]  ? tcf_ct_act+0x361f/0x3b40
[   90.361036][ T4532]  tcf_ct_act+0x361f/0x3b40
[   90.365647][ T4532]  ? tunnel_key_exit_net+0x100/0x100
[   90.370969][ T4532]  ? __lock_acquire+0x13dc/0x7b50
[   90.376025][ T4532]  ? skb_copy_bits+0x310/0x740
[   90.380836][ T4532]  ? skb_zerocopy+0x198/0x10a0
[   90.385646][ T4532]  ? rcu_lockdep_current_cpu_online+0x35/0x130
[   90.391838][ T4532]  ? rcu_read_lock_held+0x40/0x40
[   90.396906][ T4532]  tcf_action_exec+0x177/0x570
[   90.401729][ T4532]  tcf_classify+0x218/0xad0
[   90.406283][ T4532]  __netif_receive_skb_core+0x1cd8/0x3670
[   90.412079][ T4532]  ? set_rps_cpu+0x660/0x660
[   90.416723][ T4532]  ? ktime_get_with_offset+0xff/0x320
[   90.422150][ T4532]  ? read_lock_is_recursive+0x10/0x10
[   90.427559][ T4532]  ? lock_chain_count+0x20/0x20
[   90.432455][ T4532]  ? do_user_addr_fault+0x69f/0xc90
[   90.437685][ T4532]  __netif_receive_skb+0x74/0x290
[   90.442742][ T4532]  ? ktime_get_with_offset+0x2d7/0x320
[   90.448229][ T4532]  netif_receive_skb+0x19e/0x700
[   90.453190][ T4532]  ? __bpf_trace_softirq+0x10/0x10
[   90.458327][ T4532]  ? netif_receive_skb_core+0x210/0x210
[   90.463919][ T4532]  tun_rx_batched+0x606/0x760
[   90.468851][ T4532]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[   90.473095][ T4535] System zones: 
[   90.474882][ T4532]  ? local_bh_enable+0x20/0x20
[   90.483225][ T4532]  ? __local_bh_enable_ip+0x136/0x1c0
[   90.488650][ T4532]  ? read_lock_is_recursive+0x10/0x10
[   90.494069][ T4532]  ? __local_bh_enable_ip+0x136/0x1c0
[   90.495794][ T4535] 1-12
[   90.499465][ T4532]  ? _local_bh_enable+0xa0/0xa0
[   90.499499][ T4532]  tun_get_user+0x2bf4/0x3b10
[   90.499540][ T4532]  ? tun_ring_recv+0xc90/0xc90
[   90.506273][ T4535] 
[   90.507223][ T4532]  ? rcu_lock_release+0x5/0x20
[   90.507256][ T4532]  ? __lock_acquire+0x7b50/0x7b50
[   90.518367][ T4535] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.69: Bad quota inum: 2934046720, type: 1
[   90.519124][ T4532]  tun_chr_write_iter+0x112/0x1e0
[   90.525066][ T4535] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[   90.528886][ T4532]  vfs_write+0x748/0xd70
[   90.528920][ T4532]  ? file_end_write+0x250/0x250
[   90.528949][ T4532]  ? __fget_files+0x402/0x470
[   90.528979][ T4532]  ? __fdget_pos+0x1e2/0x370
[   90.528998][ T4532]  ? ksys_write+0x70/0x260
[   90.529021][ T4532]  ksys_write+0x153/0x260
[   90.529045][ T4532]  ? __ia32_sys_read+0x80/0x80
[   90.529077][ T4532]  ? lockdep_hardirqs_on+0x94/0x140
[   90.529106][ T4532]  do_syscall_64+0x4c/0xa0
[   90.529126][ T4532]  ? clear_bhb_loop+0x30/0x80
[   90.529147][ T4532]  ? clear_bhb_loop+0x30/0x80
[   90.529170][ T4532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.529209][ T4532] RIP: 0033:0x7facf1bf4159
[   90.529230][ T4532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.529248][ T4532] RSP: 002b:00007facefe4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   90.529272][ T4532] RAX: ffffffffffffffda RBX: 00007facf1e7bfa0 RCX: 00007facf1bf4159
[   90.529288][ T4532] RDX: 0000000000000fce RSI: 0000200000001280 RDI: 0000000000000003
[   90.565507][ T4535] EXT4-fs (loop2): mount failed
