last executing test programs:

4m56.55082941s ago: executing program 3 (id=1031):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x0, 0x8, 0x1c, 0x0, 0x2, ']\x00'}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"])
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4m53.404742461s ago: executing program 3 (id=1037):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
ioctl$SG_IO(r1, 0x2285, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

4m52.613947402s ago: executing program 3 (id=1042):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
syz_usb_connect(0x3, 0x98, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x8a, 0x7d, 0x53, 0x8, 0xa5c, 0x2033, 0x73e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x1, 0x5, 0xaa, 0x20, 0xfa, [{{0x9, 0x4, 0xee, 0x0, 0x1, 0x58, 0xfa, 0x42, 0x5, [], [{{0x9, 0x5, 0xe, 0x1, 0x200, 0x0, 0x1, 0x1, [@generic={0x6b, 0x8, "41e0f1a32183c629d51fd060ca7d36639d76ec09c57056cd91a71c4e078e5d34d4a5f012730bf2d3b43b045915368f85deebf713d3ceadfec132553cee5253f1401a1ceae66046eca95764ddfa346cb43824097dac838f3b0b946f7e6b7cc512e3067c4a92e521385b"}]}}]}}]}}]}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

4m49.423783904s ago: executing program 3 (id=1048):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r6}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x14010, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

4m49.041265679s ago: executing program 3 (id=1053):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fremovexattr(r0, &(0x7f0000000f80)=ANY=[])
r1 = userfaultfd(0x801)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f000052b000/0x4000)=nil, 0x4000})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1], 0x48)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x22, 0x1, 0xfffffffc, 0xfffffffc, {0x2}}, 0x14}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000000c0)=0x7fff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f00000003c0)=0x2, 0x12)
unshare(0x100)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000280)={0x7, 0x10001, {<r6=>0xffffffffffffffff}, {}, 0x5, 0x1})
prlimit64(r6, 0x5, &(0x7f0000000340)={0x6, 0x1}, &(0x7f0000000380))

4m47.570845029s ago: executing program 3 (id=1060):
socket$l2tp6(0xa, 0x2, 0x73)
set_mempolicy(0x8002, &(0x7f0000000040)=0x8, 0x5)
socket$inet(0x2, 0x3, 0x100)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010100, @empty}}}], 0x20}, 0x20014804)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000e00), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$x25(r4, &(0x7f0000000080), 0x12)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xad3a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

4m45.532975075s ago: executing program 32 (id=1060):
socket$l2tp6(0xa, 0x2, 0x73)
set_mempolicy(0x8002, &(0x7f0000000040)=0x8, 0x5)
socket$inet(0x2, 0x3, 0x100)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010100, @empty}}}], 0x20}, 0x20014804)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f0000000e00), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$x25(r4, &(0x7f0000000080), 0x12)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xad3a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

10.708011398s ago: executing program 5 (id=1866):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000090095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r4, 0x8b2c, &(0x7f0000000040))
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x4011)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000040)=ANY=[])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$video4linux(&(0x7f00000000c0), 0xfc, 0x402)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)

9.771272001s ago: executing program 5 (id=1868):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000088500000007000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
write$FUSE_INIT(r0, 0x0, 0x0)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')
execve(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
mkdirat(r5, 0x0, 0x4)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x0, 0xa1ae, 0x2, 0x55})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xf, 0x0, &(0x7f0000000200)="ba4c38af83b760a8f8a149f1f388ad", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

9.721180062s ago: executing program 5 (id=1869):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x9}}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001100010000000000020000000700000011ddcbf831de1ce1061a4d5127cedb65b0cf28a683dd04830c", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x50005}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
capset(0xffffffffffffffff, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340))
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = fanotify_init(0x8, 0x80000)
write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

8.770195255s ago: executing program 5 (id=1871):
r0 = fsopen(0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82)
dup2(r3, r2)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r8 = socket(0x1e, 0x4, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)="2c83aa84cf5fe4d7dade16ecab3739093c85dd730a67880b9a4c94d4c17f9672ff0b0d56bdff6e47f73a7040960d2b549c7700c9968bec5f17dadeffbe008db8fe7a93c101a1f774f5520b491af2a108d9681c6aadb0364e1185c93403338ef338653a4a16034eae697763e312d310c6800e4490ae7a2534ae7cdb6b063c0493aeaa3b1187", 0x85}, {&(0x7f0000000b40)="afa2eaab9c79f40d1052a81e43025e22613c372462ed44b1c73cfdde2f0812af48b363018d142cc8f939b4bb434f11c0c96a38b0e5db83538610dfc4442cc056dd258627517f498ab9d138d2b870db7929dabeaccc0654a88ce492413ee0cb6313cbc2174e677d2feffb5b33b69e01c572259107cc5c29d42619743037ca49", 0x7f}, {&(0x7f0000000c40)="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", 0xc49}], 0x3}, 0x20000000)

7.660910639s ago: executing program 2 (id=1878):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
ioctl$SG_IO(r1, 0x2285, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

6.263987807s ago: executing program 2 (id=1879):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000088500000007000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
write$FUSE_INIT(r0, 0x0, 0x0)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')
execve(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
mkdirat(r5, 0x0, 0x4)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x0, 0xa1ae, 0x2, 0x55})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xf, 0x0, &(0x7f0000000200)="ba4c38af83b760a8f8a149f1f388ad", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

6.190333278s ago: executing program 2 (id=1880):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0}, './cgroup\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x7f, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x80, 0x2, 0xbee}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001000000000000000000000079120e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x4000000)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x5410, &(0x7f00000010c0)=""/4096)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20)

6.170219478s ago: executing program 4 (id=1881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x9}}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001100010000000000020000000700000011ddcbf831de1ce1061a4d5127cedb65b0cf28a683dd04830c", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x50005}, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
capset(0xffffffffffffffff, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340))
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = fanotify_init(0x8, 0x80000)
write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)

5.760066794s ago: executing program 2 (id=1882):
r0 = socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0)
r3 = dup(0xffffffffffffffff)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1e}}}, 0x24}}, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000140)={0x0, 0x0, 0x9})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x24, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r7 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x0)
ioctl$BLKPG(r7, 0x1269, &(0x7f0000000480)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0xfffffffffffffafd, 0x2aa6, 0x3}})
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)

5.33183939s ago: executing program 0 (id=1883):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x820)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x4, 0x3}, 0x8)
listen(r4, 0x0)
r5 = socket(0xa, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0)

5.250715591s ago: executing program 4 (id=1884):
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000001300)='cachefiles_ondemand_open\x00', r0}, 0x18)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=<r2=>0x0)
prlimit64(r2, 0x6, &(0x7f0000001380)={0x8, 0xf2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000020601010000000140000000010000000c00078008000800000000800900020073797a502900000005020a2300000000450005000a00000005000100060000002802000000001500"], 0x6c}}, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x3, 0x4, 0x40, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x1, 0x1, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0xd, "0adb3fb8"}, 0x5})
write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
r7 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', r8, &(0x7f0000000200)='./file0\x00')

4.892181096s ago: executing program 2 (id=1885):
syz_open_procfs(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20000840)
sched_setscheduler(0x0, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x70)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)

4.891624096s ago: executing program 0 (id=1886):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @remote}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
ioperm(0x0, 0x2, 0x7e)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000018c0))

4.56785271s ago: executing program 1 (id=1887):
syz_usb_connect(0x0, 0x3d, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = timerfd_create(0x0, 0x0)
timerfd_settime(r4, 0x1, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000a40)=""/59, 0x3b}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x2, 0x0, 0x0)

4.367349282s ago: executing program 5 (id=1888):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6}, 0x38)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80140, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000100fd6fed668ea5"], 0x9)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

3.946655938s ago: executing program 5 (id=1889):
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="fff7", 0x2}], 0x1)

3.938570208s ago: executing program 0 (id=1890):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000088500000007000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
write$FUSE_INIT(r0, 0x0, 0x0)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00')
execve(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
mkdirat(r5, 0x0, 0x4)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x0, 0xa1ae, 0x2, 0x55})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xf, 0x0, &(0x7f0000000200)="ba4c38af83b760a8f8a149f1f388ad", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3.760029131s ago: executing program 4 (id=1891):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, &(0x7f0000000640))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0], 0x44}}, 0x0)

2.611526946s ago: executing program 0 (id=1892):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0}, './cgroup\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x7f, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x80, 0x2, 0xbee}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001000000000000000000000079120e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x5410, &(0x7f00000010c0)=""/4096)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20)

2.31013103s ago: executing program 4 (id=1893):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001440)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9254}]}]}]}}]}, 0xac}, 0x1, 0x7a00, 0x0, 0x1}, 0x0)

1.823375266s ago: executing program 2 (id=1894):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_x_sec_ctx={0xf, 0x18, 0x2, 0x11, 0x6c, "e45a6927de470f48b98cb616f766e2bf25e109700bc58c625ea2192f4a606f8d2e5f932dd03a69c02606a807f0c560aecc8385aa4a7111039c0d1b72484029784b68874abecb18c08e421a5eea0726a6e1c11f1f0bc87c3cadc39039b4f8f1c18ca87cd2c06e6175f85b5b9b"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0xd0}, 0x1, 0x7}, 0x0)
r5 = syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f00000001c0)={0x1})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0xf0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
syz_usb_connect(0x3, 0x99, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x8a, 0x7d, 0x53, 0x8, 0xa5c, 0x2033, 0x73e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x1, 0x5, 0xaa, 0x20, 0xfa, [{{0x9, 0x4, 0xee, 0x0, 0x1, 0x58, 0xfa, 0x42, 0x5, [], [{{0x9, 0x5, 0xe, 0x1, 0x200, 0x0, 0x1, 0x1, [@generic={0x6c, 0x8, "41e0f1a32183c629d51fd060ca7d36639d76ec09c57056cd91a71c4e078e5d34d4a5f012730bf2d3b43b045915368f85deebf713d3ceadfec132553cee5253f1401a1ceae66046eca95764ddfa346cb43824097dac838f3b0b946f7e6b7cc512e3067c4a92e521385bb1"}]}}]}}]}}]}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

1.695425068s ago: executing program 4 (id=1895):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000090095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r4, 0x8b2c, &(0x7f0000000040))
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x4011)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000040)=ANY=[])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$video4linux(&(0x7f00000000c0), 0xfc, 0x402)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)

1.59100502s ago: executing program 0 (id=1896):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_procfs(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
pipe(0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x6, 0x0, 0xffffffffffffffff, 0x200000000, 0x800, 0x0, {0x8, 0x1, 0x0, 0x0, 0x3, 0x7, 0xfffffffc, 0x4, 0x9, 0x1000, 0xfffffffd, r3, 0x0, 0xfcc00000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0xffff, 0x4000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2000, 0x0, r3, 0x0, 0x440, 0x880000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f0000000000)='./file0/file0\x00', 0xa02, 0x1)

1.276046924s ago: executing program 1 (id=1897):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'erspan0\x00', 0x0})

964.940277ms ago: executing program 4 (id=1898):
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0)

896.083368ms ago: executing program 1 (id=1899):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6}, 0x38)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80140, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000100fd6fed668ea5"], 0x9)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

812.611539ms ago: executing program 1 (id=1900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, 0x0, 0x0, 0x20, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004004)
connect$can_bcm(r1, &(0x7f00000008c0), 0x10)
close(0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

649.287232ms ago: executing program 1 (id=1901):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x5, 0x3c566418, 0x68a2, 0x6, 0x5, 0x1, 0x5, 0x5, 0x401, 0xffb, 0xe4c, 0xffffffffffffffff, 0x7, 0x0, 0x9, 0x8], 0x2000, 0x202000})
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x20000050)
keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffb0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040))
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00})

58.060699ms ago: executing program 0 (id=1902):
r0 = socket$inet6_sctp(0xa, 0x4, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4b211cbc810e1b53}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
connect$rose(r1, &(0x7f00000007c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast]}, 0x40)

0s ago: executing program 1 (id=1903):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0)
copy_file_range(r2, &(0x7f00000001c0)=0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0)
r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0000000400000008000000010000", @ANYRES32, @ANYBLOB="0000000000000600000000000000af0b49512c34cb315a6d5f544a8f4851cff72dccad92d5e3cab476e891b0a3f354a168b40cac702a6b0ac62e5a6b4eeae1b8cc7e3deafcb426647ade4c383ff19b998f756ec97b8099c63755913e24c195867388cd82a08c5e78d7d0b29c1003c2a70e38e0dcd16eda6e2b9743431f6f9ce25bd12b1e5a792115e06266db8f377bc136a0453b6c53de45cffedd0b0b00c972ce4f86d7b1e9dc8be3c3260d6d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xe, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10)
syz_open_dev$dri(0x0, 0xff, 0x4100)
r8 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x4, 0x100}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13})
io_uring_enter(r8, 0x7ffe, 0x184c, 0x2, 0x0, 0x0)
r11 = syz_open_dev$video(&(0x7f0000000a80), 0xa7, 0x0)
preadv(r11, &(0x7f0000000000)=[{0x0}], 0x1, 0xfc43, 0x7)

kernel console output (not intermixed with test programs):

DRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.329305][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.337817][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.346101][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.354377][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.362768][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.377715][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.393014][ T4173] 8021q: adding VLAN 0 to HW filter on device team0
[   58.406495][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.417991][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.427256][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.436355][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.445384][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.453215][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.461171][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.469695][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.478466][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.485587][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.494496][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.503122][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.511613][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.518645][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.526535][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.541948][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.551308][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.569771][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.583210][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.604216][ T4171] 8021q: adding VLAN 0 to HW filter on device team0
[   58.616980][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.629557][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.639051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.648015][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.659018][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.668645][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.683606][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.694132][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.706150][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.718573][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.725684][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.738022][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.768434][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.777484][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.787101][  T619] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.794180][  T619] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.802652][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.813017][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.821767][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.830112][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.838384][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.847499][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.857101][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.865392][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.873085][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.890215][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.899255][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.913334][  T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.948793][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.959282][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.968121][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.980797][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   58.989890][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.002320][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.013197][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.024940][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.042792][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.054883][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.089689][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.101642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.112051][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.120832][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.129929][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.147854][ T4166] 8021q: adding VLAN 0 to HW filter on device team0
[   59.160189][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.198178][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.209628][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.218137][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.232786][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.243032][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.253028][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.260090][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.268804][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.277503][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.286171][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.293244][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.302146][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.311014][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.318390][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.325880][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.334088][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.342593][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.350964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.358619][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.368986][ T4167] device veth0_vlan entered promiscuous mode
[   59.379213][ T4175] 8021q: adding VLAN 0 to HW filter on device team0
[   59.402724][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.414500][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.428203][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.440246][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.454591][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.463811][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.470874][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.481994][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.489958][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.505194][ T4167] device veth1_vlan entered promiscuous mode
[   59.518594][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.532621][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.545216][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.555679][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.562768][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.573210][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.581681][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.618492][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.626955][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.636479][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.645779][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.654014][ T4213] Bluetooth: hci0: command 0x041b tx timeout
[   59.656613][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.668534][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.677588][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.686635][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.695973][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.704574][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.713314][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.721589][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.730050][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.738760][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.746575][ T4213] Bluetooth: hci2: command 0x041b tx timeout
[   59.752952][ T4213] Bluetooth: hci1: command 0x041b tx timeout
[   59.754287][ T4167] device veth0_macvtap entered promiscuous mode
[   59.759063][ T4213] Bluetooth: hci3: command 0x041b tx timeout
[   59.772423][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.780365][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.788757][ T4213] Bluetooth: hci4: command 0x041b tx timeout
[   59.793196][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.821333][ T4175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.831798][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.845097][ T4167] device veth1_macvtap entered promiscuous mode
[   59.855718][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.864046][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.872710][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.882398][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.891189][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.899608][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.908191][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.921539][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.932573][ T4173] device veth0_vlan entered promiscuous mode
[   59.942635][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.954338][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.962515][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.971258][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.979578][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.987433][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.003534][ T4173] device veth1_vlan entered promiscuous mode
[   60.022340][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.034877][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.044599][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.053444][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.083388][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.107606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.122800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.141460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.156189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.180354][ T4171] device veth0_vlan entered promiscuous mode
[   60.189355][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.199633][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.208425][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.218126][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.233783][ T4173] device veth0_macvtap entered promiscuous mode
[   60.248686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.260229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.269180][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.279810][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.288425][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.298829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.306787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.319994][ T4173] device veth1_macvtap entered promiscuous mode
[   60.345795][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.354729][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.362419][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.375941][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.384073][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.393150][ T4171] device veth1_vlan entered promiscuous mode
[   60.405130][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.416341][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.432018][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.442945][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.454621][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.466517][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.477050][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.489096][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.510637][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.518670][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.527025][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.538059][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.547590][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.556909][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.569309][ T4173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.578479][ T4173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.587780][ T4173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.596759][ T4173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.653757][ T4171] device veth0_macvtap entered promiscuous mode
[   60.665221][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.674878][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.684890][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.713265][ T4171] device veth1_macvtap entered promiscuous mode
[   60.749134][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.757657][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.758350][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.771942][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.778442][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.789890][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.798023][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.806996][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.844954][ T4166] device veth0_vlan entered promiscuous mode
[   60.855834][ T4175] device veth0_vlan entered promiscuous mode
[   60.864609][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.873020][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.882351][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.891972][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.900259][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.908428][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.917072][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.925193][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.935516][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.946209][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.956650][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.967193][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.978915][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.999548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.008781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.021103][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.022887][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.029096][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.046689][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.056826][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.070810][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.082422][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.094537][ T4175] device veth1_vlan entered promiscuous mode
[   61.112635][ T4166] device veth1_vlan entered promiscuous mode
[   61.119284][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.127605][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.136883][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.144962][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.152967][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.161726][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.173837][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.182931][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.192324][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.201201][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.217225][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.227834][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.242584][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.258191][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.272542][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.285842][ T4166] device veth0_macvtap entered promiscuous mode