[   90.570159][ T4532] RBP: 00007facf1c8b06b R08: 0000000000000000 R09: 0000000000000000
[   90.570177][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.570190][ T4532] R13: 00007facf1e7c038 R14: 00007facf1e7bfa0 R15: 00007ffe4d4acd48
[   90.570220][ T4532]  </TASK>
[   90.698393][ T4532] 
[   90.700775][ T4532] Allocated by task 4532:
[   90.705127][ T4532]  __kasan_slab_alloc+0x92/0xc0
[   90.710014][ T4532]  slab_post_alloc_hook+0x4c/0x380
[   90.715164][ T4532]  kmem_cache_alloc_node+0x184/0x2c0
[   90.720483][ T4532]  __alloc_skb+0xf4/0x750
[   90.724857][ T4532]  alloc_skb_with_frags+0xa7/0x720
[   90.729994][ T4532]  sock_alloc_send_pskb+0x87f/0x9a0
[   90.735223][ T4532]  tun_get_user+0x8f7/0x3b10
[   90.739841][ T4532]  tun_chr_write_iter+0x112/0x1e0
[   90.744887][ T4532]  vfs_write+0x748/0xd70
[   90.749152][ T4532]  ksys_write+0x153/0x260
[   90.753509][ T4532]  do_syscall_64+0x4c/0xa0
[   90.757957][ T4532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.763879][ T4532] 
[   90.766233][ T4532] Freed by task 4532:
[   90.770226][ T4532]  kasan_set_track+0x4b/0x70
[   90.774855][ T4532]  kasan_set_free_info+0x1f/0x40
[   90.779849][ T4532]  ____kasan_slab_free+0xd5/0x110
[   90.784900][ T4532]  slab_free_freelist_hook+0xec/0x170
[   90.790302][ T4532]  kmem_cache_free+0x8f/0x210
[   90.795046][ T4532]  nf_ct_frag6_gather+0x1002/0x1da0
[   90.800297][ T4532]  tcf_ct_act+0xc8d/0x3b40
[   90.804743][ T4532]  tcf_action_exec+0x177/0x570
[   90.809558][ T4532]  tcf_classify+0x218/0xad0
[   90.814092][ T4532]  __netif_receive_skb_core+0x1cd8/0x3670
[   90.819843][ T4532]  __netif_receive_skb+0x74/0x290
[   90.824919][ T4532]  netif_receive_skb+0x19e/0x700
[   90.829887][ T4532]  tun_rx_batched+0x606/0x760
[   90.834592][ T4532]  tun_get_user+0x2bf4/0x3b10
[   90.839298][ T4532]  tun_chr_write_iter+0x112/0x1e0
[   90.844358][ T4532]  vfs_write+0x748/0xd70
[   90.848650][ T4532]  ksys_write+0x153/0x260
[   90.853003][ T4532]  do_syscall_64+0x4c/0xa0
[   90.857442][ T4532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.863361][ T4532] 
[   90.865708][ T4532] The buggy address belongs to the object at ffff888023080a00
[   90.865708][ T4532]  which belongs to the cache skbuff_head_cache of size 232
[   90.880312][ T4532] The buggy address is located 148 bytes inside of
[   90.880312][ T4532]  232-byte region [ffff888023080a00, ffff888023080ae8)
[   90.893634][ T4532] The buggy address belongs to the page:
[   90.899306][ T4532] page:ffffea00008c2000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23080
[   90.909489][ T4532] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[   90.917076][ T4532] raw: 00fff00000000200 ffffea00017f7000 0000000900000002 ffff88801bbe4140
[   90.925688][ T4532] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[   90.934304][ T4532] page dumped because: kasan: bad access detected
[   90.940748][ T4532] page_owner tracks the page as allocated
[   90.946479][ T4532] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3562, ts 27890453692, free_ts 27881804208
[   90.962580][ T4532]  get_page_from_freelist+0x24f6/0x2670
[   90.968156][ T4532]  __alloc_pages+0x1ee/0x480
[   90.972771][ T4532]  new_slab+0xc0/0x4b0