[   61.307829][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.322724][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.336859][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.346403][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.364635][ T4175] device veth0_macvtap entered promiscuous mode
[   61.377524][ T4175] device veth1_macvtap entered promiscuous mode
[   61.399111][ T4166] device veth1_macvtap entered promiscuous mode
[   61.413671][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.431031][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.446150][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.455096][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.463677][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.733805][   T23] Bluetooth: hci0: command 0x040f tx timeout
[   61.812069][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   61.819460][   T23] Bluetooth: hci3: command 0x040f tx timeout
[   61.831306][   T23] Bluetooth: hci1: command 0x040f tx timeout
[   61.836713][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.837451][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   61.859944][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.880196][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.916685][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.037323][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.049989][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.072286][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.079925][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.096748][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.128627][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.139343][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.300559][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.316075][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.326108][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.337063][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.347036][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.357712][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.371794][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.381072][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.401479][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.436485][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.452219][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.464448][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.475621][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.487118][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.505398][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.515671][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.524723][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.533899][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.546103][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.557177][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.574403][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.593526][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.604309][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.618592][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.629942][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.646959][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.669579][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.682705][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.704853][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.714145][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.723389][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.751686][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.761444][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.774932][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.789716][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.798545][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.807573][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.817026][ T4210] Bluetooth: hci0: command 0x0419 tx timeout
[   63.852636][  T619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.885475][  T619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.899734][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   63.924456][ T4210] Bluetooth: hci2: command 0x0419 tx timeout
[   63.931833][ T4210] Bluetooth: hci1: command 0x0419 tx timeout
[   63.938914][ T4210] Bluetooth: hci3: command 0x0419 tx timeout
[   63.945176][ T4210] Bluetooth: hci4: command 0x0419 tx timeout
[   63.967041][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.062931][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.152424][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.206624][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.211563][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   64.243132][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.252761][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.282484][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.313284][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.344442][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.402641][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.424514][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.439679][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.472823][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.513465][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.570513][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!!
[   64.583036][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   64.592262][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   64.601385][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   64.610511][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   64.619638][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   64.628785][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   64.637910][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   64.654664][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.677845][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.805411][ T4264] Zero length message leads to an empty skb
[   66.246999][ T4278] loop4: detected capacity change from 0 to 40427
[   66.467516][ T4278] F2FS-fs (loop4): Found nat_bits in checkpoint
[   67.129366][ T4278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   67.491373][ T4300] attempt to access beyond end of device
[   67.491373][ T4300] loop4: rw=2049, want=45104, limit=40427
[   68.101619][ T4173] attempt to access beyond end of device
[   68.101619][ T4173] loop4: rw=2049, want=45112, limit=40427
[   68.304315][ T4305] hfsplus: unable to find HFS+ superblock
[   68.691067][ T4321] fuse: Unknown parameter 'fd0x0000000000000004'
[   68.713780][ T4321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   71.041091][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[   72.126613][   T21] libceph: connect (1)[c::]:6789 error -101
[   72.133732][   T21] libceph: mon0 (1)[c::]:6789 connect error
[   72.266007][ T4348] ceph: No mds server is up or the cluster is laggy
[   72.347565][ T4369] fuseblk: Bad value for 'fd'
[   72.404544][   T21] libceph: connect (1)[c::]:6789 error -101
[   72.413251][   T21] libceph: mon0 (1)[c::]:6789 connect error
[   73.203419][ T4383] fuse: Unknown parameter 'fd0x0000000000000003'
[   73.352631][ T4380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.254477][   T21] Bluetooth: hci3: command 0x0405 tx timeout
[   76.008599][ T4417] fuseblk: Bad value for 'fd'
[   76.558267][ T1324] cfg80211: failed to load regulatory.db
[   76.841869][ T4424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   80.827470][ T4485] fuseblk: Bad value for 'fd'
[   87.485653][ T4542] loop4: detected capacity change from 0 to 40427
[   88.014912][ T4540] netlink: 44 bytes leftover after parsing attributes in process `syz.0.69'.
[   88.052384][   T21] libceph: connect (1)[c::]:6789 error -101
[   88.059177][   T21] libceph: mon0 (1)[c::]:6789 connect error
[   88.066638][ T4542] F2FS-fs (loop4): Found nat_bits in checkpoint
[   88.116602][ T4543] ceph: No mds server is up or the cluster is laggy
[   88.133971][ T4542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   88.437944][ T4558] attempt to access beyond end of device
[   88.437944][ T4558] loop4: rw=2049, want=45104, limit=40427
[   88.857673][ T4173] attempt to access beyond end of device
[   88.857673][ T4173] loop4: rw=2049, want=45112, limit=40427
[   92.135676][ T4593] fuse: Unknown parameter 'fd0x0000000000000004'
[   92.298200][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   93.986858][ T4214] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.691866][ T4214] usb 2-1: Using ep0 maxpacket: 32
[   95.070595][ T4214] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[   96.552628][ T4214] usb 2-1: config 0 has no interface number 0
[   96.558872][ T4214] usb 2-1: config 0 interface 85 has no altsetting 0
[   96.620728][ T4214] usb 2-1: string descriptor 0 read error: -71
[   96.627236][ T4214] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   96.645751][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.663053][ T4214] usb 2-1: config 0 descriptor??
[   96.723321][ T4214] usb 2-1: can't set config #0, error -71
[   96.745420][ T4214] usb 2-1: USB disconnect, device number 2
[   97.944520][ T4642] ODEBUG: Out of memory. ODEBUG disabled
[   98.569933][ T4651] fuse: Unknown parameter 'fd0x0000000000000004'
[  102.319483][ T4684] wireguard: wg1: Could not create IPv4 socket
[  120.406125][ T4930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'.
[  120.573356][ T4932] hfsplus: unable to find HFS+ superblock
[  121.060512][ T4937] binder: 4936:4937 ioctl c0306201 0 returned -14
[  121.441063][ T4950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'.
[  122.502780][ T4966] loop1: detected capacity change from 0 to 128
[  122.656296][   T26] audit: type=1326 audit(1746669358.616:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ac50969 code=0x7ffc0000
[  122.693014][ T4966] attempt to access beyond end of device
[  122.693014][ T4966] loop1: rw=2049, want=337, limit=128
[  122.726867][   T26] audit: type=1326 audit(1746669358.646:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ac50969 code=0x7ffc0000
[  122.748865][    C0] vkms_vblank_simulate: vblank timer overrun
[  123.095353][   T26] audit: type=1326 audit(1746669358.726:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f890ac50969 code=0x7ffc0000
[  123.117349][    C0] vkms_vblank_simulate: vblank timer overrun
[  123.290501][   T26] audit: type=1326 audit(1746669358.726:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ac50969 code=0x7ffc0000
[  123.345469][   T26] audit: type=1326 audit(1746669358.726:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ac50969 code=0x7ffc0000
[  123.596529][   T26] audit: type=1326 audit(1746669358.726:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f890ac50969 code=0x7ffc0000
[  123.619294][   T26] audit: type=1326 audit(1746669358.756:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4965 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890ac50969 code=0x7ffc0000
[  124.177982][ T4993] binder: 4992:4993 ioctl c0306201 0 returned -14
[  124.355938][ T4998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'.
[  125.572141][ T5022] =======================================================
[  125.572141][ T5022] WARNING: The mand mount option has been deprecated and
[  125.572141][ T5022]          and is ignored by this kernel. Remove the mand
[  125.572141][ T5022]          option from the mount to silence this warning.
[  125.572141][ T5022] =======================================================
[  127.171143][ T5047] binder: 5046:5047 ioctl c0306201 0 returned -14
[  127.323246][ T5053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.192'.
[  129.841765][ T4606] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  130.220530][ T4606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.238923][ T5091] binder: 5089:5091 ioctl c0306201 0 returned -14
[  130.245518][ T4606] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  130.267620][ T5092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'.
[  130.510569][ T4606] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  130.830264][ T4606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.858807][ T4606] usb 4-1: Product: syz
[  130.879053][ T4606] usb 4-1: Manufacturer: syz
[  130.894685][ T4606] usb 4-1: SerialNumber: syz
[  130.960311][ T4606] usb 4-1: config 0 descriptor??
[  131.348190][ T4606] usb 4-1: USB disconnect, device number 2
[  132.310572][ T4606] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  132.522411][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  132.887928][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.216'.
[  133.008146][ T5137] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  133.143892][ T4606] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  133.158712][ T4606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.176137][ T4606] usb 2-1: Product: syz
[  133.252864][ T4606] usb 2-1: Manufacturer: syz
[  133.257535][ T4606] usb 2-1: SerialNumber: syz
[  133.264875][ T4606] usb 2-1: config 0 descriptor??
[  134.790599][ T4606] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  135.741674][ T4606] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  135.756882][ T4606] dib0700: firmware download failed at 7 with -22
[  135.775352][ T4606] usb 2-1: USB disconnect, device number 3
[  137.404485][ T5189] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  151.704591][ T5343] binder: 5342:5343 ioctl c0306201 0 returned -14
[  151.777595][ T5343] binder: 5342:5343 ioctl c0306201 0 returned -14
[  151.896111][ T5344] hfsplus: unable to find HFS+ superblock
[  155.646638][ T5393] binder: 5392:5393 ioctl c0306201 0 returned -14
[  155.661983][ T5393] binder: 5392:5393 ioctl c0306201 0 returned -14
[  156.132900][ T5402] netlink: set zone limit has 8 unknown bytes
[  158.438186][ T5426] binder: 5422:5426 ioctl c0306201 0 returned -14
[  158.487012][ T5426] binder: 5422:5426 ioctl c0306201 0 returned -14
[  162.410642][ T5469] binder: 5468:5469 ioctl c0306201 0 returned -14
[  162.753118][ T4214] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  163.370509][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  163.706667][ T4214] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  163.715782][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.731626][ T4214] usb 3-1: config 0 descriptor??
[  163.750753][ T5471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  163.784555][ T5490] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  164.832590][ T4214] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  164.996665][ T4606] usb 3-1: USB disconnect, device number 2
[  165.016821][ T5511] binder: 5510:5511 ioctl c0306201 0 returned -14
[  166.086701][ T5525] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  167.738218][ T5547] binder: 5546:5547 ioctl c0306201 0 returned -14
[  168.715305][ T5564] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  170.289215][ T5589] binder: 5588:5589 ioctl c0306201 0 returned -14
[  171.864071][ T5604] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  172.880794][ T5624] binder: 5623:5624 ioctl c0306201 0 returned -14
[  177.789899][ T5667] virtio-fs: tag </dev/md0> not found
[  180.630131][ T4176] Bluetooth: hci0: command 0x0406 tx timeout
[  180.647237][ T4176] Bluetooth: hci2: command 0x0406 tx timeout
[  180.690799][ T4176] Bluetooth: hci1: command 0x0406 tx timeout
[  180.710432][ T4176] Bluetooth: hci3: command 0x0406 tx timeout
[  180.720786][ T4176] Bluetooth: hci4: command 0x0406 tx timeout
[  181.577953][ T5694] lo speed is unknown, defaulting to 1000
[  181.603342][ T5697] process 'syz.0.396' launched './file0/../file0/file0' with NULL argv: empty string added
[  181.626642][ T5694] lo speed is unknown, defaulting to 1000
[  182.416766][ T5694] lo speed is unknown, defaulting to 1000
[  182.664033][ T5694] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  182.732125][ T5694] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  182.782852][ T5694] lo speed is unknown, defaulting to 1000
[  182.798258][ T5694] lo speed is unknown, defaulting to 1000
[  182.804977][ T5694] lo speed is unknown, defaulting to 1000
[  182.814938][ T5694] lo speed is unknown, defaulting to 1000
[  182.821739][ T5694] lo speed is unknown, defaulting to 1000
[  184.071240][ T5717] loop4: detected capacity change from 0 to 128
[  184.770729][   T26] audit: type=1326 audit(1746669420.726:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd2dca969 code=0x7ffc0000
[  184.792866][    C1] vkms_vblank_simulate: vblank timer overrun
[  184.885091][   T26] audit: type=1326 audit(1746669420.846:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd2dca969 code=0x7ffc0000
[  184.935116][ T5717] attempt to access beyond end of device
[  184.935116][ T5717] loop4: rw=2049, want=689, limit=128
[  186.222187][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'.
[  186.241535][ T5737] device vcan0 entered promiscuous mode
[  186.275511][   T26] audit: type=1326 audit(1746669422.236:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  186.419966][   T26] audit: type=1326 audit(1746669422.236:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  186.442177][    C1] vkms_vblank_simulate: vblank timer overrun
[  186.460621][   T26] audit: type=1326 audit(1746669422.236:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  187.515800][   T26] audit: type=1326 audit(1746669422.236:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  187.537896][    C1] vkms_vblank_simulate: vblank timer overrun
[  187.549752][   T26] audit: type=1326 audit(1746669422.236:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  187.571861][    C1] vkms_vblank_simulate: vblank timer overrun
[  187.589498][   T26] audit: type=1326 audit(1746669422.236:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  187.612522][   T26] audit: type=1326 audit(1746669422.236:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  187.637981][   T26] audit: type=1326 audit(1746669422.236:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  189.160120][ T5773] loop3: detected capacity change from 0 to 1024
[  189.562286][ T5773] EXT4-fs (loop3): Ignoring removed nobh option
[  189.655440][ T5773] EXT4-fs (loop3): Ignoring removed bh option
[  189.735094][ T5773] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.893945][ T5776] loop0: detected capacity change from 0 to 128
[  189.936338][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  190.806688][ T5773] overlayfs: conflicting lowerdir path
[  190.936688][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  190.936701][   T26] audit: type=1326 audit(1746669426.896:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  190.991172][ T5776] attempt to access beyond end of device
[  190.991172][ T5776] loop0: rw=2049, want=1041, limit=128
[  191.085413][   T26] audit: type=1326 audit(1746669426.936:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  191.507222][   T26] audit: type=1326 audit(1746669426.936:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  191.529750][   T26] audit: type=1326 audit(1746669426.936:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  191.595640][   T26] audit: type=1326 audit(1746669426.936:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  191.949339][   T26] audit: type=1326 audit(1746669426.936:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  192.282002][   T26] audit: type=1326 audit(1746669426.936:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  192.352172][   T26] audit: type=1326 audit(1746669426.936:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  192.374155][    C1] vkms_vblank_simulate: vblank timer overrun
[  192.380298][   T26] audit: type=1326 audit(1746669426.936:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  192.405826][   T26] audit: type=1326 audit(1746669426.936:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feefa116969 code=0x7ffc0000
[  193.321720][ T5800] binder: 5799:5800 ioctl c0306201 0 returned -14
[  193.452342][ T5800] binder: 5799:5800 ioctl c0306201 0 returned -14
[  194.450363][    C1] sched: RT throttling activated
[  194.623830][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  195.820496][ T4211] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  196.458916][ T5837] loop2: detected capacity change from 0 to 1024
[  196.580589][ T5837] EXT4-fs (loop2): Ignoring removed nobh option
[  196.586943][ T5837] EXT4-fs (loop2): Ignoring removed bh option
[  196.605325][ T5837] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.667961][ T4211] usb 4-1: Using ep0 maxpacket: 16
[  196.698463][ T5837] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  196.911473][ T4211] usb 4-1: config index 0 descriptor too short (expected 8192, got 68)
[  196.930462][ T4211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.950498][ T4211] usb 4-1: config 0 has no interfaces?
[  197.056459][ T5852] overlayfs: conflicting lowerdir path
[  197.197643][ T4211] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  197.265803][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  197.420796][ T4211] usb 4-1: SerialNumber: syz
[  197.437188][ T4211] usb 4-1: config 0 descriptor??
[  197.789064][  T144] tipc: Subscription rejected, illegal request
[  197.843275][ T4211] usb 4-1: USB disconnect, device number 3
[  198.864160][ T5866] binder: 5865:5866 ioctl c0306201 0 returned -14
[  199.361189][ T4548] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  199.740559][ T4548] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  199.752519][ T4548] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  199.782568][ T4548] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  199.807134][ T4548] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  199.886459][ T4548] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  200.077396][ T5885] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  200.088930][ T5885] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  200.660720][ T4548] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  200.690213][ T4548] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  200.890233][ T4548] usb 5-1: Product: syz
[  200.895035][ T4548] usb 5-1: Manufacturer: syz
[  201.101790][ T4548] cdc_wdm 5-1:1.0: skipping garbage
[  201.107253][ T4548] cdc_wdm 5-1:1.0: skipping garbage
[  201.532802][ T4548] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  201.920457][ T4548] cdc_wdm 5-1:1.0: Unknown control protocol
[  201.942945][ T5900] binder: 5898:5900 ioctl c0306201 0 returned -14
[  202.906700][ T5915] sp0: Synchronizing with TNC
[  204.768384][ T4753] libceph: connect (1)[c::]:6789 error -101
[  205.176738][ T4753] libceph: mon0 (1)[c::]:6789 connect error
[  205.344218][ T5952] binder: 5951:5952 ioctl c0306201 0 returned -14
[  205.443815][ T4753] libceph: connect (1)[c::]:6789 error -101
[  205.449863][ T4753] libceph: mon0 (1)[c::]:6789 connect error
[  205.511021][ T5944] ceph: No mds server is up or the cluster is laggy
[  206.694755][ T4176] libceph: connect (1)[c::]:6789 error -101
[  206.897532][ T4176] libceph: mon0 (1)[c::]:6789 connect error
[  208.963073][ T4211] usb 5-1: USB disconnect, device number 2
[  209.109416][ T5989] binder: 5988:5989 ioctl c0306201 0 returned -14
[  211.607657][ T6001] hfsplus: unable to find HFS+ superblock
[  213.305998][ T6029] binder: 6028:6029 ioctl c0306201 0 returned -14
[  218.580859][ T6082] binder: 6081:6082 ioctl c0306201 0 returned -14
[  223.321096][ T6125] binder: 6119:6125 ioctl c0306201 0 returned -14
[  223.633206][ T6130] IPVS: length: 95 != 24
[  223.767782][ T6139] tipc: Started in network mode
[  223.780508][ T6139] tipc: Node identity ac1414aa, cluster identity 4711
[  223.801810][ T6139] tipc: Enabled bearer <udp:s>, priority 10
[  225.087487][ T4214] tipc: Node number set to 2886997162
[  227.070554][ T6163] IPv6: NLM_F_CREATE should be specified when creating new route
[  228.786003][ T6175] binder: 6173:6175 ioctl c0306201 0 returned -14
[  231.133696][ T6195] netlink: 'syz.3.537': attribute type 10 has an invalid length.
[  232.037293][ T6195] team0: Device ipvlan1 failed to register rx_handler
[  232.232187][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  233.485327][ T6209] binder: 6206:6209 ioctl c0306201 0 returned -14
[  234.802347][ T6233] netlink: 152 bytes leftover after parsing attributes in process `syz.3.547'.
[  236.191645][ T4180] Bluetooth: hci3: Unknown advertising packet type: 0x18
[  236.191793][ T4180] Bluetooth: hci3: Unknown advertising packet type: 0x1e
[  236.199343][ T4180] Bluetooth: hci3: Unknown advertising packet type: 0x30
[  236.206877][ T4180] Bluetooth: hci3: Unknown advertising packet type: 0x36
[  240.150453][ T4753] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  240.580447][ T4753] usb 3-1: Using ep0 maxpacket: 8
[  241.461050][ T4753] usb 3-1: unable to get BOS descriptor or descriptor too short
[  241.680829][ T4208] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  242.500577][ T4208] usb 1-1: Using ep0 maxpacket: 8
[  242.502033][ T6294] binder: 6293:6294 ioctl c0306201 2000000003c0 returned -14
[  242.520493][ T4753] usb 3-1: unable to read config index 0 descriptor/start: -71
[  242.540541][ T4753] usb 3-1: can't read configurations, error -71
[  242.713915][ T4208] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  242.733649][ T4208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.990543][ T4208] usb 1-1: can't set config #252, error -71
[  244.998523][ T4208] usb 1-1: USB disconnect, device number 2
[  246.340431][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  246.710508][ T6172] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  247.600638][    T7] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.602810][ T6172] usb 3-1: Using ep0 maxpacket: 8
[  247.620412][    T7] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.630265][    T7] usb 5-1: config 0 interface 0 has no altsetting 0
[  247.637051][    T7] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  247.669320][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.793416][    T7] usb 5-1: config 0 descriptor??
[  248.450861][ T6172] usb 3-1: unable to get BOS descriptor or descriptor too short
[  248.525012][    T7] usbhid 5-1:0.0: can't add hid device: -71
[  248.540782][ T4213] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  248.548642][ T6172] usb 3-1: unable to read config index 0 descriptor/start: -71
[  248.561181][ T6172] usb 3-1: can't read configurations, error -71
[  248.920649][ T4213] usb 4-1: config 2 has an invalid interface number: 177 but max is 1
[  248.946224][ T4213] usb 4-1: config 2 has an invalid interface number: 177 but max is 1
[  249.009852][ T4213] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2
[  249.084803][ T4213] usb 4-1: config 2 has no interface number 0
[  249.143881][ T4213] usb 4-1: config 2 interface 177 has no altsetting 1
[  249.281218][    T7] usbhid: probe of 5-1:0.0 failed with error -71
[  249.291398][    T7] usb 5-1: USB disconnect, device number 3
[  249.430489][ T4213] usb 4-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd
[  249.470112][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.478723][ T4213] usb 4-1: Product: syz
[  249.487287][ T4213] usb 4-1: Manufacturer: syz
[  249.496327][ T4213] usb 4-1: SerialNumber: syz
[  250.001265][ T6172] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  251.361648][ T4213] usb 4-1: selecting invalid altsetting 1
[  251.367500][ T4213] sierra 4-1:2.177: Sierra USB modem converter detected
[  251.443876][ T4213] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  251.510630][ T6172] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  251.542250][ T6172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.592480][ T4213] usb 4-1: USB disconnect, device number 4
[  252.349106][ T4213] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  252.358771][ T4213] sierra 4-1:2.177: device disconnected
[  252.492586][ T6172] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  253.553505][ T6172] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  253.563813][ T6172] usb 3-1: config 0 descriptor??
[  253.580793][ T6172] usb 3-1: can't set config #0, error -71
[  253.596735][ T6172] usb 3-1: USB disconnect, device number 6
[  253.714093][ T6397] netlink: 'syz.3.600': attribute type 10 has an invalid length.
[  253.728299][ T6397] team0: Device ipvlan1 failed to register rx_handler
[  254.102080][ T6172] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  254.324271][ T4606] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  254.375315][ T6172] usb 3-1: Using ep0 maxpacket: 8
[  254.446297][ T6416] hfsplus: unable to find HFS+ superblock
[  254.500986][ T6172] usb 3-1: unable to get BOS descriptor or descriptor too short
[  254.580504][ T6172] usb 3-1: unable to read config index 0 descriptor/start: -71
[  254.588213][ T4606] usb 5-1: Using ep0 maxpacket: 32
[  255.332361][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  256.260476][ T6172] usb 3-1: can't read configurations, error -71
[  256.411007][ T4606] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  256.420074][ T4606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.315727][ T6436] QAT: Invalid ioctl 21531
[  258.337666][ T4606] usb 5-1: config 0 descriptor??
[  258.410436][ T4606] usb 5-1: can't set config #0, error -71
[  258.418949][ T6440] netlink: 'syz.4.614': attribute type 10 has an invalid length.
[  258.442684][ T6440] team0: Device ipvlan1 failed to register rx_handler
[  258.679385][ T4606] usb 5-1: USB disconnect, device number 4
[  258.920404][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  260.340418][    T7] usb 2-1: Using ep0 maxpacket: 8
[  260.960513][    T7] usb 2-1: unable to get BOS descriptor or descriptor too short
[  261.051177][    T7] usb 2-1: unable to read config index 0 descriptor/start: -71
[  261.065135][    T7] usb 2-1: can't read configurations, error -71
[  263.454895][ T6497] syz.1.637 uses obsolete (PF_INET,SOCK_PACKET)
[  263.598611][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  263.860553][    T7] usb 5-1: Using ep0 maxpacket: 8
[  263.980798][    T7] usb 5-1: unable to get BOS descriptor or descriptor too short
[  264.080580][    T7] usb 5-1: unable to read config index 0 descriptor/start: -71
[  264.102299][    T7] usb 5-1: can't read configurations, error -71
[  264.184337][ T6509] netlink: set zone limit has 8 unknown bytes
[  264.920426][ T4548] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  265.990860][ T4548] usb 3-1: Using ep0 maxpacket: 32
[  266.383871][ T4548] usb 3-1: config 0 has an invalid interface number: 9 but max is 0
[  266.393376][ T4548] usb 3-1: config 0 has no interface number 0
[  266.577819][ T4548] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  266.620982][ T4548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.642724][ T4548] usb 3-1: Product: syz
[  266.647021][ T4548] usb 3-1: Manufacturer: syz
[  266.655409][ T4548] usb 3-1: SerialNumber: syz
[  266.670157][ T4548] usb 3-1: config 0 descriptor??
[  266.774069][ T4548] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  267.381445][   T26] kauditd_printk_skb: 32 callbacks suppressed
[  267.381459][   T26] audit: type=1326 audit(1746669503.346:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  267.437769][   T26] audit: type=1326 audit(1746669503.346:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  267.465671][   T26] audit: type=1326 audit(1746669503.396:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  267.506430][   T26] audit: type=1326 audit(1746669503.396:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  267.622978][   T26] audit: type=1326 audit(1746669503.396:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  267.790646][ T4208] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  268.060653][   T26] audit: type=1326 audit(1746669503.396:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  268.110599][ T4208] usb 5-1: Using ep0 maxpacket: 8