[   90.976858][ T4532]  ___slab_alloc+0x807/0xdd0
[   90.981480][ T4532]  kmem_cache_alloc_node+0x118/0x2c0
[   90.986790][ T4532]  __alloc_skb+0xf4/0x750
[   90.991153][ T4532]  alloc_uevent_skb+0x7d/0x230
[   90.995960][ T4532]  kobject_uevent_net_broadcast+0x2e6/0x530
[   91.001907][ T4532]  kobject_uevent_env+0x550/0x890
[   91.007004][ T4532]  kobject_synth_uevent+0x457/0x940
[   91.012235][ T4532]  store_uevent+0x12/0x20
[   91.016583][ T4532]  module_attr_store+0x5b/0x80
[   91.021384][ T4532]  kernfs_fop_write_iter+0x3a8/0x500
[   91.026700][ T4532]  vfs_write+0x748/0xd70
[   91.030965][ T4532]  ksys_write+0x153/0x260
[   91.035322][ T4532]  do_syscall_64+0x4c/0xa0
[   91.039768][ T4532] page last free stack trace:
[   91.044455][ T4532]  free_unref_page_prepare+0x637/0x6c0
[   91.049940][ T4532]  free_unref_page+0x8f/0x2a0
[   91.054654][ T4532]  qlist_free_all+0x35/0x90
[   91.059204][ T4532]  kasan_quarantine_reduce+0x150/0x160
[   91.064711][ T4532]  __kasan_slab_alloc+0x2f/0xc0
[   91.069602][ T4532]  slab_post_alloc_hook+0x4c/0x380
[   91.074750][ T4532]  kmem_cache_alloc+0x15d/0x280
[   91.079656][ T4532]  getname_flags+0xb7/0x4f0
[   91.084187][ T4532]  do_sys_openat2+0xdd/0x500
[   91.088813][ T4532]  __x64_sys_openat+0x135/0x160
[   91.093686][ T4532]  do_syscall_64+0x4c/0xa0
[   91.098139][ T4532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.104059][ T4532] 
[   91.106396][ T4532] Memory state around the buggy address:
[   91.112046][ T4532]  ffff888023080980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[   91.120129][ T4532]  ffff888023080a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   91.128218][ T4532] >ffff888023080a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[   91.136308][ T4532]                          ^
[   91.140918][ T4532]  ffff888023080b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   91.148994][ T4532]  ffff888023080b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   91.157098][ T4532] ==================================================================
[   91.165181][ T4532] Disabling lock debugging due to kernel taint
[   91.171432][ T4532] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   91.178643][ T4532] CPU: 1 PID: 4532 Comm: syz.1.71 Tainted: G    B             syzkaller #0
[   91.187253][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.197343][ T4532] Call Trace:
[   91.200647][ T4532]  <TASK>
[   91.203595][ T4532]  dump_stack_lvl+0x188/0x250
[   91.208295][ T4532]  ? show_regs_print_info+0x20/0x20
[   91.213517][ T4532]  ? load_image+0x410/0x410
[   91.218064][ T4532]  panic+0x2f8/0x850
[   91.222040][ T4532]  ? bpf_jit_dump+0xd0/0xd0
[   91.226591][ T4532]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[   91.232514][ T4532]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[   91.238426][ T4532]  ? _raw_spin_unlock+0x40/0x40
[   91.243311][ T4532]  ? tcf_ct_act+0x361f/0x3b40
[   91.248022][ T4532]  check_panic_on_warn+0x80/0xa0
[   91.252982][ T4532]  ? tcf_ct_act+0x361f/0x3b40
[   91.257686][ T4532]  end_report+0x6d/0xf0
[   91.261867][ T4532]  kasan_report+0x102/0x130
[   91.266390][ T4532]  ? tcf_ct_act+0x361f/0x3b40