[  268.791978][ T4548] gspca_topro: reg_w err -110
[  269.050547][ T4548] gspca_topro: Sensor soi763a
[  269.059385][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.658'.
[  269.101163][ T4208] usb 5-1: unable to get BOS descriptor or descriptor too short
[  269.173176][ T4208] usb 5-1: unable to read config index 0 descriptor/start: -71
[  269.188036][ T4208] usb 5-1: can't read configurations, error -71
[  270.244141][ T4548] usb 3-1: USB disconnect, device number 9
[  274.660610][ T4208] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  274.910587][ T4208] usb 4-1: Using ep0 maxpacket: 8
[  275.030806][ T4208] usb 4-1: unable to get BOS descriptor or descriptor too short
[  275.090658][ T4208] usb 4-1: unable to read config index 0 descriptor/start: -71
[  275.102031][ T4208] usb 4-1: can't read configurations, error -71
[  276.490393][ T4271] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  278.070405][ T4271] usb 4-1: Using ep0 maxpacket: 8
[  279.380542][ T4271] usb 4-1: unable to read config index 0 descriptor/all
[  279.387554][ T4271] usb 4-1: can't read configurations, error -71
[  283.451281][ T4548] libceph: connect (1)[c::]:6789 error -101
[  283.461772][ T4548] libceph: mon0 (1)[c::]:6789 connect error
[  283.562094][ T6708] ceph: No mds server is up or the cluster is laggy
[  283.667857][ T6716] netlink: 'syz.0.705': attribute type 10 has an invalid length.
[  283.847921][ T6716] team0: Device ipvlan1 failed to register rx_handler
[  284.038793][ T6725] fuse: Bad value for 'fd'
[  287.389468][    T7] libceph: connect (1)[c::]:6789 error -101
[  287.407720][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  287.420952][ T6756] netlink: 68 bytes leftover after parsing attributes in process `syz.3.717'.
[  289.051173][ T4548] libceph: connect (1)[c::]:6789 error -101
[  289.137354][ T4548] libceph: mon0 (1)[c::]:6789 connect error
[  289.153142][ T6751] ceph: No mds server is up or the cluster is laggy
[  289.500177][ T6775] x_tables: duplicate entry at hook 2
[  290.771350][ T6784] fuse: Bad value for 'fd'
[  296.397612][ T6824] IPVS: ip_vs_add_dest(): server weight less than zero
[  296.466105][ T6816] hfsplus: unable to find HFS+ superblock
[  302.414897][ T4208] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  302.423973][ T4208] Bluetooth: hci1: Injecting HCI hardware error event
[  302.432499][ T4180] Bluetooth: hci1: hardware error 0x00
[  309.343710][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.390393][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.506856][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.530509][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.565443][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.579478][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.608936][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.657128][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.580495][ T4227] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  312.760617][ T6172] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  312.830536][ T4227] usb 2-1: Using ep0 maxpacket: 32
[  313.030870][ T4227] usb 2-1: config 1 interface 0 has no altsetting 0
[  313.121465][ T6172] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.143669][ T6172] usb 3-1: config 0 interface 0 has no altsetting 0
[  313.190866][ T4227] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  313.291641][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.300036][ T6172] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  313.419809][ T6979] hfsplus: unable to find HFS+ superblock
[  313.446807][ T4227] usb 2-1: Product: syz
[  313.475764][ T4227] usb 2-1: Manufacturer: syz
[  313.495920][ T6172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.523996][ T4227] usb 2-1: SerialNumber: syz
[  313.547923][ T6172] usb 3-1: config 0 descriptor??
[  314.690886][ T6172] hid-generic 0003:05AC:027A.0002: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0
[  314.733903][ T6990] netlink: 'syz.3.785': attribute type 10 has an invalid length.
[  314.739818][ T6172] usb 3-1: USB disconnect, device number 10
[  314.743437][ T6990] team0: Device ipvlan1 failed to register rx_handler
[  315.186956][ T6994] loop1: detected capacity change from 0 to 1024
[  315.479711][ T6994] EXT4-fs (loop1): Ignoring removed nobh option
[  315.480531][ T4227] usbhid 2-1:1.0: can't add hid device: -71
[  315.502143][ T6994] EXT4-fs (loop1): Ignoring removed bh option
[  315.542484][ T6994] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  315.548230][ T4227] usbhid: probe of 2-1:1.0 failed with error -71
[  315.629749][ T4227] usb 2-1: USB disconnect, device number 6
[  315.794561][ T6994] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  316.377080][ T7012] overlayfs: conflicting lowerdir path
[  316.891370][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  317.765217][ T7025] hfsplus: unable to find HFS+ superblock
[  318.525079][ T7034] tmpfs: Bad value for 'mpol'
[  320.369381][ T7046] netlink: 'syz.3.799': attribute type 10 has an invalid length.
[  320.392668][ T7046] team0: Device ipvlan1 failed to register rx_handler
[  320.495012][ T4209] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  320.760546][ T4209] usb 5-1: Using ep0 maxpacket: 32
[  320.961102][ T4209] usb 5-1: config 1 interface 0 has no altsetting 0
[  321.131215][ T4209] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  321.168104][ T4209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.250698][ T4209] usb 5-1: Product: syz
[  321.288342][ T4209] usb 5-1: Manufacturer: syz
[  321.335199][ T4209] usb 5-1: SerialNumber: syz
[  321.940548][ T4209] usbhid 5-1:1.0: can't add hid device: -71
[  321.946641][ T4209] usbhid: probe of 5-1:1.0 failed with error -71
[  322.060551][ T4209] usb 5-1: USB disconnect, device number 9
[  322.705135][ T7061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.803'.
[  322.730531][ T7061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.803'.
[  323.959299][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'.
[  325.265379][ T7093] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  325.277878][ T7093] FAT-fs (loop7): unable to read boot sector
[  329.510416][ T4213] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  329.971061][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.982268][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.992575][ T4213] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  330.001911][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.031087][ T4213] usb 3-1: config 0 descriptor??
[  330.070545][ T4213] usb 3-1: can't set config #0, error -71
[  330.090247][ T4213] usb 3-1: USB disconnect, device number 11
[  330.590340][ T7123] hfsplus: unable to find HFS+ superblock
[  331.105203][ T4213] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  331.138492][ T4213] Bluetooth: hci2: Injecting HCI hardware error event
[  331.891036][ T4180] Bluetooth: hci2: hardware error 0x00
[  332.242812][ T7147] tipc: Started in network mode
[  332.247933][ T7147] tipc: Node identity 4, cluster identity 4711
[  332.254274][ T7147] tipc: Node number set to 4
[  334.089415][ T7166] netlink: 'syz.0.832': attribute type 10 has an invalid length.
[  334.112297][ T7166] team0: Device ipvlan1 failed to register rx_handler
[  336.840290][ T7208] netlink: 'syz.2.843': attribute type 10 has an invalid length.
[  336.879465][ T7208] team0: Device ipvlan1 failed to register rx_handler
[  337.964442][ T7220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.845'.
[  337.982142][ T7220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.845'.
[  340.664556][ T7252] netlink: 'syz.3.855': attribute type 10 has an invalid length.
[  340.693825][ T7252] team0: Device ipvlan1 failed to register rx_handler
[  349.942551][ T4209] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  350.244340][ T7365] loop0: detected capacity change from 0 to 1024
[  350.320600][ T4209] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  350.338979][ T4209] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  350.389711][ T7365] EXT4-fs (loop0): Ignoring removed nobh option
[  350.423444][ T4209] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  350.439445][ T7365] EXT4-fs (loop0): Ignoring removed bh option
[  350.466940][ T7365] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  350.497028][ T4209] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  350.528818][ T4209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.703491][ T4209] usb 4-1: config 0 descriptor??
[  350.720921][ T7351] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  350.742727][ T4209] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  350.839097][ T7365] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  350.865225][    C1] vkms_vblank_simulate: vblank timer overrun
[  351.233027][ T7382] overlayfs: conflicting lowerdir path
[  353.063897][ T4209] usb 4-1: USB disconnect, device number 9
[  355.897001][ T7426] loop1: detected capacity change from 0 to 1024
[  356.401027][ T7426] EXT4-fs (loop1): Ignoring removed nobh option
[  356.421156][ T7426] EXT4-fs (loop1): Ignoring removed bh option
[  356.451290][ T7426] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  356.583997][ T7426] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  356.776161][ T7437] binder: 7435:7437 ioctl 4018620d 0 returned -22
[  358.254512][ T7426] overlayfs: conflicting lowerdir path
[  361.920516][ T4212] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  362.180504][ T4212] usb 3-1: Using ep0 maxpacket: 8
[  362.300697][ T4212] usb 3-1: unable to get BOS descriptor or descriptor too short
[  362.380760][ T4212] usb 3-1: unable to read config index 0 descriptor/start: -71
[  362.405771][ T4212] usb 3-1: can't read configurations, error -71
[  365.424064][ T7510] tipc: Started in network mode
[  365.459524][ T7510] tipc: Node identity 4, cluster identity 4711
[  365.519642][ T7510] tipc: Node number set to 4
[  367.041202][ T4753] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  367.930360][ T4753] usb 5-1: Using ep0 maxpacket: 8
[  368.100542][ T4753] usb 5-1: unable to get BOS descriptor or descriptor too short
[  368.270503][ T4753] usb 5-1: unable to read config index 0 descriptor/start: -71
[  368.399935][ T4753] usb 5-1: can't read configurations, error -71
[  368.841556][ T7565] netlink: 'syz.0.946': attribute type 10 has an invalid length.
[  368.862466][ T7565] team0: Device ipvlan1 failed to register rx_handler
[  369.171652][ T7555] block nbd2: shutting down sockets
[  369.190737][ T4753] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  370.004328][   T26] audit: type=1326 audit(1746669605.966:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  370.026468][    C1] vkms_vblank_simulate: vblank timer overrun
[  370.117367][   T26] audit: type=1326 audit(1746669606.016:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  370.813090][   T26] audit: type=1326 audit(1746669606.016:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  370.976902][ T4753] usb 5-1: Using ep0 maxpacket: 8
[  371.368128][   T26] audit: type=1326 audit(1746669606.026:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  371.480755][   T26] audit: type=1326 audit(1746669606.026:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  371.504543][   T26] audit: type=1326 audit(1746669606.026:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  371.568513][   T26] audit: type=1326 audit(1746669606.026:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  372.310520][ T4753] usb 5-1: unable to get BOS descriptor or descriptor too short
[  372.405808][   T26] audit: type=1326 audit(1746669606.096:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  372.972048][ T4209] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  373.386868][ T7609] netlink: 'syz.0.959': attribute type 10 has an invalid length.
[  373.396292][ T7609] team0: Device ipvlan1 failed to register rx_handler
[  373.404461][   T26] audit: type=1326 audit(1746669606.776:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  373.420462][ T4753] usb 5-1: unable to read config index 0 descriptor/start: -71
[  373.972704][   T26] audit: type=1326 audit(1746669606.776:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.3.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ae93969 code=0x7ffc0000
[  374.001922][ T4209] usb 3-1: Using ep0 maxpacket: 8
[  374.004499][ T4753] usb 5-1: can't read configurations, error -71
[  374.015897][ T4753] usb usb5-port1: attempt power cycle
[  375.271677][ T4209] usb 3-1: unable to get BOS descriptor or descriptor too short
[  375.284462][ T4208] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  375.500638][ T4209] usb 3-1: unable to read config index 0 descriptor/start: -71
[  375.508986][ T4209] usb 3-1: can't read configurations, error -71
[  376.960466][ T4208] usb 2-1: Using ep0 maxpacket: 32
[  377.130385][ T4209] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  377.790541][ T4208] usb 2-1: device descriptor read/all, error -71
[  377.950643][ T4209] usb 3-1: Using ep0 maxpacket: 32
[  378.201192][ T4209] usb 3-1: config 1 interface 0 has no altsetting 0
[  378.222381][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  378.370905][ T4209] usb 3-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  378.404368][ T4209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.512484][ T4209] usb 3-1: Product: syz
[  378.517160][ T4209] usb 3-1: Manufacturer: syz
[  378.522640][ T4209] usb 3-1: SerialNumber: syz
[  378.532502][ T7666] netlink: 'syz.4.974': attribute type 10 has an invalid length.
[  378.600585][ T4209] usb 3-1: can't set config #1, error -71
[  378.608059][ T7666] team0: Device ipvlan1 failed to register rx_handler
[  378.614492][ T4209] usb 3-1: USB disconnect, device number 15
[  378.792447][ T7666] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  380.220360][ T4753] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  380.620445][ T4753] usb 4-1: Using ep0 maxpacket: 8
[  381.867772][ T4753] usb 4-1: unable to get BOS descriptor or descriptor too short
[  382.436940][ T4753] usb 4-1: unable to read config index 0 descriptor/start: -71
[  382.444756][ T4753] usb 4-1: can't read configurations, error -71
[  382.515599][ T7705] device wg1 entered promiscuous mode
[  383.202208][ T7708] hfsplus: unable to find HFS+ superblock
[  385.616036][ T7732] loop4: detected capacity change from 0 to 1024
[  386.533554][ T7732] EXT4-fs (loop4): Ignoring removed nobh option
[  386.539813][ T7732] EXT4-fs (loop4): Ignoring removed bh option
[  386.616619][ T7732] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  386.803676][ T7732] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  389.261600][ T7758] hfsplus: unable to find HFS+ superblock
[  389.570634][ T6260] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  390.962805][ T6260] usb 5-1: Using ep0 maxpacket: 8
[  391.480520][ T6260] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.492252][ T6260] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  391.502874][ T6260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.524504][ T6260] usb 5-1: config 0 descriptor??
[  391.583487][ T6260] gspca_main: vc032x-2.14.0 probing 046d:0892
[  391.760550][ T4213] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  391.784084][ T7766] capability: warning: `syz.4.1002' uses 32-bit capabilities (legacy support in use)
[  392.003162][ T4213] usb 2-1: Using ep0 maxpacket: 16
[  392.146375][ T6260] gspca_vc032x: reg_r err -110
[  392.150652][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.151878][ T6260] vc032x: probe of 5-1:0.0 failed with error -110
[  392.380963][ T4213] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  392.656327][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.683500][ T4213] usb 2-1: config 0 descriptor??
[  392.711633][ T6260] usb 5-1: USB disconnect, device number 13
[  393.890444][ T4213] usbhid 2-1:0.0: can't add hid device: -71
[  393.965164][ T7807] loop2: detected capacity change from 0 to 1024
[  393.972235][ T4213] usbhid: probe of 2-1:0.0 failed with error -71
[  393.992710][ T7807] EXT4-fs (loop2): Ignoring removed nobh option
[  393.999986][ T7807] EXT4-fs (loop2): Ignoring removed bh option
[  394.000125][ T7812] netlink: 'syz.1.1015': attribute type 10 has an invalid length.
[  394.103368][ T7807] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  394.326001][ T4213] usb 2-1: USB disconnect, device number 9
[  394.335198][ T7812] team0: Device ipvlan1 failed to register rx_handler
[  394.436752][ T7807] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  396.185823][ T7839] binder: 7835:7839 ioctl 4018620d 0 returned -22
[  396.290359][ T4213] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  397.070700][ T4213] usb 2-1: Using ep0 maxpacket: 8
[  397.190491][ T4213] usb 2-1: unable to get BOS descriptor or descriptor too short
[  397.330685][ T4213] usb 2-1: unable to read config index 0 descriptor/start: -71
[  397.338951][ T4213] usb 2-1: can't read configurations, error -71
[  397.362131][ T7854] netlink: 'syz.3.1027': attribute type 10 has an invalid length.
[  397.373990][ T7854] team0: Device ipvlan1 failed to register rx_handler
[  397.556114][ T7864] loop4: detected capacity change from 0 to 1024
[  397.787650][ T7864] EXT4-fs (loop4): Ignoring removed nobh option
[  397.816684][ T7864] EXT4-fs (loop4): Ignoring removed bh option
[  397.858591][ T7864] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  398.097167][ T7864] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  399.909691][ T7887] binder: 7881:7887 ioctl 4018620d 0 returned -22
[  401.369614][ T7904] netlink: 'syz.4.1041': attribute type 10 has an invalid length.
[  401.414816][ T7904] team0: Device ipvlan1 failed to register rx_handler
[  401.630488][ T7913] loop0: detected capacity change from 0 to 1024
[  402.338206][ T7913] EXT4-fs (loop0): Ignoring removed nobh option
[  402.369147][ T7913] EXT4-fs (loop0): Ignoring removed bh option
[  402.410367][ T4213] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  402.465240][ T7913] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  402.618368][ T7913] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  402.622800][ T7917] lo speed is unknown, defaulting to 1000
[  403.390356][ T4213] usb 4-1: Using ep0 maxpacket: 8
[  404.611765][ T4213] usb 4-1: device descriptor read/all, error -71
[  406.185313][ T7957] loop0: detected capacity change from 0 to 1024
[  406.399318][ T7957] EXT4-fs (loop0): Ignoring removed nobh option
[  406.426932][ T7957] EXT4-fs (loop0): Ignoring removed bh option
[  406.437807][ T7957] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  406.494118][ T7961] fuseblk: Bad value for 'fd'
[  407.191118][ T7957] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  408.400914][  T145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.549375][  T145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.698518][  T145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.342984][  T145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.466205][ T7990] lo speed is unknown, defaulting to 1000
[  410.974580][ T7990] chnl_net:caif_netlink_parms(): no params data found
[  412.064513][ T8019] binder: 8009:8019 ioctl 4018620d 0 returned -22
[  412.394120][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.429451][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.460703][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[  412.487690][ T8035] loop4: detected capacity change from 0 to 1024
[  412.623583][ T8035] EXT4-fs (loop4): Ignoring removed nobh option
[  412.650788][ T8035] EXT4-fs (loop4): Ignoring removed bh option
[  412.665090][ T8030] fuseblk: Bad value for 'fd'
[  412.717523][ T7990] device bridge_slave_0 entered promiscuous mode
[  412.726416][ T8035] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  412.785212][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.840770][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.895427][ T7990] device bridge_slave_1 entered promiscuous mode
[  412.916848][ T8035] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  413.022814][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.143380][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.607326][ T7990] team0: Port device team_slave_0 added
[  414.638469][ T7990] team0: Port device team_slave_1 added
[  414.693188][ T4606] Bluetooth: hci2: command 0x041b tx timeout
[  414.770112][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.818248][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.909601][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.930173][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.951049][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.008489][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.391501][ T7990] device hsr_slave_0 entered promiscuous mode
[  415.584567][ T7990] device hsr_slave_1 entered promiscuous mode
[  415.594347][ T7990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  415.610352][ T7990] Cannot create hsr debugfs directory
[  416.386840][ T8092] binder: 8085:8092 ioctl 4018620d 0 returned -22
[  416.510373][   T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  417.014547][ T4246] Bluetooth: hci2: command 0x040f tx timeout
[  417.310514][   T23] usb 3-1: Using ep0 maxpacket: 8
[  417.461248][   T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  417.461724][   T23] usb 3-1: config 0 has no interface number 0
[  417.462163][   T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  417.462601][   T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  417.713785][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.811049][   T23] usb 3-1: config 0 descriptor??
[  417.882675][   T23] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  418.103922][ T4246] usb 3-1: USB disconnect, device number 16
[  418.164359][ T8112] loop1: detected capacity change from 0 to 1024
[  418.173097][  T145] device hsr_slave_0 left promiscuous mode
[  418.192767][  T145] device hsr_slave_1 left promiscuous mode
[  418.209532][  T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.344930][ T8112] EXT4-fs (loop1): Ignoring removed nobh option
[  418.406518][ T8112] EXT4-fs (loop1): Ignoring removed bh option
[  418.412894][  T145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.428674][ T8112] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  418.468038][  T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.497247][ T8122] fuseblk: Bad value for 'fd'
[  418.545156][  T145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.773207][  T145] device bridge_slave_1 left promiscuous mode
[  418.797398][ T8112] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  418.898154][  T145] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.081954][  T145] device bridge_slave_0 left promiscuous mode
[  419.123875][   T23] Bluetooth: hci2: command 0x0419 tx timeout
[  419.130191][  T145] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.151983][  T145] device veth1_macvtap left promiscuous mode
[  419.158418][  T145] device veth0_macvtap left promiscuous mode
[  419.164657][  T145] device veth1_vlan left promiscuous mode
[  419.235685][  T145] device veth0_vlan left promiscuous mode
[  419.509803][ T8112] overlayfs: missing 'lowerdir'
[  422.166586][ T8164] binder: 8159:8164 ioctl 4018620d 0 returned -22
[  422.908529][  T145] team0 (unregistering): Port device team_slave_1 removed
[  422.928312][  T145] team0 (unregistering): Port device team_slave_0 removed
[  422.947416][  T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.962165][  T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.203438][  T145] bond0 (unregistering): Released all slaves
[  424.414248][ T8184] fuseblk: Bad value for 'fd'
[  425.527440][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.714644][ T7990] 8021q: adding VLAN 0 to HW filter on device team0
[  425.754792][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  425.786451][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  425.836537][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  425.848712][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  425.868946][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.876093][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.911168][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  425.931540][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  425.955172][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.962295][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.990536][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  426.057261][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  426.077517][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  426.110172][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  426.142581][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  426.180414][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  426.208397][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  426.258039][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  426.292169][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  426.319669][ T8212] binder: 8208:8212 ioctl 4018620d 0 returned -22
[  426.349932][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  426.510957][ T7990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  426.660153][ T7990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  426.787416][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  426.855717][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  428.258757][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  428.276862][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  428.292108][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.468309][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  429.481411][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  429.781647][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  429.789883][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  429.919257][ T8259] fuseblk: Bad value for 'fd'
[  430.036138][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  430.233660][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  430.462028][ T7990] device veth0_vlan entered promiscuous mode
[  430.494693][ T7990] device veth1_vlan entered promiscuous mode
[  430.516135][ T7990] device veth0_macvtap entered promiscuous mode
[  430.681080][ T7990] device veth1_macvtap entered promiscuous mode
[  430.740757][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  430.748936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  430.830887][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  430.897683][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  430.954556][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  431.024300][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  431.165959][ T8283] binder: 8277:8283 ioctl 4018620d 0 returned -22
[  431.282573][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.420130][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.570920][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.743065][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.857545][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.868570][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.878567][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.894935][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.906677][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.916701][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.927188][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.937184][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.947628][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.957752][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.969998][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.980723][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.991338][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.002502][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.460631][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  432.469387][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  432.786637][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  432.795752][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  433.608938][ T8316] fuseblk: Bad value for 'fd'
[  434.305659][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.329517][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.395362][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  434.417984][ T8150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.456458][ T8150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.478931][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  434.506605][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'.
[  436.000529][ T4753] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  436.540667][ T4753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  436.566755][ T4753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.713043][ T4753] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  436.755989][ T4753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.828395][ T8375] fuseblk: Invalid rootmode
[  437.519800][ T4753] usb 3-1: config 0 descriptor??
[  438.261047][ T4753] usb 3-1: string descriptor 0 read error: -22
[  438.540683][ T4753] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71
[  438.576240][ T4753] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[  438.600029][ T4753] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71
[  438.623455][ T4753] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  438.658565][ T4753] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[  438.791678][ T4753] usb 3-1: USB disconnect, device number 17
[  439.660714][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  440.971236][ T8433] input: syz0 as /devices/virtual/input/input6
[  441.150956][ T8438] netlink: 'syz.4.1146': attribute type 1 has an invalid length.
[  441.192472][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  441.192486][   T26] audit: type=1326 audit(1746669677.156:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd2dca969 code=0x7ffc0000
[  441.883971][   T26] audit: type=1326 audit(1746669677.156:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcbd2dca969 code=0x7ffc0000
[  442.078116][   T26] audit: type=1326 audit(1746669677.156:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd2dca969 code=0x7ffc0000
[  442.256794][   T26] audit: type=1326 audit(1746669677.156:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd2dca969 code=0x7ffc0000
[  442.400347][ T4208] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  442.680626][ T4208] usb 3-1: Using ep0 maxpacket: 16
[  443.300545][ T4208] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  443.416769][ T4208] usb 3-1: config 0 has no interface number 0
[  443.588109][ T4208] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  443.700649][ T8473] netlink: 'syz.5.1155': attribute type 10 has an invalid length.
[  443.774691][ T8473] team0: Device ipvlan1 failed to register rx_handler
[  443.806328][ T4208] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  443.990527][ T4208] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  444.009805][ T4208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.050394][ T4208] usb 3-1: Product: syz
[  444.054604][ T4208] usb 3-1: Manufacturer: syz
[  444.059378][ T4208] usb 3-1: SerialNumber: syz
[  444.088690][ T4208] usb 3-1: config 0 descriptor??
[  444.136696][ T8459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  444.147163][ T8459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  444.451663][ T8459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  444.485852][ T8459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  444.850988][ T8459] udc-core: couldn't find an available UDC or it's busy