[   91.271090][ T4532]  tcf_ct_act+0x361f/0x3b40
[   91.275633][ T4532]  ? tunnel_key_exit_net+0x100/0x100
[   91.280960][ T4532]  ? __lock_acquire+0x13dc/0x7b50
[   91.286031][ T4532]  ? skb_copy_bits+0x310/0x740
[   91.290824][ T4532]  ? skb_zerocopy+0x198/0x10a0
[   91.295624][ T4532]  ? rcu_lockdep_current_cpu_online+0x35/0x130
[   91.301809][ T4532]  ? rcu_read_lock_held+0x40/0x40
[   91.306865][ T4532]  tcf_action_exec+0x177/0x570
[   91.311660][ T4532]  tcf_classify+0x218/0xad0
[   91.316207][ T4532]  __netif_receive_skb_core+0x1cd8/0x3670
[   91.321955][ T4532]  ? set_rps_cpu+0x660/0x660
[   91.326601][ T4532]  ? ktime_get_with_offset+0xff/0x320
[   91.331990][ T4532]  ? read_lock_is_recursive+0x10/0x10
[   91.337384][ T4532]  ? lock_chain_count+0x20/0x20
[   91.342253][ T4532]  ? do_user_addr_fault+0x69f/0xc90
[   91.347470][ T4532]  __netif_receive_skb+0x74/0x290
[   91.352503][ T4532]  ? ktime_get_with_offset+0x2d7/0x320
[   91.357993][ T4532]  netif_receive_skb+0x19e/0x700
[   91.362961][ T4532]  ? __bpf_trace_softirq+0x10/0x10
[   91.368169][ T4532]  ? netif_receive_skb_core+0x210/0x210
[   91.373722][ T4532]  tun_rx_batched+0x606/0x760
[   91.378407][ T4532]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[   91.384404][ T4532]  ? local_bh_enable+0x20/0x20
[   91.389192][ T4532]  ? __local_bh_enable_ip+0x136/0x1c0
[   91.394570][ T4532]  ? read_lock_is_recursive+0x10/0x10
[   91.399954][ T4532]  ? __local_bh_enable_ip+0x136/0x1c0
[   91.405369][ T4532]  ? _local_bh_enable+0xa0/0xa0
[   91.410238][ T4532]  tun_get_user+0x2bf4/0x3b10
[   91.414933][ T4532]  ? tun_ring_recv+0xc90/0xc90
[   91.419716][ T4532]  ? rcu_lock_release+0x5/0x20
[   91.424485][ T4532]  ? __lock_acquire+0x7b50/0x7b50
[   91.429532][ T4532]  tun_chr_write_iter+0x112/0x1e0
[   91.434589][ T4532]  vfs_write+0x748/0xd70
[   91.438842][ T4532]  ? file_end_write+0x250/0x250
[   91.443700][ T4532]  ? __fget_files+0x402/0x470
[   91.448379][ T4532]  ? __fdget_pos+0x1e2/0x370
[   91.452971][ T4532]  ? ksys_write+0x70/0x260
[   91.457398][ T4532]  ksys_write+0x153/0x260
[   91.461733][ T4532]  ? __ia32_sys_read+0x80/0x80
[   91.466502][ T4532]  ? lockdep_hardirqs_on+0x94/0x140
[   91.471727][ T4532]  do_syscall_64+0x4c/0xa0
[   91.476143][ T4532]  ? clear_bhb_loop+0x30/0x80
[   91.480828][ T4532]  ? clear_bhb_loop+0x30/0x80
[   91.485522][ T4532]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.491431][ T4532] RIP: 0033:0x7facf1bf4159
[   91.495864][ T4532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.515485][ T4532] RSP: 002b:00007facefe4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   91.523910][ T4532] RAX: ffffffffffffffda RBX: 00007facf1e7bfa0 RCX: 00007facf1bf4159
[   91.531904][ T4532] RDX: 0000000000000fce RSI: 0000200000001280 RDI: 0000000000000003
[   91.539880][ T4532] RBP: 00007facf1c8b06b R08: 0000000000000000 R09: 0000000000000000
[   91.547852][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.555849][ T4532] R13: 00007facf1e7c038 R14: 00007facf1e7bfa0 R15: 00007ffe4d4acd48
[   91.563838][ T4532]  </TASK>
[   91.567188][ T4532] Kernel Offset: disabled
[   91.571544][ T4532] Rebooting in 86400 seconds..