[  444.935734][ T8459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  445.070571][ T4208] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  445.110676][ T4208] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[  445.168466][ T4208] asix: probe of 3-1:0.251 failed with error -5
[  447.516057][   T23] usb 3-1: USB disconnect, device number 18
[  447.604422][ T8529] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  449.796760][ T8556] hfsplus: unable to find HFS+ superblock
[  451.362013][ T8581] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  453.210502][ T8612] hfsplus: unable to find HFS+ superblock
[  453.886282][ T8638] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  455.877806][ T8658] hfsplus: unable to find HFS+ superblock
[  455.930123][ T8661] hfsplus: unable to find HFS+ superblock
[  458.504060][ T8712] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  461.118659][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.137229][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.151439][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  461.162601][ T8756] trusted_key: encrypted_key: master key parameter 'uóer:sy00000000000004093' is invalid
[  461.212280][ T8754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.515093][ T8768] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  461.765518][ T8778] hfsplus: unable to find HFS+ superblock
[  467.760932][ T8835] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  468.994948][ T8860] hfsplus: unable to find HFS+ superblock
[  469.931450][ T8867] device netdevsim0 entered promiscuous mode
[  470.733888][ T8874] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock
[  470.755710][ T8874] usb usb8: usbfs: process 8874 (syz.4.1240) did not claim interface 0 before use
[  471.991331][ T8882] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  475.116429][ T8926] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  479.148005][ T8970] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  484.704136][ T9016] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  487.565650][ T9058] fuse: Unknown parameter 'group_id00000000000000000000'
[  489.154991][ T9070] hfsplus: unable to find HFS+ superblock
[  489.966815][ T9091] tipc: Started in network mode
[  489.971996][ T9091] tipc: Node identity 4, cluster identity 4711
[  489.978251][ T9091] tipc: Node number set to 4
[  494.545129][ T6260] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  494.690720][ T9130] loop0: detected capacity change from 0 to 1024
[  494.705040][ T9130] EXT4-fs (loop0): Ignoring removed nobh option
[  494.727475][ T9130] EXT4-fs (loop0): Ignoring removed bh option
[  494.734413][ T9130] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  494.870164][ T9130] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  495.460418][ T6260] usb 2-1: Using ep0 maxpacket: 32
[  495.624071][ T9146] overlayfs: missing 'lowerdir'
[  496.330649][ T9145] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  496.341954][ T6260] usb 2-1: unable to get BOS descriptor or descriptor too short
[  496.480461][ T6260] usb 2-1: unable to read config index 0 descriptor/start: -71
[  496.509041][ T6260] usb 2-1: can't read configurations, error -71
[  498.755840][ T6260] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  498.873318][ T9164] fuseblk: Unknown parameter 'user_id00000000000000000000'
[  499.650720][ T6260] usb 2-1: device descriptor read/all, error -71
[  499.674205][ T6260] usb usb2-port1: attempt power cycle
[  500.075594][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  500.098273][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  500.108375][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  500.119197][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  500.128727][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  500.874661][ T9175] fuse: Bad value for 'user_id'
[  501.093082][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  502.342919][ T9181] loop2: detected capacity change from 0 to 1024
[  502.533273][ T9181] EXT4-fs (loop2): Ignoring removed nobh option
[  502.539559][ T9181] EXT4-fs (loop2): Ignoring removed bh option
[  502.708918][ T9181] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  503.557892][ T9181] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  504.224269][ T9205] overlayfs: missing 'lowerdir'
[  505.554781][ T9215] tipc: Started in network mode
[  505.559785][ T9215] tipc: Node identity 4, cluster identity 4711
[  505.566028][ T9215] tipc: Node number set to 4
[  505.709754][    C0] hrtimer: interrupt took 65282 ns
[  506.182563][ T9229] hfsplus: unable to find HFS+ superblock
[  507.246864][ T9249] loop4: detected capacity change from 0 to 1024
[  507.475294][ T9251] fuseblk: Bad value for 'fd'
[  508.170551][ T9249] EXT4-fs (loop4): Ignoring removed nobh option
[  508.176964][ T9249] EXT4-fs (loop4): Ignoring removed bh option
[  508.187644][ T9249] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  508.277446][ T9249] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  508.303606][    C0] vkms_vblank_simulate: vblank timer overrun
[  508.601012][ T9265] overlayfs: missing 'workdir'
[  510.582284][ T9282] hfsplus: unable to find HFS+ superblock
[  510.698391][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'.
[  512.959122][ T9300] loop0: detected capacity change from 0 to 1024
[  513.043392][ T9305] fuseblk: Bad value for 'fd'
[  513.775289][ T9300] EXT4-fs (loop0): Ignoring removed nobh option
[  513.807333][ T9300] EXT4-fs (loop0): Ignoring removed bh option
[  513.844009][ T9300] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  513.897132][ T9300] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  514.963031][ T9320] overlayfs: missing 'workdir'
[  515.743531][ T9326] hfsplus: unable to find HFS+ superblock
[  517.066671][ T9349] fuseblk: Bad value for 'fd'
[  518.594581][ T9366] loop4: detected capacity change from 0 to 1024
[  518.660383][ T9366] EXT4-fs (loop4): Ignoring removed nobh option
[  518.666654][ T9366] EXT4-fs (loop4): Ignoring removed bh option
[  518.680646][ T9366] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  518.801136][ T9366] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  519.457437][ T9386] overlayfs: missing 'workdir'
[  520.535243][ T9389] hfsplus: unable to find HFS+ superblock
[  521.265716][ T9408] fuseblk: Unknown parameter '0x0000000000000003'
[  524.558160][ T9436] netlink: 'syz.4.1397': attribute type 10 has an invalid length.
[  524.598670][ T9436] team0: Device ipvlan1 failed to register rx_handler
[  525.248626][ T9449] fuseblk: Unknown parameter '0x0000000000000003'
[  526.821990][  T151] block nbd4: Attempted send on invalid socket
[  526.828429][  T151] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  526.845084][ T9468] SQUASHFS error: Failed to read block 0x0: -5
[  526.852011][ T9468] unable to read squashfs_super_block
[  526.961175][ T9471] netlink: 'syz.2.1409': attribute type 10 has an invalid length.
[  526.985902][ T9471] team0: Device ipvlan1 failed to register rx_handler
[  529.935329][ T9498] fuseblk: Unknown parameter '0x0000000000000003'
[  531.480615][ T9516] netlink: 'syz.0.1422': attribute type 10 has an invalid length.
[  531.492356][ T9516] team0: Device ipvlan1 failed to register rx_handler
[  535.155116][ T4208] Bluetooth: hci2: command 0x0406 tx timeout
[  536.501232][ T9552] netlink: 'syz.2.1434': attribute type 10 has an invalid length.
[  536.512995][ T9552] team0: Device ipvlan1 failed to register rx_handler
[  540.644473][ T9599] fuseblk: Unknown parameter '0x0000000000000003'
[  543.851558][ T9643] fuseblk: Unknown parameter '0x0000000000000003'
[  544.632284][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'.
[  544.757896][   T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  546.418004][ T9672] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  547.923311][ T9688] fuseblk: Unknown parameter 'fd0x0000000000000003'
[  548.153372][ T6172] Bluetooth: hci2: command 0x0405 tx timeout
[  549.550406][ T4753] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  549.810373][ T4753] usb 3-1: Using ep0 maxpacket: 32
[  550.011311][ T4753] usb 3-1: config 1 interface 0 has no altsetting 0
[  550.180947][ T4753] usb 3-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  550.212505][ T4753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.275178][ T4753] usb 3-1: Product: syz
[  550.306911][ T4753] usb 3-1: Manufacturer: syz
[  550.342389][ T4753] usb 3-1: SerialNumber: syz
[  551.081706][ T9719] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  552.263842][ T4753] usbhid 3-1:1.0: can't add hid device: -71
[  552.269847][ T4753] usbhid: probe of 3-1:1.0 failed with error -71
[  552.303479][ T4753] usb 3-1: USB disconnect, device number 20
[  555.813013][ T9761] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  556.579298][ T4548] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  556.685916][ T9779] fuseblk: Unknown parameter 'fd0x0000000000000003'
[  557.250664][ T4548] usb 3-1: Using ep0 maxpacket: 32
[  557.560508][ T4548] usb 3-1: config 1 interface 0 has no altsetting 0
[  558.460891][ T4548] usb 3-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  558.557974][ T4548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.723159][ T4548] usb 3-1: Product: syz
[  558.727378][ T4548] usb 3-1: Manufacturer: syz
[  558.737439][ T4548] usb 3-1: SerialNumber: syz
[  559.290497][ T4548] usb 3-1: can't set config #1, error -71
[  559.299759][ T4548] usb 3-1: USB disconnect, device number 21
[  562.470328][ T4753] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  562.547178][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  562.810556][ T4753] usb 6-1: Using ep0 maxpacket: 32
[  563.051809][ T9854] hfsplus: unable to find HFS+ superblock
[  563.200580][ T4753] usb 6-1: config 1 interface 0 has no altsetting 0
[  563.390639][ T4753] usb 6-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40
[  563.390671][ T4753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.390691][ T4753] usb 6-1: Product: syz
[  563.390706][ T4753] usb 6-1: Manufacturer: syz
[  563.390720][ T4753] usb 6-1: SerialNumber: syz
[  563.418530][ T9862] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  563.900051][ T9860] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1522'.
[  564.650387][ T6172] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  565.550370][ T4753] usbhid 6-1:1.0: can't add hid device: -71
[  565.556533][ T4753] usbhid: probe of 6-1:1.0 failed with error -71
[  565.632611][ T4753] usb 6-1: USB disconnect, device number 2
[  565.840547][ T6172] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  566.514862][ T6172] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  566.658243][ T6172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  566.669728][ T9889] hfsplus: unable to find HFS+ superblock
[  566.772971][ T6172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  566.784824][ T6172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  566.925263][ T6172] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  566.980369][ T6172] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  567.000279][ T6172] usb 5-1: Product: syz
[  567.004737][ T6172] usb 5-1: Manufacturer: syz
[  567.081435][ T6172] cdc_wdm 5-1:1.0: skipping garbage
[  567.086681][ T6172] cdc_wdm 5-1:1.0: skipping garbage
[  567.108110][ T6172] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  567.115940][ T6172] cdc_wdm 5-1:1.0: Unknown control protocol
[  567.658797][ T4548] usb 5-1: USB disconnect, device number 14
[  567.766532][ T9894] hfsplus: unable to find HFS+ superblock
[  570.058478][ T9929] fuse: Bad value for 'fd'
[  571.614109][ T9934] hfsplus: unable to find HFS+ superblock
[  572.038509][ T9942] hfsplus: unable to find HFS+ superblock
[  575.754544][ T9975] hfsplus: unable to find HFS+ superblock
[  575.883046][ T9976] fuse: Bad value for 'fd'
[  578.038862][ T9995] hfsplus: unable to find HFS+ superblock
[  582.072763][T10041] fuse: Bad value for 'fd'
[  585.302024][T10057] hfsplus: unable to find HFS+ superblock
[  588.356659][T10090] fuse: Invalid rootmode
[  591.086723][T10115] hfsplus: unable to find HFS+ superblock
[  591.547312][T10103] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  591.580750][T10103] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  593.041324][T10146] fuse: Invalid rootmode
[  594.854514][T10152] hfsplus: unable to find HFS+ superblock
[  595.216798][T10164] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1611'.
[  596.566276][T10179] netlink: 'syz.1.1619': attribute type 10 has an invalid length.
[  596.608554][T10179] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  597.621786][T10199] fuse: Invalid rootmode
[  598.558860][T10209] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1626'.
[  600.829537][T10230] hfsplus: unable to find HFS+ superblock
[  601.349240][T10243] fuse: Unknown parameter '00000000000000000000'
[  608.561804][T10297] hfsplus: unable to find HFS+ superblock
[  609.114011][T10304] fuse: Unknown parameter '00000000000000000000'
[  609.151328][T10308] vcan0: MTU too low for tipc bearer
[  609.165146][T10308] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  613.621663][T10342] hfsplus: unable to find HFS+ superblock
[  614.202674][T10351] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  614.684117][T10354] fuse: Unknown parameter '00000000000000000000'
[  623.794200][T10400] fuse: Unknown parameter 'user00000000000000000000'
[  623.973985][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  625.520379][T10409] hfsplus: unable to find HFS+ superblock
[  625.987213][ T1108] Bluetooth: hci5: command 0x1003 tx timeout
[  626.016891][ T4180] Bluetooth: hci5: sending frame failed (-49)
[  628.230575][ T4246] Bluetooth: hci5: command 0x1001 tx timeout
[  628.236653][ T4180] Bluetooth: hci5: sending frame failed (-49)
[  630.325102][T10450] fuse: Unknown parameter 'user00000000000000000000'
[  630.423256][ T4606] Bluetooth: hci5: command 0x1009 tx timeout
[  631.102288][T10455] hfsplus: unable to find HFS+ superblock
[  632.728681][T10472] autofs4:pid:10472:autofs_fill_super: called with bogus options
[  636.380575][ T4606] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  636.870281][ T4606] usb 5-1: Using ep0 maxpacket: 8
[  637.011487][ T4606] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  637.142358][ T4606] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  637.221699][ T4606] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  637.261229][ T4606] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  637.277335][ T4606] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  637.290257][ T4606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.597993][T10495] fuse: Unknown parameter 'user00000000000000000000'
[  637.711006][ T4606] usb 5-1: GET_CAPABILITIES returned 0
[  637.716797][ T4606] usbtmc 5-1:16.0: can't read capabilities
[  639.103324][ T4606] usb 5-1: USB disconnect, device number 15
[  640.425226][T10522] autofs4:pid:10522:autofs_fill_super: called with bogus options
[  640.760579][ T4209] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  641.030653][ T4209] usb 6-1: Using ep0 maxpacket: 32
[  641.150780][ T4209] usb 6-1: config 0 has no interfaces?
[  641.311709][ T4209] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  641.337612][ T4209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.387482][ T4209] usb 6-1: Product: syz
[  641.412343][ T4209] usb 6-1: Manufacturer: syz
[  641.448919][ T4209] usb 6-1: SerialNumber: syz
[  641.510635][ T4209] usb 6-1: config 0 descriptor??
[  642.394602][ T4214] hid-generic 0000:0004:0009.0004: unknown main item tag 0x0
[  642.415282][ T4214] hid-generic 0000:0004:0009.0004: unknown main item tag 0x0
[  642.427370][T10545] fuse: Unknown parameter 'user_i00000000000000000000'
[  642.504422][ T4214] hid-generic 0000:0004:0009.0004: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz1
[  643.169453][ T4214] usb 6-1: USB disconnect, device number 3
[  644.350477][T10562] siw: device registration error -23
[  644.549224][T10565] autofs4:pid:10565:autofs_fill_super: called with bogus options
[  648.220733][T10602] fuse: Bad value for 'fd'
[  649.494380][T10611] autofs4:pid:10611:autofs_fill_super: called with bogus options
[  650.651340][T10631] siw: device registration error -23
[  651.891549][T10648] fuse: Unknown parameter 'user_i00000000000000000000'
[  653.050418][T10660] loop2: detected capacity change from 0 to 7
[  653.312960][T10660] Dev loop2: unable to read RDB block 7
[  653.318939][T10660]  loop2: AHDI p1 p2 p3
[  653.323285][T10660] loop2: partition table partially beyond EOD, truncated
[  653.332694][T10660] loop2: p1 start 1601398130 is beyond EOD, truncated
[  653.339634][T10660] loop2: p2 start 1702059890 is beyond EOD, truncated
[  653.466774][T10663] autofs4:pid:10663:autofs_fill_super: called with bogus options
[  659.085763][T10713] autofs4:pid:10713:autofs_fill_super: called with bogus options
[  663.160274][   T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  663.973159][T10772] autofs4:pid:10772:autofs_fill_super: called with bogus options
[  664.130369][   T23] usb 6-1: Using ep0 maxpacket: 8
[  664.880394][   T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  664.894196][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.903638][   T23] usb 6-1: Product: syz
[  664.907893][   T23] usb 6-1: Manufacturer: syz
[  664.916009][   T23] usb 6-1: SerialNumber: syz
[  665.255643][   T23] usb 6-1: config 0 descriptor??
[  666.234582][   T23] usb read operation failed. (-71)
[  666.251077][   T23] usb write operation failed. (-71)
[  666.272167][   T23] usb write operation failed. (-71)
[  666.300288][   T23] usb write operation failed. (-71)
[  667.149209][   T23] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  667.158380][   T23] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  667.204966][   T23] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  667.374371][T10815] autofs4:pid:10815:autofs_fill_super: called with bogus options
[  669.654788][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1813'.
[  669.868414][T10852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1816'.
[  672.340366][T10876] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1819'.
[  680.694442][T10955] overlayfs: missing 'lowerdir'
[  681.324067][T10965] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1851'.
[  681.776634][T10972] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  682.695799][ T4214] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  682.943946][ T4214] usb 5-1: Using ep0 maxpacket: 32
[  683.060551][ T4214] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  683.070401][ T4214] usb 5-1: config 0 has no interface number 0
[  683.300597][ T4214] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  683.318638][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.335725][ T4214] usb 5-1: Product: syz
[  683.341749][ T4214] usb 5-1: Manufacturer: syz
[  683.346853][ T4214] usb 5-1: SerialNumber: syz
[  683.359086][ T4214] usb 5-1: config 0 descriptor??
[  683.373523][T11004] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  684.088009][ T4214] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  684.311313][ T4214] usb 5-1: qt2_attach - failed to power on unit: -71
[  684.323456][ T4214] quatech2: probe of 5-1:0.51 failed with error -71
[  684.494409][ T4214] usb 5-1: USB disconnect, device number 16
[  684.623983][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1870'.
[  685.850787][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  685.993218][ T6260] kernel write not supported for file /sg0 (pid: 6260 comm: kworker/0:9)
[  686.425448][T11041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1876'.
[  688.005086][T11055] hfsplus: unable to find HFS+ superblock
[  688.226641][T11058] netlink: 'syz.2.1882': attribute type 10 has an invalid length.
[  688.243704][T11058] device veth0_macvtap left promiscuous mode
[  688.269505][T11058] batman_adv: batadv0: Adding interface: macvtap0
[  688.280561][T11058] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.477524][T11058] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  691.008154][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1891'.
[  691.749808][T11095] hfsplus: unable to find HFS+ superblock
[  692.415520][T11101] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  693.203147][T11115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1900'.
[  694.028217][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[  694.062187][T11126] ==================================================================
[  694.070685][T11126] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550
[  694.077895][T11126] Read of size 1 at addr ffff88805ddc1030 by task syz.0.1902/11126
[  694.085900][T11126] 
[  694.088233][T11126] CPU: 0 PID: 11126 Comm: syz.0.1902 Not tainted 5.15.181-syzkaller #0
[  694.096477][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  694.106556][T11126] Call Trace:
[  694.109840][T11126]  <TASK>
[  694.112778][T11126]  dump_stack_lvl+0x168/0x230
[  694.117477][T11126]  ? show_regs_print_info+0x20/0x20
[  694.122683][T11126]  ? load_image+0x3b0/0x3b0
[  694.127186][T11126]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  694.132570][T11126]  ? __local_bh_disable_ip+0xfb/0x190
[  694.137957][T11126]  print_address_description+0x60/0x2d0
[  694.143513][T11126]  ? rose_get_neigh+0x17e/0x550
[  694.148368][T11126]  kasan_report+0xdf/0x130
[  694.152776][T11126]  ? rose_get_neigh+0x17e/0x550
[  694.157620][T11126]  rose_get_neigh+0x17e/0x550
[  694.162289][T11126]  rose_connect+0x412/0x1370
[  694.166865][T11126]  ? aa_sk_perm+0x7b4/0x8f0
[  694.171354][T11126]  ? rose_bind+0xa00/0xa00
[  694.175751][T11126]  ? aa_af_perm+0x270/0x2b0
[  694.180235][T11126]  ? tomoyo_socket_connect_permission+0x195/0x280
[  694.186656][T11126]  ? bpf_lsm_socket_connect+0x5/0x10
[  694.191923][T11126]  ? security_socket_connect+0x7c/0xa0
[  694.197372][T11126]  ? rose_bind+0xa00/0xa00
[  694.201791][T11126]  __sys_connect+0x389/0x410
[  694.206412][T11126]  ? __sys_connect_file+0x170/0x170
[  694.211657][T11126]  ? vtime_user_exit+0x2dc/0x400
[  694.216608][T11126]  __x64_sys_connect+0x76/0x80
[  694.221380][T11126]  do_syscall_64+0x4c/0xa0
[  694.225797][T11126]  ? clear_bhb_loop+0x15/0x70
[  694.230488][T11126]  ? clear_bhb_loop+0x15/0x70
[  694.235350][T11126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  694.241264][T11126] RIP: 0033:0x7feefa116969
[  694.245681][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  694.265297][T11126] RSP: 002b:00007feef7f5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  694.273743][T11126] RAX: ffffffffffffffda RBX: 00007feefa33e080 RCX: 00007feefa116969
[  694.281719][T11126] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000004
[  694.289693][T11126] RBP: 00007feefa198ab1 R08: 0000000000000000 R09: 0000000000000000
[  694.297673][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  694.305644][T11126] R13: 0000000000000000 R14: 00007feefa33e080 R15: 00007ffd093f72d8
[  694.313632][T11126]  </TASK>
[  694.316650][T11126] 
[  694.318966][T11126] Allocated by task 11026:
[  694.323377][T11126]  __kasan_kmalloc+0xb5/0xf0
[  694.327972][T11126]  __alloc_skb+0x22c/0x750
[  694.332391][T11126]  __skb_tstamp_tx+0x402/0x9f0
[  694.337266][T11126]  tun_net_xmit+0x997/0x13e0
[  694.341864][T11126]  dev_hard_start_xmit+0x2a5/0x7e0
[  694.346979][T11126]  sch_direct_xmit+0x24e/0x4a0
[  694.351760][T11126]  __dev_queue_xmit+0x170e/0x2ed0
[  694.356791][T11126]  ip_finish_output2+0xc69/0x1080
[  694.361826][T11126]  ip_send_skb+0x129/0x1c0
[  694.366243][T11126]  udp_send_skb+0x94a/0x1330
[  694.370838][T11126]  udp_sendmsg+0x19ca/0x2320
[  694.375443][T11126]  ____sys_sendmsg+0x5a2/0x8c0
[  694.380234][T11126]  ___sys_sendmsg+0x1f0/0x260
[  694.384920][T11126]  __sys_sendmmsg+0x27c/0x4a0
[  694.389606][T11126]  __x64_sys_sendmmsg+0x9c/0xb0
[  694.394471][T11126]  do_syscall_64+0x4c/0xa0
[  694.398886][T11126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  694.404783][T11126] 
[  694.407102][T11126] Freed by task 11026:
[  694.411159][T11126]  kasan_set_track+0x4b/0x70
[  694.415754][T11126]  kasan_set_free_info+0x1f/0x40
[  694.420691][T11126]  ____kasan_slab_free+0xd5/0x110
[  694.425720][T11126]  slab_free_freelist_hook+0xea/0x170
[  694.431096][T11126]  kfree+0xef/0x2a0
[  694.434905][T11126]  skb_release_data+0x6fe/0x850
[  694.439760][T11126]  __skb_complete_tx_timestamp+0x34e/0x540
[  694.445572][T11126]  tun_net_xmit+0x997/0x13e0
[  694.450164][T11126]  dev_hard_start_xmit+0x2a5/0x7e0
[  694.455282][T11126]  sch_direct_xmit+0x24e/0x4a0
[  694.460053][T11126]  __dev_queue_xmit+0x170e/0x2ed0
[  694.465087][T11126]  ip_finish_output2+0xc69/0x1080
[  694.470121][T11126]  ip_send_skb+0x129/0x1c0
[  694.474548][T11126]  udp_send_skb+0x94a/0x1330
[  694.479131][T11126]  udp_sendmsg+0x19ca/0x2320
[  694.483716][T11126]  ____sys_sendmsg+0x5a2/0x8c0
[  694.488498][T11126]  ___sys_sendmsg+0x1f0/0x260
[  694.493176][T11126]  __sys_sendmmsg+0x27c/0x4a0
[  694.497853][T11126]  __x64_sys_sendmmsg+0x9c/0xb0
[  694.502724][T11126]  do_syscall_64+0x4c/0xa0
[  694.507135][T11126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  694.513029][T11126] 
[  694.515343][T11126] Last potentially related work creation:
[  694.521045][T11126]  kasan_save_stack+0x35/0x60
[  694.525749][T11126]  kasan_record_aux_stack+0xb8/0x100
[  694.531032][T11126]  insert_work+0x54/0x3d0
[  694.535366][T11126]  __queue_work+0x9c5/0xd50
[  694.539867][T11126]  call_timer_fn+0x16c/0x530
[  694.544464][T11126]  __run_timers+0x550/0x7c0
[  694.548962][T11126]  run_timer_softirq+0x63/0xf0
[  694.553721][T11126]  handle_softirqs+0x328/0x820
[  694.558483][T11126]  run_ksoftirqd+0x98/0xf0
[  694.562893][T11126]  smpboot_thread_fn+0x4f6/0x970
[  694.567828][T11126]  kthread+0x436/0x520
[  694.571891][T11126]  ret_from_fork+0x1f/0x30
[  694.576324][T11126] 
[  694.578642][T11126] The buggy address belongs to the object at ffff88805ddc1000
[  694.578642][T11126]  which belongs to the cache kmalloc-512 of size 512
[  694.592691][T11126] The buggy address is located 48 bytes inside of
[  694.592691][T11126]  512-byte region [ffff88805ddc1000, ffff88805ddc1200)
[  694.605880][T11126] The buggy address belongs to the page:
[  694.611514][T11126] page:ffffea0001777000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ddc0
[  694.621666][T11126] head:ffffea0001777000 order:2 compound_mapcount:0 compound_pincount:0
[  694.629996][T11126] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  694.637999][T11126] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80
[  694.646687][T11126] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  694.655260][T11126] page dumped because: kasan: bad access detected
[  694.661672][T11126] page_owner tracks the page as allocated
[  694.667377][T11126] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4212, ts 65982577934, free_ts 14092248000
[  694.687255][T11126]  get_page_from_freelist+0x1b77/0x1c60
[  694.692810][T11126]  __alloc_pages+0x1e1/0x470
[  694.697398][T11126]  new_slab+0xc0/0x4b0
[  694.701462][T11126]  ___slab_alloc+0x81e/0xdf0
[  694.706050][T11126]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  694.711856][T11126]  __alloc_skb+0x22c/0x750
[  694.716269][T11126]  __neigh_notify+0x142/0x2e0
[  694.720950][T11126]  neigh_cleanup_and_release+0x9d/0x250
[  694.726497][T11126]  neigh_remove_one+0x4e8/0x5f0
[  694.731352][T11126]  ___neigh_create+0x468/0x2250
[  694.736201][T11126]  ip6_finish_output2+0xa01/0x1500
[  694.741313][T11126]  ndisc_send_skb+0xbea/0x14a0
[  694.746078][T11126]  addrconf_dad_completed+0x798/0xca0
[  694.751449][T11126]  addrconf_dad_work+0xc70/0x1520
[  694.756470][T11126]  process_one_work+0x863/0x1000
[  694.761404][T11126]  worker_thread+0xaa8/0x12a0
[  694.766080][T11126] page last free stack trace:
[  694.770740][T11126]  free_unref_page_prepare+0x637/0x6c0
[  694.776200][T11126]  free_unref_page+0x94/0x280
[  694.780876][T11126]  free_contig_range+0x96/0xf0
[  694.785634][T11126]  destroy_args+0xef/0x8b0
[  694.790056][T11126]  debug_vm_pgtable+0x318/0x370
[  694.794922][T11126]  do_one_initcall+0x1ee/0x680
[  694.799689][T11126]  do_initcall_level+0x137/0x1f0
[  694.804632][T11126]  do_initcalls+0x4b/0x90
[  694.808978][T11126]  kernel_init_freeable+0x3ce/0x560
[  694.814179][T11126]  kernel_init+0x19/0x1b0
[  694.818510][T11126]  ret_from_fork+0x1f/0x30
[  694.822924][T11126] 
[  694.825243][T11126] Memory state around the buggy address:
[  694.830868][T11126]  ffff88805ddc0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  694.838927][T11126]  ffff88805ddc0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  694.846980][T11126] >ffff88805ddc1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  694.855032][T11126]                                      ^
[  694.860651][T11126]  ffff88805ddc1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  694.868703][T11126]  ffff88805ddc1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  694.876751][T11126] ==================================================================
[  694.884805][T11126] Disabling lock debugging due to kernel taint
[  694.891181][T11126] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  694.898364][T11126] CPU: 0 PID: 11126 Comm: syz.0.1902 Tainted: G    B             5.15.181-syzkaller #0
[  694.907981][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  694.918028][T11126] Call Trace:
[  694.921302][T11126]  <TASK>
[  694.924224][T11126]  dump_stack_lvl+0x168/0x230
[  694.928921][T11126]  ? show_regs_print_info+0x20/0x20
[  694.934122][T11126]  ? load_image+0x3b0/0x3b0
[  694.938627][T11126]  panic+0x2c9/0x7f0
[  694.942530][T11126]  ? bpf_jit_dump+0xd0/0xd0
[  694.947036][T11126]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[  694.952933][T11126]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  694.958834][T11126]  ? _raw_spin_unlock+0x40/0x40
[  694.963708][T11126]  ? rose_get_neigh+0x17e/0x550
[  694.968569][T11126]  check_panic_on_warn+0x80/0xa0
[  694.973510][T11126]  ? rose_get_neigh+0x17e/0x550
[  694.978367][T11126]  end_report+0x6d/0xf0
[  694.982527][T11126]  kasan_report+0x102/0x130
[  694.987029][T11126]  ? rose_get_neigh+0x17e/0x550
[  694.991968][T11126]  rose_get_neigh+0x17e/0x550
[  694.996642][T11126]  rose_connect+0x412/0x1370
[  695.001232][T11126]  ? aa_sk_perm+0x7b4/0x8f0
[  695.005736][T11126]  ? rose_bind+0xa00/0xa00
[  695.010152][T11126]  ? aa_af_perm+0x270/0x2b0
[  695.014658][T11126]  ? tomoyo_socket_connect_permission+0x195/0x280
[  695.021073][T11126]  ? bpf_lsm_socket_connect+0x5/0x10
[  695.026359][T11126]  ? security_socket_connect+0x7c/0xa0
[  695.031815][T11126]  ? rose_bind+0xa00/0xa00
[  695.036370][T11126]  __sys_connect+0x389/0x410
[  695.040977][T11126]  ? __sys_connect_file+0x170/0x170
[  695.046201][T11126]  ? vtime_user_exit+0x2dc/0x400
[  695.051162][T11126]  __x64_sys_connect+0x76/0x80
[  695.055935][T11126]  do_syscall_64+0x4c/0xa0
[  695.060359][T11126]  ? clear_bhb_loop+0x15/0x70
[  695.065053][T11126]  ? clear_bhb_loop+0x15/0x70
[  695.069732][T11126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  695.075644][T11126] RIP: 0033:0x7feefa116969
[  695.080046][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  695.099639][T11126] RSP: 002b:00007feef7f5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  695.108039][T11126] RAX: ffffffffffffffda RBX: 00007feefa33e080 RCX: 00007feefa116969
[  695.116010][T11126] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000004
[  695.123962][T11126] RBP: 00007feefa198ab1 R08: 0000000000000000 R09: 0000000000000000
[  695.131914][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  695.139867][T11126] R13: 0000000000000000 R14: 00007feefa33e080 R15: 00007ffd093f72d8
[  695.147830][T11126]  </TASK>
[  695.151146][T11126] Kernel Offset: disabled
[  695.155465][T11126] Rebooting in 86400 seconds..